KyberGate DNS filtering lets you block social media, gaming, and other unwanted content on any network — including guest WiFi — without installing any software on devices. Just point your network's DNS to KyberGate and every device that connects is automatically filtered.
Step 1: Add Your Guest Network's IP
- Log into your KyberGate dashboard
- Go to Settings → Network
- Under Campus IPs, click Add IP
- Enter the public IP address of your guest WiFi network
Tip: Not sure what your public IP is? From a device on the guest network, visit whatismyip.com. This is how KyberGate identifies which DNS queries belong to your school.
Step 2: Configure Your DNS Servers
On your guest network's router, firewall, or access point, change the DNS settings to:
- Primary DNS:
134.209.114.127 - Secondary DNS:
64.23.131.224
Where to find DNS settings (by equipment):
- Meraki: Security & SD-WAN → Addressing & VLANs → DNS
- Ubiquiti/UniFi: Settings → Networks → [Guest Network] → DHCP DNS Server
- Fortinet: Network → DNS
- pfSense/OPNsense: System → General Setup → DNS Servers
- Cisco: Use the
ip name-servercommand on the interface
Step 3: Prevent DNS Bypass
Without this step, students can change their device's DNS settings to Google (8.8.8.8) or Cloudflare (1.1.1.1) to bypass filtering.
On your firewall, add this rule:
Block outbound DNS (UDP and TCP port 53) to all destinations except 134.209.114.127 and 64.23.131.224
This forces all DNS queries through KyberGate, even if a student manually changes their device settings.
That's It!
Once configured, every device that connects to your guest WiFi will automatically be filtered. Social media, gaming, adult content, and any other categories you've blocked in your KyberGate policies will be enforced — no agents, no enrollment, no MDM required.
What Gets Blocked?
Whatever categories you've enabled in your KyberGate dashboard under Policies. Common categories for guest networks include:
- Social Media (TikTok, Instagram, Snapchat, etc.)
- Gaming (Roblox, Steam, browser games)
- Streaming (Netflix, YouTube — optional)
- Adult Content (always blocked by default)
- VPN/Proxy (prevents filter bypass)
Frequently Asked Questions
Does this work on personal phones and laptops? Yes. DNS filtering works on any device that connects to the network — no software needed.
Will students see a block page? Yes. When a blocked site is accessed, students see a KyberGate block page explaining the site is restricted.
Can I allow specific sites? Yes. Add them to your Allowed Domains list in the dashboard under Policies.