Changelog

Follow up on the latest improvements and updates.

RSS

A new version of the
DNSFilter Relay
is now available! You can download updated binaries from the DNSFilter Dashboard (
Deployments → Relay → Install
) or refer to our Help Docs.
Docker images will begin auto-updating to v1.3.0 in the coming weeks.
Note: Older Ubuntu distributions may require manual update
instructions here
.
What's New
🔧
Custom DNS Support for Registration
The Relay can now use custom DNS servers when registering or validating with the remote API. This makes deployments more reliable in restricted or non-standard DNS environments.
🛠️
Improvements
💾
Improved File Handling Reliability
New failover mechanisms have been added to ensure file saving remains reliable across unexpected interruptions or edge cases.
🛡️
Security & Package Updates
Core packages have been updated and security improvements implemented, addressing vulnerabilities identified through Docker Hub scans and dependency audits.

fixed

improved

Active Directory Sync Tool

6/23 June 23 Active Directory Sync Tool v3.7.1

A new version of the Active Directory Sync Tool is now available from the DNSFilter dashboard. This update is recommended for users syncing large on-premises Active Directory environments.
What's New
🌳 Improved OU Tree Sync for Large Environments
The AD Sync Tool now batches large OU trees into smaller subtrees during sync, solving issues where partial trees appeared due to API timeouts. This ensures the full organizational hierarchy is captured, even in complex AD setups.
📄 Full OU Visibility in Configurator
The configurator previously displayed only the first 1000 Organizational Units due to a paging limit. Pagination is now implemented correctly, allowing all OUs to be browsed and selected as expected.

improved

Windows Roaming Client

RC Release Channels

Beta

5/29 May 29 - Windows Roaming Client v2.1.0 Beta

A new version of the Windows Roaming Client, v2.1.0 Beta, is now available via the Beta channel. This version can be downloaded from the dashboard
Deployments → Roaming Clients → Install Guide
, or by selecting the
Install Guide
from the
Control Center
in the
Roaming Client Management
dashboard.
For more details on Release Channels and the current versions available for both Beta and Production channels, check out our help docs.
What's New in Windows Roaming Client v2.1.0
🧰 ARM64 Architecture Support
You've asked for it, you've got it! With version 2.1.0 Beta, we now have a separate build to support devices that run ARM64-based architecture. This tandem approach ensures that protection can extend to devices outside of the x64 Windows architecture.
🌐 IPv6 Support
We’ve added full
IPv6 support
to the Windows Roaming Client. This means better compatibility and future-proofing as internet providers and networks increasingly rely on IPv6. DNS queries from IPv6-enabled devices will now route properly through DNSFilter, just like IPv4.
Where previous versions had provision for enabling IPv6 through a registry modification, this version tries IPv6 by default first.
🛡️ Improved Stability & Self-Healing with the Service Manager
This release introduces a new
Service Manager
that monitors and protects the Roaming Client in real time. Here’s what it does for you:
  • Monitors health automatically:
    It checks in every 5 minutes to make sure the Roaming Client is running as expected.
  • Restarts services if needed:
    If something goes wrong (like a service unexpectedly stops), Service Manager will try to restart it immediately—no action needed from you.
  • Self-repairs and verifies installations:
    It helps ensure upgrades and installations are smooth and that everything’s configured properly.
  • Runs as a Windows service:
    Seamless operation in the background with better support for enterprise environments.
  • Now included in the installer:
    Service Manager is packaged with the standard installer, making setup easier.
You can think of this as a built-in safety net—if the client goes down, it’ll get itself back up again.
🧹 Smarter Startup with Built-in Cleanup
We’ve added a feature to clean up leftover or outdated registry settings automatically when the Roaming Client starts. This helps avoid issues caused by old configurations and keeps the app running clean.
🪲 Bug Fixes
Better Handling of API Errors
If there's a temporary issue with the DNSFilter API, the Roaming Client will now retry instead of shutting down. This ensures more consistent service.
Startup Reliability During API Downtime
The client now starts and registers correctly even if there’s a temporary issue reaching DNSFilter’s servers.

