About this interactive
We type names, but packets need IP addresses, so the PC first asks a DNS server, often the firewall or router, what address belongs to the name.
Regular web filtering lets that lookup succeed. The PC gets the site's real address and tries to connect, and the firewall or a proxy refuses the connection. Because it handles the traffic itself, it can see the full address, path included, and can check what comes back.
DNS filtering acts one step earlier. When the name is banned, the DNS server answers with a different address, often a local machine that replies "access denied". The PC never learns the real address and never connects to the site. It is very easy to set up, but it sees only the name, so it blocks whole sites, not single pages, and it only works for machines that ask that resolver.
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →