webfilter-ng review
Open gateway filtering with broad control options, but limited to Linux and self-hosted deployments.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
webfilter-ng is an open-source transparent web filter for Linux computers, routers, and internet gateways. It suits administrators who want gateway-wide controls without requiring client proxy configuration or TLS decryption. Filtering can use requested domains, HTTP Host fields, TLS SNI, DNS services, squidGuard, categorify.org, or local whitelist and blacklist files. Its deployment model is focused: run it at a Linux gateway or as a standalone Linux installation, rather than across a broad mix of endpoint platforms.
The filtering scope is its clearest strength. webfilter-ng covers HTTP, HTTPS, TLS, and DNS-based filtering, with bypass protection for DNS controls. Administrators can enforce SafeSearch for Google and Bing through DNS configuration, apply squidGuard-based categories, and connect the optional categorify.org API for content categorization. The surrounding Linux ecosystem is practical, with integrations including bind9, iptables, CleanBrowsing DNS, and squidGuard. That combination gives technically minded teams several ways to fit filtering into existing gateway and resolver designs.
webfilter-ng is a focused choice for organizations that value open-source control, local configuration, and Linux gateway deployment. Its narrow platform coverage and self-hosted model make it less suitable for teams seeking centralized multi-platform administration. It also does not center on scheduling or activity reporting, so buyers prioritizing time-based policies or usage visibility should consider a product built around those capabilities instead. Choose webfilter-ng when transparent traffic filtering, SafeSearch enforcement, custom lists, and infrastructure-level control matter more than a broad management surface.
webfilter-ng pros and cons
- Where it wins
- Filters HTTP, HTTPS, TLS, and DNS traffic without TLS decryption
- Supports whitelists, blacklists, SafeSearch, and custom blocklists
- Integrates with squidGuard, bind9, iptables, and DNS services
- Where it doesn't
- Limited to Linux computers, routers, and internet gateways
- Does not focus on scheduling or activity reporting
- Requires self-hosted deployment and Linux networking configuration
webfilter-ng fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update