new

improved

Mac Roaming Client

RC Release Channels

5/28 May 28 - MacOS Roaming Client v2.2.0 Production

A new version of the MacOS Roaming Client is now available via the Production channel.
This version can be downloaded from the dashboard
Deployments → Roaming Clients → Install Guide → MacOS.
Auto-update will push out the new release to RCs in the Production Release Channel incrementally over the next week or two. Please refer to our release status page for the latest available versions in both Beta and Production channels.
⚠️ Important Note:
Existing customers running older MacOS Roaming Client versions should have received an email to advise on prerequisite mobileConfig installation via MDM to avoid spurious dialog box appearances on endpoints.
More information >>
New / Enhanced Features
🛠️ System Extension / DNS Proxy
The new 2.x codebase now leverages a system extension and DNS proxy on the endpoint. This enhances security and performance. As noted above, installation of two mobileConfig profiles on the endpoint is a strongly suggested prerequisite as failing to do so will result in the end user receiving two dialog boxes asking for permission to run the extension and proxy.
🔁 Improved Connection Handling After TLS Errors
We fixed an issue where the macOS client wouldn’t retry regular (non-TLS) connections after a secure (TLS) connection failed. This could lead to delays or missed DNS requests. The client now handles retries more reliably to maintain smooth operation.
⚙️ Reliable Configuration Updates
The macOS extension now correctly re-reads its configuration file and applies fallback settings if some values are missing. This ensures the extension behaves consistently during startup and while running.
🧹 Uninstall Script Improvements
We updated the macOS uninstall script to better handle data privacy settings. It now properly reads and filters the necessary configuration details, making the uninstall process cleaner and more accurate.
We've been hard at work making a lot of under the hood improvements to the DNSFilter dashboard and underlying REST API. Since our last update, the following items of note have been completed:
✨ What's New
New Alert for Large Cleanup Jobs
When starting large Roaming Client (RC) cleanup tasks, users will now see a message letting them know it may take time. These jobs run in the background and won’t disrupt other activity.
New “Content Server” Category Option
The Domain Report interface now includes a new “Content Server” choice under “Proposed Category,” offering more precise domain categorization.
Query Log Export Changes
Exporting query logs is now more reliable. A new 50,000-line limit has been added, with helpful tooltips explaining how to work with larger datasets. We recommend use of our Data Export functionality to automatically export query logs to your SIEM or S3 bucket of choice.
API Key Management
We’ve streamlined API key management by limiting the number of keys shown to five and removing unnecessary paging.
More Accurate RC Cleanup Status
RC cleanup no longer leaves “All” or “Protected” status counts out of date—they’ll now reflect accurately.
Faster Profile Update Visibility
Changes to your user profile will now show up immediately—no need to refresh or navigate away.
Updated Uninstall Notifications
Suborg-level uninstall alerts now show “Include Organization Admins” for better clarity. Previous text has been cleaned up.
🪲 Notable Bug Fixes
Billing Page Performance Boost:
Cleaned up unnecessary calls to speed up billing page loads.
User Downgrade Fix:
Permissions now apply correctly when downgrading from super admin to admin.
MSP Suborg Restrictions
: You can no longer add sub-orgs to canceled MSP accounts.
Fixed Chrome RC Sidebar Bug:
Suborg menus now display correctly after being promoted to an MSP.
Pagination Improvements:
Filter changes now return you to the first page, and page counts are shown clearly in the RC Management and Query Logs.
Fixed Category Filter Overflow:
Multiple category filters no longer cause issues with the grid layout.
🔒 Privacy & Security Enhancements
**Query Log Privacy Reinforced:88 When PII Limitation is enabled, you can no longer drill into RC-specific query logs.
Multi-Factor Auth Recovery Code Improvements:
Users can no longer skip the final step of saving new recovery codes.
🧰 Behind-the-Scenes Improvements
These changes help keep everything running smoothly:
  • Enhanced rate limiting for certain APIs
  • Updated license card designs and compliance indicators
  • Backend code cleanup and security patches
  • New APIs and endpoints for license and org management
  • More robust error handling for exports, MFA, and user updates
  • Better roaming client syncing behavior to avoid unnecessary updates
  • Database version upgrades for backend systems
- Improved filtering, validation, and export functions across several pages

improved

fixed

Active Directory Sync Tool

5/21 May 21 - Active Directory Sync Tool v3.6.0

A new version of the Active Directory Sync Tool, version 3.6.0 has been released and is available from the DNSFilter dashboard. DNSFilter recommends that users of existing Active Directory Sync Tools perform a manual upgrade to this version when practical.
What's New
🎨 Updated Branding in "About" Screen
The "About" section in the AD Sync Tool now displays the refreshed DNSFilter logo along with the current release date for improved clarity and brand consistency.
✅ Better Sync Recovery After Errors
We improved how the AD Sync Tool handles errors when fetching group users. Previously, certain errors would force the tool to restart the entire sync job, sometimes leaving data incomplete. The tool now recovers more gracefully, allowing the sync process to complete without unnecessary resets.
🔧 Compatibility Enhancements in Version 3.6.0
This release includes several updates to improve compatibility and ensure smoother integration with a wider range of directory environments.

