DNS and Ad Blocking Release Notes
Updates for DNS servers, filtering services, and ad and tracker blockers.
Products (13)
Latest DNS and Ad Blocking Updates
- Nov 10, 2026
- Date parsed from source:Nov 10, 2026
- First seen by Releasebot:Nov 11, 2026
v2.7.0
Control D improves its website and Dashboard with clearer naming, tighter SSO access controls and security, better performance, and fixes across sign-in, scheduling, billing, account settings, and other areas.
Improved
- Renamed Personal to Individual and Legacy DNS to Do53 across the website and Dashboard.
- Organization SSO settings for Okta and Entra ID now have a "Viewer access for users outside mapped groups" switch. When it is off, users from your email domains who are not in a mapped group can't sign in.
- Demo links across the site now lead to a single Book a demo page.
- Strengthened security around SSO sign-in and session recordings.
- Fixed issues in sign-in redirects, Add Endpoint, Domain Test, the Weekly Schedule editor, API Tokens, Activity Log search, Custom Rules, Clients, receipts, invoices, plan changes, organization billing pages, Account theme settings and page titles, plus some minor UI/UX issues.
- Performance improvements across the website.
- Nov 10, 2026
- Date parsed from source:Nov 10, 2026
- First seen by Releasebot:Nov 11, 2026
11/10 November 10 – Web Application and API Update
DNSFilter expands its AppAware library with more than 2,500 applications, giving admins finer traffic controls and reporting options. The release also clarifies filtering and unblock request controls, improves CyberSight error handling and access scoping, and fixes translated form details alongside general stability improvements.
✨ What's New
AppAware Library Expansion – More than 2,500 new applications have been added to the AppAware library across nine categories, including Technology, Cybersecurity, Remote Desktop, VPN and Proxy, Messaging, and File Sharing. Admins get finer control over remote desktop, VPN and proxy, security, and technology traffic, with the new apps available for policy and reporting alongside other tracked applications.
🛠️ Improvements
Clearer Filtering Mode Controls – The Roaming Client Control Center drawer and navigation now read "Filtering Mode" instead of "Connection & Filtering Mode." The boxed compatibility banner is replaced with concise helper text and a Show More link that lists compatible Roaming Client versions.
Clearer "Ignore Request" Wording in Unblock Requests – "Deny Request & Ignore" is now "Ignore Request," so the label matches what it does: clearing a request without notifying the requester, who can submit another one later.
Consistent CyberSight Timeline Error Messaging – When a Timeline search fails, the Events, Activity Breakdown, and per-device Timeline widgets now show the same clear messages as the rest of CyberSight. Retry appears only when it can succeed, and a failure on one device's row no longer affects the others.
Stronger Access and Data Scoping – Strengthened access checks on organization license details and policy subnet information so users only see data for organizations they're permitted to access.
🪲 Bug Fixes
Policy and Category on the Unblock Request Access Form – Resolved an issue where visitors with a non-English browser saw the request access form without the policy name or blocked category. The form now shows the same details in every language.
Unblock Request Access Form Tab Title – Resolved an issue where the browser tab title stayed in English on translated request access forms. The tab now matches the form's language.
Plus general performance and stability improvements across the dashboard.
Original source All of your release notes in one feed
Join Releasebot and get updates from Control D and hundreds of other software products.
- Nov 5, 2026
- Date parsed from source:Nov 5, 2026
- First seen by Releasebot:Nov 6, 2026
AdGuard For Windows by Adguard
AdGuard for Windows 8.0.4
AdGuard For Windows releases a patch with ClientHello splitting, Quad9 support for DNS-over-QUIC, and improved accessibility and Hebrew RTL support. It also resolves numerous compatibility, stability, filter editor, and localization issues while improving app performance.
In this patch, we’ve done quite a bit of work: added a couple of new settings, polished the UI, made the app more accessible, and fixed a lot of bugs related to the migration to v8.0, the filter editor, and localization.
UI
The check for updates now runs every time you open the Updates tab, shows a Try again button if the check fails, and correctly reports if filters are up to date.
Export logs and Logging level have moved to Support → Logs. We’ve also refreshed text styles and indents across the app and resolved several minor UI issues.
You can now navigate the app with your mouse’s back and forward buttons. In App management, apps that may have compatibility issues are now marked with a note, and the section remains fast even with a long list of apps.
Accessibility
Voice output for inactive settings has been added across the Tracking protection, DNS server, DNS rules, User rules, Allowlist, and Blocklist* screens.
Now, when protection is off, screen readers explain why a setting is inactive, and toggles are announced by name in the app’s language. Focus lands on the first element of every screen, screens can be opened with Space or Enter, and Escape reliably closes dialogs.
