webfilter-ng

At a glance

• Editor score
  3.2 / 10
• Pricing
  Open source
• Best for
  Linux gateways needing open filtering controls
• Paid from
  Free
• Custom blocklists
  Yes
• Facts checked
  20 Sep 2026

• Where it wins

  • Filters HTTP, HTTPS, TLS, and DNS traffic without TLS decryption
  • Supports whitelists, blacklists, SafeSearch, and custom blocklists
  • Integrates with squidGuard, bind9, iptables, and DNS services

• Where it doesn't

  • Limited to Linux computers, routers, and internet gateways
  • Does not focus on scheduling or activity reporting
  • Requires self-hosted deployment and Linux networking configuration

Our verdict on webfilter-ng

webfilter-ng is an open-source transparent web filter for Linux computers, routers, and internet gateways. It suits administrators who want gateway-wide controls without requiring client proxy configuration or TLS decryption. Filtering can use requested domains, HTTP Host fields, TLS SNI, DNS services, squidGuard, categorify.org, or local whitelist and blacklist files. Its deployment model is focused: run it at a Linux gateway or as a standalone Linux installation, rather than across a broad mix of endpoint platforms.

The filtering scope is its clearest strength. webfilter-ng covers HTTP, HTTPS, TLS, and DNS-based filtering, with bypass protection for DNS controls. Administrators can enforce SafeSearch for Google and Bing through DNS configuration, apply squidGuard-based categories, and connect the optional categorify.org API for content categorization. The surrounding Linux ecosystem is practical, with integrations including bind9, iptables, CleanBrowsing DNS, and squidGuard. That combination gives technically minded teams several ways to fit filtering into existing gateway and resolver designs.

webfilter-ng is a focused choice for organizations that value open-source control, local configuration, and Linux gateway deployment. Its narrow platform coverage and self-hosted model make it less suitable for teams seeking centralized multi-platform administration. It also does not center on scheduling or activity reporting, so buyers prioritizing time-based policies or usage visibility should consider a product built around those capabilities instead. Choose webfilter-ng when transparent traffic filtering, SafeSearch enforcement, custom lists, and infrastructure-level control matter more than a broad management surface.

Your product? Our editors can test webfilter-ng in depth and publish a review, labelled as paid · from $149/mo →

webfilter-ng pricing

webfilter-ng fact sheet

webfilter-ng integrations

webfilter-ng lists 5 integrations on its own site.

• squidGuard
• CleanBrowsing DNS
• categorify.org
• bind9
• iptables

Alternatives to webfilter-ng

• Cloudflare GatewayA broad filtering gateway with strong policy controls and basic reporting.9.2
• Cisco UmbrellaA mature enterprise filter with broad controls, integrations, and contact-sales pricing.9.1
• Pi-holeFree, open-source network blocking for self-hosted administrators.9.0

See all webfilter-ng alternatives →

Featured on iTechGuides

webfilter-ng is listed in our Internet Filtering Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/webfilter-ng/"><img src="https://www.itechguides.com/best/badge/webfilter-ng.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update