Connor DeLoach • Corpus Christi Parish
This page explains how I use NextDNS to control devices, reduce tracking, and add practical friction to online distractions.
I want to share effective and not too technical tools I think every Catholic should use for themselves and their families. Using the default ISP DNS is like leaving the front door wide open to the internet. I want to share with you what DNS is, why it's important, and how to use it to control your family's internet.
DNS is the lookup system that turns names like
google.com into the numerical addresses devices use to connect.
That lookup runs constantly in the background for websites, apps, smart TVs, and games. Most homes use ISP DNS by default and never revisit the choice.
DNS requests reveal where your devices are trying to go. With a filtered provider, many risky domains can be blocked before pages or app content load.
NextDNS still does normal DNS lookup, but adds policy controls: security blocklists, category filters, logging, and encrypted DNS.
Because this happens at the DNS layer, it can block trackers and malicious domains across many apps, not only in your browser.
Most households do not need every toggle. These are the practical reasons this setup tends to hold up over time.
You can start with malware and tracker blocking in minutes, then add stricter filters over time.
A router-level setup applies rules before apps and websites load, including on devices where browser add-ons do not help.
Use one baseline profile for everyone, then create stricter rules for child devices or school/work hours.
Schedule social, gaming, and video sites so your environment supports your goals instead of fighting them.
If you are starting from scratch, this order gives quick wins without overcomplicating your first week.
Step 1
Enable malware protection, block known trackers, and turn on encryption for DNS requests.
Step 2
Use category blocks for broad guardrails, then add specific site blocks for recurring edge cases.
Step 3
Add schedules for school, prayer, family time, and focused work so limits match your daily rhythm.
These are the screens most people use regularly. Click any image to view it full size.
Block by category
Set broad content boundaries by topic for the entire household.
Click image to enlarge.
Block by site
Target specific sites and app domains when categories are too blunt.
Click image to enlarge.
Bypass protection
Block common methods people use to sidestep household DNS rules.
Click image to enlarge.
NextDNS offers curated blocklists that update continuously, so you do not need to maintain your own list of tracking domains.
A strong low-breakage starting point is often HaGeZi - Multi LIGHT.
Rules do not have to be all-or-nothing. Scheduled deny rules let you block distractions during school or work windows while allowing normal use later.
This is useful for both children and adults who want stronger guardrails around intentional focus time.
No. Most families only need a small set of features: security blocklists, category filtering, and basic logs. You can start simple and improve gradually.
Not at all. Parents use it for family safety, and adults use it for privacy and distraction control during work or study blocks.
No. NextDNS is a network-level filter, not full endpoint protection. It should complement, not replace, normal device security and good browsing habits.
Yes. You can tune category strictness, block specific sites, and set schedules around school, prayer, family time, and focused work.
Many people ask whether this replaces Covenant Eyes. Usually the best answer is that they solve different parts of the same problem. NextDNS mainly handles prevention at the network layer, while Covenant Eyes mainly handles accountability and follow-through.
Prevents a lot of bad or distracting traffic before apps and sites load.
Creates accountability through monitoring, reports, and support conversations.
One lowers temptation surfaces; the other strengthens accountability.
NextDNS is one of the highest-impact upgrades you can make to a home network: affordable, flexible, and effective for both family safety and personal discipline online.
Keep the first setup simple, observe your logs for a few days, then add stricter rules only where you consistently need them.
Personal note: NextDNS has solid documentation and setup guides, but if you are having trouble configuring it, I am happy to help you get it working. Email me at connor-next@deloach.dev .