new

improved

Mac Roaming Client

RC Release Channels

Beta

5/15 May 15 - MacOS Roaming Client v2.2.0 Beta

A new version of the MacOS Roaming Client is now available via the Beta channel.
This version can be downloaded from the dashboard
Deployments → Roaming Clients → Install Guide.
Auto-update will push out the new release to RCs in the Beta Release Channel within the next 24-72 hours. Please refer to our release status page for the latest available versions in both Beta and Production channels.
🚨 Important Note:
Existing Beta customers running older MacOS Beta versions should have received an email to advise on prerequisite mobileConfig installation via MDM to avoid spurious dialog box appearances on endpoints.
More information >>
New / Enhanced Features
🛠️ System Extension / DNS Proxy
The new 2.x codebase now leverages a system extension and DNS proxy on the endpoint. This enhances security and performance. As noted above, installation of two mobileConfig profiles on the endpoint is a strongly suggested prerequisite as failing to do so will result in the end user receiving two dialog boxes asking for permission to run the extension and proxy.
🔁 Improved Connection Handling After TLS Errors
We fixed an issue where the macOS client wouldn’t retry regular (non-TLS) connections after a secure (TLS) connection failed. This could lead to delays or missed DNS requests. The client now handles retries more reliably to maintain smooth operation.
⚙️ Reliable Configuration Updates
The macOS extension now correctly re-reads its configuration file and applies fallback settings if some values are missing. This ensures the extension behaves consistently during startup and while running.
🧹 Uninstall Script Improvements
We updated the macOS uninstall script to better handle data privacy settings. It now properly reads and filters the necessary configuration details, making the uninstall process cleaner and more accurate.

new

Windows Roaming Client

RC Release Channels

5/14 May 14 - Windows Roaming Client v2.0.10 Production

A new version of the Windows RC is now available via the Production channel. This version can be downloaded from the dashboard Deployments → Roaming Clients → Install Guide, or by selecting the Install Guide from the Control Center in the Roaming Client Management dashboard.
Organizations with Automatic Updates turned on will start receiving this update incrementally from the date of this release.
For more details on Release Channels and the current versions available for both Beta and Production channels, check out our help docs.
What's New
Version 2.0.10 represents a cumulative build that incorporates all of the enhancements delivered in the previous 2.0.8 Production version, and the two Beta versions since that was released.
The following enhancements and fixes are being delivered as part and parcel of this release:
More Reliable Connectivity Checks
The Roaming Client now automatically retries its connection to our service if a temporary error occurs, preventing unnecessary shutdowns. This ensures more stable operation by giving the client multiple chances to validate its identity before taking action.
Update Process Optimization
We’ve streamlined how the Roaming Client checks for updates, reducing redundant status checks that were happening too frequently. This improvement boosts performance and efficiency in the background.
Smoother Startup with Built-in Registry Cleanup
The Roaming Client now includes automatic registry cleanup during startup, improving stability—especially when the system was previously in an unstable or "dirty" network state. This replaces the need for manual PowerShell scripts and ensures a smoother initialization process.
Fixed Intermittent Offline Issues
We've resolved a bug that occasionally caused the Roaming Client to go offline unexpectedly, leading to DNS filtering interruptions and VPN disconnections. This fix ensures a more stable and consistent connection, even after the device wakes from sleep.
Improved Network Protocol Switching
Devices that previously cycled between online and offline states every 15 seconds when switching between IPv6 and IPv4 networks will now remain connected. Transitions between network types are now seamless and reliable.

new

improved

Windows Roaming Client

RC Release Channels

Beta

5/8 May 8 - Windows Roaming Client v2.0.10 Beta

A new version of the Windows RC is now available via the Beta channel, superseding the 2.0.9 Beta. This version can be downloaded from the dashboard Deployments → Roaming Clients → Install Guide, or by selecting the Install Guide from the Control Center in the Roaming Client Management dashboard.
For more details on Release Channels and the current versions available for both Beta and Production channels, check out our help docs.
🪲 Bug Fixes & Improvements
More Reliable Connectivity Checks
The Roaming Client now automatically retries its connection to our service if a temporary error occurs, preventing unnecessary shutdowns. This ensures more stable operation by giving the client multiple chances to validate its identity before taking action.
Update Process Optimization
We’ve streamlined how the Roaming Client checks for updates, reducing redundant status checks that were happening too frequently. This improvement boosts performance and efficiency in the background.

new

Windows Roaming Client

RC Release Channels

Beta

4/30 April 30 - Windows Roaming Client v2.0.9 Beta

A new version of the Windows RC is now available via the Beta channel. This version can be downloaded from the dashboard Deployments → Roaming Clients → Install Guide, or by selecting the Install Guide from the Control Center in the Roaming Client Management dashboard.
For more details on Release Channels and the current versions available for both Beta and Production channels, check out our help docs.
🛠️ Improvements & Bug Fixes
Smoother Startup with Built-in Registry Cleanup
The Roaming Client now includes automatic registry cleanup during startup, improving stability—especially when the system was previously in an unstable or "dirty" network state. This replaces the need for manual PowerShell scripts and ensures a smoother initialization process.
Fixed Intermittent Offline Issues
We've resolved a bug that occasionally caused the Roaming Client to go offline unexpectedly, leading to DNS filtering interruptions and VPN disconnections. This fix ensures a more stable and consistent connection, even after the device wakes from sleep.
Improved Network Protocol Switching
Devices that previously cycled between online and offline states every 15 seconds when switching between IPv6 and IPv4 networks will now remain connected. Transitions between network types are now seamless and reliable.
Load More