The Hebrew interface now displays right-to-left correctly: the sidebar is on the right, the toggles are mirrored, and the divider between the sidebar and the selected tab is back. We’ll continue to improve RTL in future updates. Translations have been updated, and numbers in Statistics are now formatted correctly for Asian locales.
New feature: ClientHello split
We’ve added a setting that gives you more control over connection handling. Specifically, it splits ClientHellos into two fragments. To choose the strategy that suits your needs, go to Tracking protection → Custom → Protect against DPI and toggle on ClientHello split. We do recommend you to read more about this feature in our knowledge base before enabling it. Using it without understanding how it works may break access to some unencrypted websites.
Aside from adding a new feature, we removed the Block Flash setting from Tracking protection, added support for Quad9 to DNS-over-QUIC protocol, and updated the DNS provider catalog. We also added Blocking mode for DNS rules and updated DnsLibs and CoreLibs.
Filter editor and extensions
In this update, we fixed many issues in the filter editor and extensions that affected their proper functioning and caused the app to crash. We addressed null elements in the list, fixed errors in the processes of copying and pasting rules, as well as importing and exporting extensions and user scripts. The localization of warnings has been updated, and the app no longer crashes when adding or deleting rules in bulk.
Compatibility
A lot of work was done to restore the functionality and, in some cases, broaden compatibility with platforms and tools like Ollama, pgAdmin 4, iCloud for Windows, and Windscribe.
We also restored compatibility with several dozen games, including Dota 2, Roblox, Genshin Impact, and Call of Duty, and apps like Forza Horizon 6, Terraria, WeMod/Wand, Affinity Photo, and RStudio. The complete list can be found in the corresponding GitHub repository.
Finally, we fixed an increase in CPU usage and a memory leak linked to login attempts into the Epic Games Store was fixed, as well as issues with compatibility with Kaspersky and Firefox apps.
Stability and performance
We increased the app’s stability and performance. Now, startup and sorting in Language-specific ad blocking are faster, and protection restarts smoothly. We fixed crashes that occurred during OS shutdowns and when running out of disk space while exporting logs.
AdGuard for Windows vs BSOD errors
We regularly update drivers to steadily reduce the number of BSODs users experience. If you encounter a “blue screen of death” error, please contact our support team and attach a minidump so that we can determine the cause. Read the dedicated Knowledge base article on how to create minidumps for reports.
We appreciate every report because it is not always possible to test every existing system and application configuration. Thanks to your input, we can find and fix problems faster.
Changelog
Improvements
- Host rules blocking mode now matches Android behavior when set to a zero IP address #5923
Fixes
- A 403 error appears on the planetazdorovo.ru website in Firefox browser #5655
- UI freezes, and hovers stop working if a tab has been in use for too long #5692
- Wrong encoding of latin letters in user filters imported from TXT UTF-8 files #5707
- Websites don’t open correctly when AdGuard and Kaspersky are both active #5797
- The Disable Windows OS ads setting changes without user consent #5910
- Firefox opens blank pages #5994
- The App management module does not remove obsolete app versions after updates #6003
- DNS filtering doesn’t work when AdGuard (WFP) and AdGuard VPN (Wintun) are enabled at the same time #6025
- CPU usage increases, and AdguardSvc.exe suffers memory leaks during log in attempts into Epic Games Store #6028
- AdGuard UI opens when PC starts #6030
- AdGuard launches on startup despite autostart being disabled #6031
- AdGuard always starts in English despite another language being set as default #6040
- Impossible to install userscript Bypass All Shortlinks Debloated #6059
- Unnecessary AdGuard notifications appear in the Windows notification panel #6072
- Legacy filter editor displays filters as inactive when ad blocking is enabled #6085
- Manually created userscript and userstyle extensions fail update checks and do not save changes #6093
- Adguard.exe crashes on OS shutdown #6164
- AdguardSvc.exe polls WMI Win32_UserAccount every ~11 s, generating continuous SMB/LSA traffic to the domain controller on domain-joined machines #6184
- AdGuard’s UI doesn’t open automatically after the update #6196
- Copyright and legal trademark are incorrectly encoded in details of .exe files #6213
- A crash on Windows 11 (v.25H2) corrupts AdGuard’s user.config file, preventing the app from starting #6229
- AdGuard does not detect Browser assistant when used with Brave Origin browser #6232
CoreLibs (Filtering engine)
- Updated CoreLibs to v1.23.0 #6221
DnsLibs (DNS filtering engine)
- Updated DnsLibs to v2.10.2 #6234
Sciter (UI engine)
- Updated Sciter to v1.0.1247 #6110
- Nov 3, 2026
- Date parsed from source:Nov 3, 2026
- First seen by Releasebot:Nov 3, 2026
11/03 November 3 – Web Application and API Update
DNSFilter updates MSP branding settings and clarifies policy inheritance and roaming client deletion. The release also improves CyberSight report loading, filtering, privacy protections, and allow-list enforcement, alongside broader dashboard performance and stability improvements.
