Mudfish DNS
Available nowv0.1.2
Encrypt your website address lookups to make them harder to read or tamper with on the network. Get started with settings already in place.
Free to useWindows / Linux / macOS
Free to use
Servers already configured
You choose when to start and stop
A simple start
Use the defaults without looking up or entering server addresses.
Install the app for your operating system and open Mudfish DNS. Installing it does not turn on DNS protection.
Send requests to the configured encrypted DNS servers. On first start, macOS asks for consent to background operation and approval of the extension.
DNS keeps running when you close the window. Press Stop DNS in the app or tray whenever you want to turn it off.
Protecting address lookups
Before a website opens, your computer asks a DNS server for its address. Mudfish DNS sends that request over an encrypted connection.
Encrypted DNS servers from Cloudflare, Quad9 and Google are configured by default. Server certificates are verified, too.
If a server fails, requests are retried with another server. The defaults do not automatically fall back to unencrypted DNS.
Optional on Windows / Linux
Web protection may help you connect to sites on some restricted networks. Apply it to selected apps and domains, or add exceptions.
Coverage and technical detailsMUDFISH DNS v0.1.2
Choose the app for your operating system.
Windows 10 2004 or later · x64
MSI installer
Download for WindowsRequires build 19041 or later. An internet connection is needed during installation if WebView2 is not already installed. Open Mudfish DNS from the Start menu.
Remove a previous 0.1.0 EXE installation from Windows Apps & features before installing the MSI. Your settings are preserved.
Debian / Ubuntu · x64
DEB package
Download for LinuxOpen Mudfish DNS from your applications menu. Web protection and app/domain selection require Linux 6.6 or later with eBPF. App selection also requires cgroup v2 and kernel BTF.
macOS 13 or later · Apple Silicon
DMG installer
Download for macOSSupports DNS protection. Web protection and app/domain selection are not yet supported.
On first start, consent to background operation and approve the system extension and DNS Proxy in macOS. DNS protection continues after exiting the app; press Stop to turn it off.
FAQ
Yes. Mudfish DNS is free.
The app is stopped after installation. Protection turns on when you press Start. On Stop, Windows/Linux restore the system DNS settings changed by the app, and macOS disables the DNS Proxy.
Closing the window hides it in the tray. The DNS service keeps running even if you exit the tray app. Press Stop first to turn DNS off.
Recording is off by default. When enabled, it shows up to 32 recent DNS lookups and web connections; macOS shows DNS lookups. On Windows/Linux, web processing events are also written to service logs. Clearing the on-screen list does not delete those logs.
Describe the issue on the Report a problem page, review the diagnostics, then send your report. Recent DNS lookups and web connections are included only if you choose to include them.
DoH and DoT verify server certificates. Requests are distributed across servers by weight and retried on failure. Responses are cached for their TTL; clear the cache in Settings.
The legacy Mudfish UDP/TCP protocols are also supported, without server authentication. A SOCKS5 proxy can be used for DoH, DoT, TCP DNS and web connections, but cannot be combined with UDP upstreams.
On Windows/Linux, web protection splits HTTP Host and HTTPS TLS SNI data on TCP ports 80/443. It does not cover HTTP/3, QUIC or domains inside ECH. Results depend on the network; reopen existing connections after applying settings.
Requests may use plaintext if you explicitly allow plaintext DNS servers or exclude domains on Windows/Linux. Already encrypted DNS requests, such as an app's own DoH, are not intercepted.