Create DNS Filtering rules in Nebula

Configure DNS Filtering rules using the Rules tab on the DNS Filtering page. Assign rules to a Nebula policy, select which security and content categories to block, and specify domains to allow and block. Configuring access for a domain will include its subdomains, but configuring access for a subdomain will not include the entire domain. 

Select a topic below to learn more:

• Create DNS Filtering rule
  • Feedback to Cloudflare
• Categories
  • Security categories
  • Content categories
  • Technology content category

Create DNS Filtering rule

1. On the left navigation menu, go to Monitor > DNS Filtering.
2. In the top left, select the Rules tab.
3. In the top right, click New.
4. Enter a name for the DNS Rule.
5. Check the box for one or more policies and click Next to proceed to the Categories tab.
   Note: Each policy can only have one DNS rule applied.
6. Use the look up domain categories field to search and display the category for a domain. If a domain is incorrectly categorized, see Feedback to CloudFlare.
7. Expand Security categories to review and modify the preselected security categories. 
   Note: The recommended protection from Malwarebytes is enabled by default with the Use preconfigured settings toggle.
8. Expand Content categories and toggle on all desired categories and subcategories to block. 
   Note: Expand the category's arrow icon for more granular control. Toggle on specific subcategories without blocking the entire category.
   

   CAUTION - Blocking content categories such as Technology may cause popular business domains to be blocked mistakenly. For more information, see Technology content category. 

9. Click Next to proceed to the Allow tab.
10. Enter a domain or subdomain and click Add.
    
    • Click Upload a bulk domain list to upload multiple domains at once with a CSV file. The file should only contain a single column with the domains listed. A template file can be downloaded with the Download a file list template button.
11. Click Next once all domains or subdomains have been added to proceed to the Block tab.
12. Enter a domain or subdomain and click Add. 
    
    • Click Upload a bulk domain list to upload multiple domains at once with a CSV file. The file should only contain a single column with the domains listed. A template file can be downloaded with the Download a file list template button.
13. Click Complete once all domains or subdomains have been added.

Note: Add domains to the allow list of your DNS rules if you require access to a domain that was blocked.

Feedback to Cloudflare

If a domain is incorrectly categorized, send feedback to Cloudflare here. Search for the domain, then suggest any additional categories on the left side, or remove the currently recognized categories from the right side, then click Submit. 

Categories

The available security and content categories are listed below. 

Security categories

Content categories

Technology content category

We advise against blocking the technology content category as most of the domains for My Account and e-commerce activity are included in that category. If you are blocking this category, add these to the allow list:

Return to Malwarebytes Nebula DNS Filtering guide.