✨ What's New
Branding Settings for MSPs with Custom Domains – MSPs using a CNAME-based custom domain are migrating to a managed branding subdomain and the new Branding settings page, replacing the legacy Whitelabel page. Existing branding assets carry over automatically.
🛠️ Improvements
Clearer Policy and Block Page Inheritance – The LAN Subnets, Relays, and Roaming Clients grids now show the inherited Policy or Block Page name with an "Inherited from Site" label beneath it, replacing the map-pin icon. Global policies show a globe icon beside the name.
Clearer Roaming Client Delete Messaging – Updated copy across the Clean Up Tool, Actions menu, and delete modal explains the difference between Delete and Delete & Uninstall, which now appears only when uninstall-capable agents are selected. Single Roaming Client deletes also require type-to-confirm.
🪲 Bug Fixes
CyberSight Search and Report Loading – Resolved an issue where searching Activity Logs could spin for minutes and falsely report "No results found." Slow-loading reports such as Top Categories, Top Risky Users, AI Usage, and the Events chart are improved as well.
CyberSight Short Time Range Reports – Resolved an issue where Active Time Trend, AI Usage Over Time, Threat Trends, and the Timeline Events chart could fail to load for short time ranges, such as a single hour.
CyberSight Filter Reliability – Resolved an issue where text filters containing a "<" character were altered before being applied. Filters now search exactly what was typed. Privacy protections for redacted content in CyberSight were also strengthened.
MSP Allow-List Enforcement in CyberSight – Resolved an issue where MSP users restricted to an allow list of organizations could retrieve CyberSight data outside that list. Configured access restrictions now apply to every CyberSight request.
Plus general performance and stability improvements across the dashboard.
Original source - Nov 3, 2026
- Date parsed from source:Nov 3, 2026
- First seen by Releasebot:Nov 3, 2026
v2.6.0
Control D adds endpoint groups and CSV export, syncs dashboard themes across browsers, and lets sub-organizations forward unblock requests to parent organizations. The update also fixes issues across management pages, settings, exports, accessibility, and the interface.
Added
- Added endpoint groups to the Endpoints page. Create, rename and delete groups from the Endpoints menu, move several endpoints at once, or pick a group when editing an endpoint.
- Added Export to CSV to the Endpoints menu. The file lists every endpoint with its name, ID, device type, app version, comments, profile and status.
- Your dashboard theme is now saved to your account and follows you across browsers.
- Sub-organizations can now forward an unblock request to their parent organization when a domain is blocked by the parent organization's profile.
- Fixed issues in endpoints, schedules, the IPs and Clients pages, the Activity Log, CSV exports, sub-organization settings, provisioning codes, API tokens, plan changes, locked profile settings, accessibility and some minor UI/UX issues.
- Oct 29, 2026
- Date parsed from source:Oct 29, 2026
- First seen by Releasebot:Oct 30, 2026
nextdns-v1.49.0
nextdns improves reliability with fixes for blackholed DNS-over-HTTPS connections and OpenWrt shutdown and IPv6 relay DNS behavior, alongside cache-hashing and dependency maintenance updates.
Changelog
🛠️ Maintenance Changes
- a499fd6 chore: revert unintended OpenWrt timeout push
- 9b004cc chore: use Digest.WriteString when hashing cache keys (#1140)
- bea67d3 chore(deps): bump golang.org/x/net from 0.59.0 to 0.61.0 (#1132)
- 4f224c9 chore(deps): bump github.com/godbus/dbus/v5 from 5.2.2 to 5.2.4 (#1133)
- e2385ce chore: revert unintended direct xxhash push
- a7aeb33 chore: hash small cache keys with one-shot xxhash
- 0214daf chore(deps): bump golang.org/x/net from 0.57.0 to 0.59.0 (#1126)
- 0784abf chore(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0 (#1127)
🤖 Continuous Integration Changes
- 778fab6 ci: publish supported architectures in APT metadata
- 73e5b1d ci: pin Fedora cloud image for snapshot tests
Others
- 567a8c5 bug: increase OpenWrt shutdown timeout to 30 seconds (#1142)
- 6d22256 bug: increase OpenWrt shutdown timeout to 30 seconds
- c54e2d1 bug: override OpenWrt IPv6 relay DNS with router resolver (#1138)
- f0a498c bug: recover from blackholed DoH connections
- Oct 28, 2026
- Date parsed from source:Oct 28, 2026
- First seen by Releasebot:Oct 30, 2026
v2.5.0
Control D adds bulk internal-domain entry, a DNS Exfiltration Blocking page and live service status, while strengthening required 2FA enrollment. It also improves internationalized domain testing and fixes issues across sign-on, profiles, sub-organizations, endpoint editing, activity logs and more.
