How to Set Up FirewallDNS on Mozilla Firefox
By [FILL IN], [FILL IN] · Last updated
Firefox calls DNS-over-HTTPS "DNS over HTTPS" in its privacy settings and lets you choose a custom provider. In some regions it is switched on by default with another provider, which can bypass a network DNS filter.
Requirements
- A FirewallDNS account with your public IP address registered in the dashboard
- Your FirewallDNS addresses, shown under [VERIFY: dashboard menu name where these values are shown]
- Firefox on Windows, macOS, Linux or Android
- Your DoH URL: [VERIFY: your personal DoH URL from the dashboard]
No account yet? See pricing.
Step by step
1.Open the menu (three lines) and choose Settings.
Image placeholder: screenshot of step 1 on Mozilla Firefox [VERIFY] 2.Select Privacy & Security in the sidebar.
Image placeholder: screenshot of step 2 on Mozilla Firefox [VERIFY] 3.Scroll to DNS over HTTPS.
Image placeholder: screenshot of step 3 on Mozilla Firefox [VERIFY] 4.Choose Max Protection (always use secure DNS) or Increased Protection.
Image placeholder: screenshot of step 4 on Mozilla Firefox [VERIFY] 5.Under Choose provider, select Custom.
Image placeholder: screenshot of step 5 on Mozilla Firefox [VERIFY] 6.Enter [VERIFY: your personal DoH URL from the dashboard].
Image placeholder: screenshot of step 6 on Mozilla Firefox [VERIFY] 7.Restart Firefox.
Image placeholder: screenshot of step 7 on Mozilla Firefox [VERIFY]
How to verify it works
- Restart the browser so the new setting is used for every tab.
- Visit a few well-known websites.
- Open the query log in your FirewallDNS dashboard and confirm that new lookups from your network appear within a few seconds.
- Try a domain you have added to your own blocklist; the page should fail to load.
How to revert
- Open Settings > Privacy & Security > DNS over HTTPS again.
- Switch the secure DNS option back to the default (use current service provider) or turn it off.
- Restart the browser.
Troubleshooting
- Firefox ignores my network DNS filter
- DNS over HTTPS may be on with another provider. Set it to FirewallDNS or Off.
- Sites fail with Max Protection
- Max Protection does not fall back to system DNS. Check the URL, or use Increased Protection.
- Setting is locked
- An enterprise policy is applied. Ask your administrator.
FAQ
What is the canary domain?
Networks can signal Firefox to disable default DoH by blocking use-application-dns.net. It does not override a provider you chose yourself.
Max or Increased Protection?
Max never falls back to unencrypted DNS. Increased falls back if DoH fails.
Does this cover other apps?
No, only Firefox.
Can I set this by policy?
Yes, with the DNSOverHTTPS enterprise policy.
Is a FirewallDNS DoH URL available?
[VERIFY: DoH availability in the dashboard]