Skip to content

Troubleshooting

The quickest check is your query logs. If you see your lookups there, you’re connected.

From a terminal, you can also ask for a known ad domain. Through Bancuh DNS it returns 0.0.0.0:

Terminal window
nslookup zedo.com

To test a particular server directly, whatever your device is set to:

Terminal window
nslookup zedo.com <server address>

Use any address from the server list.

  • YouTube and some apps serve ads from the same servers as their content. DNS can’t block those without breaking the app. Use an ad blocker in the browser as well.
  • Old lookups are cached. Restart the device, or reconnect to Wi-Fi.
  • Something is bypassing Bancuh DNS:
    • Your browser uses its own secure DNS provider. Check its settings.
    • Your router only has Bancuh DNS for IPv4, and devices get IPv6 DNS from your provider. See Don’t forget IPv6.
    • A VPN or iCloud Private Relay is on.
    • Your router’s DHCP settings hand devices another DNS server.
  1. Open your query logs and look for the app’s lookups with an answer of 0.0.0.0. That’s the domain being blocked.
  2. Check what gets blocked. VPNs, crypto exchanges, gambling and brand-new websites are blocked on purpose.
  3. If it shouldn’t be blocked, open an issue with the domain.

Some sites deliberately break when ads are blocked, and some blocks are on purpose. Allowing a domain would allow it for everyone, so for a one-off, switch just that device to another DNS for a while:

  • Set a plain DNS address, such as 1.1.1.1 or 8.8.8.8, in the device’s network settings. On Android, turn Private DNS off first.
  • Hostnames of other secure DNS services won’t work. Bancuh DNS blocks names like dns.google and one.one.one.one. So if your router uses Bancuh DNS, an Android phone set to one of those in Private DNS can’t find it. Use a plain address instead.

Switch back when you’re done.

  • Check the status page. If your server is down, switch to another one from the server list.
  • Android shows “Private DNS server cannot be accessed”. The network may block port 853. This is common on hotel, school and office Wi-Fi. Switch Private DNS to Automatic while you’re on that network.
  • Hotel or airport Wi-Fi login page won’t appear. Captive portals need the network’s own DNS. Turn encrypted DNS off, sign in, then turn it back on.

Pick a server closer to you. Lookups to a server on another continent can add a noticeable delay to every new website you open.

Each server limits how many lookups a single IP address can make: above 50 a second over UDP, it asks clients to retry over TCP, and above 200 a second it drops the excess. A home network never comes close. A school or office with hundreds of devices behind one address might. In that case, run your own server.