Added
- Added bulk add for Internal Domains on Network Settings.
- Added a new DNS Exfiltration Blocking feature page.
- Added a live Control D service status badge to the Status page.
- Mandatory 2FA can now only be turned on by an owner who already has 2FA on their own account, so owners can no longer lock themselves out. Organizations that require 2FA now block members until they enroll, from the first page load, after a reload and on direct links.ded.
- Domain Test now handles internationalized domain names correctly.
- Fixed issues in single sign-on, Copy Rule, Profile Options (including Branded block response), Services overrides for sub-organizations, Clients and IPs selection, bulk endpoint editing, Activity Log pagination, Identity & Access member removal and returning from maintenance mode, plus some minor UI/UX issues.
- Oct 28, 2026
- Date parsed from source:Oct 28, 2026
- First seen by Releasebot:Oct 28, 2026
10/28 October 28 – Web Application and API Update
DNSFilter adds multilingual access requests and Relay deployment for Core plans, improves data export recovery and email delivery, and fixes Query Log, identity connection, dark mode, validation, and subscription migration issues for a smoother dashboard experience.
✨ What's New
Unblock Request Form in Eight More Languages – The Request Access form on block pages now displays in Italian, Dutch, Portuguese, Russian, Swedish, Czech, Turkish, and Ukrainian when the user's browser is set to one of those languages, joining Spanish, French, and German.
🛠️ Improvements
Data Export Restart in API Documentation – The API docs now include the call to restart a failed Data Export, using the saved connection settings so no SIEM credentials are needed.
Query Log Page Size and Email Delivery – The Query Logs report now caps page size at 1,000 rows for more consistent performance. Outgoing notification, report, and alert emails are also retried automatically if delivery fails, so fewer messages get dropped.
🪲 Bug Fixes
Identity Connection Management – Resolved issues where canceling an organization left its Identity Connection in an orphaned state, and where deleting an Identity Connection returned a 404 error. Collection description edits also now save as expected.
DNS Query Log Reliability – Resolved several Query Log issues: narrowly filtered views now show all matching rows and page correctly, exiting Investigate mode no longer leaves stale rows on the Blocked tab, and exports with the Threat filter applied no longer fail with an "exceeds 50,000 records" error.
Dark Mode Hidden Text – Resolved an issue where text typed into the signup goal field and the Add IP/Hostname drawer was invisible in dark mode.
Clearer Validation Messages – Saving a profile with an invalid name or phone number, and adding a user through the API with a missing or unrecognized role, now return clear validation messages instead of generic or server errors.
Wi-Fi Count After Pro to Plus Migration – Fixed an issue where Pro to Plus migrations kept the old Wi-Fi (access point) count instead of removing it, since Plus includes access points. The leftover count caused later subscription changes to be rejected.
Relay Now Available on Core Plan – Core plan organizations can now access the Relays page and deploy Relay from the dashboard, since Relay is included in Core.
Plus general performance and stability improvements across the dashboard.
Original source - Oct 22, 2026
- Date parsed from source:Oct 22, 2026
- First seen by Releasebot:Oct 22, 2026
AdGuard For Windows by Adguard
AdGuard for Windows 8.0.3
AdGuard For Windows updates its filtering engine and blacklists compromised eMudhra certificates, leaving affected HTTPS checks to browsers.
In response to the eMudhra certificate authority incident, we’ve blacklisted the compromised certificates. HTTPS filtering will not work on domains using these certificates — such connections will be validated by the browser itself.
Safe choices include:
- Chrome, Edge, Opera, Brave, Vivaldi (revoked via Google CRLSet)
- Firefox (revoked via Mozilla OneCRL)
Changelog
CoreLibs (Filtering engine)
- CoreLibs updated to v1.22.31 #6279
- Oct 21, 2026
- Date parsed from source:Oct 21, 2026
- First seen by Releasebot:Oct 21, 2026
AdGuard for Android 4.15.1
AdGuard Android blocks compromised eMudhra certificates, leaving affected HTTPS connections to be validated by the browser.
In response to the eMudhra certificate authority incident, we’ve blacklisted the compromised certificates. HTTPS filtering will not work on domains using these certificates — such connections will be validated by the browser itself.
Safe choices include:
- Chrome, Edge, Opera, Brave, Vivaldi (revoked via Google CRLSet)
- Firefox (revoked via Mozilla OneCRL)