DNS & Ad Filtering
Can I use secure DNS and ad filtering without a VPN provider?
Yes. Keep the MintFlow VPN connected, use a Direct output, configure Direct DNS with DoH/DoT, and enable DNS ad blocking. No remote server or MITM certificate is required. These features are Free on iOS.
Why does an ad still appear?
DNS filtering only checks names queried through MintFlow DNS. Shared-content hostnames, app-owned encrypted DNS, cached addresses, and IP connections can avoid that check. A forwarding domain-set or keyword rule also takes priority over the filter. Use the domain checker and DNS Log to distinguish a list match from a live runtime decision.
How do I recover from a false positive?
Check the winning rule first. In Rules Mode, add a narrow forwarding domain-set exception. In Simple Mode, choose another list or disable the filter, or switch to Rules Mode for exceptions. Restart or retry the affected app if it retained an earlier DNS result.
Why is filtering saved but unavailable?
The selected profile, cached list, and running filter can differ. Check Tools → DNS Runtime → DNS Ad Blocking, confirm internal DNS is active, and inspect compilation diagnostics. Refresh a missing list in the app and reconnect if requested. A missing status value is not evidence that filtering is active.