Setup guides · MikroTik
How to Set Up Content Filtering on a MikroTik Router
Enterprise-grade DNS filtering on MikroTik in minutes — including a NAT rule so devices can't bypass it.
You'll need two things:
- 1 · A VeeShield account ($6.99/mo, unlimited devices, cancel anytime)
- 2 · Access to your router's admin panel at WinBox / WebFig
Open WinBox or WebFig
Connect to your MikroTik and open IP → DNS.
Set the upstream resolvers
Set Servers to 185.236.104.104 and 185.236.105.105. Leave "Allow Remote Requests" checked only if your LAN devices should query the router itself.
Hand the DNS to your clients
In IP → DHCP Server → Networks, set the DNS Server field to your router's LAN IP (if it forwards) or directly to the VeeShield resolvers.
Add a bypass-proof NAT rule
In IP → Firewall → NAT, add a dstnat rule redirecting all outbound UDP/TCP port 53 (except from the router) to the router — so hardcoded DNS on devices gets filtered too.
Verify your protection
Run the protection check on your VeeShield dashboard's Setup page.
Ready to make your MikroTik network family-safe?
Adult content, scams, malware and screen-time battles — handled at the network, on every device, starting tonight.
Get VeeShield — $6.99/moNo contracts. Cancel anytime.
Common questions
Will this slow down my internet?
No. VeeShield runs on a global anycast DNS network ranked the fastest filter in the world by DNSPerf — most homes actually see pages start loading faster, because ads and trackers get blocked before they download.
Does this cover phones and tablets too?
Yes — everything connected to your Wi-Fi is covered automatically: phones, tablets, laptops, smart TVs, and game consoles. Nothing to install on each device.
Can my kids just undo it?
The setting lives in your router's admin panel, which is protected by your router password. VeeShield also blocks the VPN and proxy sites commonly used to sneak around filters. For extra security, change your router admin password while you're in there.
What if a site gets blocked that shouldn't be?
Open your VeeShield dashboard and allow it with one click — the change takes effect in seconds.