VeeShield

Setup guides · Xfinity

How to Block Adult Content on an Xfinity Gateway

Comcast Xfinity gateways don't allow custom DNS directly — here are the two ways to get real content filtering on your Xfinity internet.

You'll need two things:

  1. 1 · A VeeShield account ($6.99/mo, unlimited devices, cancel anytime)
  2. 2 · Access to your router's admin panel at 10.0.0.1
Primary DNS: 185.236.104.104Secondary DNS: 185.236.105.105
1

Understand the limitation

Xfinity's xFi Gateways don't let you change the DNS servers handed out to your devices — Comcast locks this down. You have two good options.

2

Option A: Bridge mode + your own router

Put the Xfinity gateway into Bridge Mode (sign in at 10.0.0.1 → Gateway → At a Glance → Bridge Mode: Enable) and connect your own router behind it. Then follow our guide for that router's brand.

3

Option B: Set DNS per device

On each important device, set DNS manually to 185.236.104.104 and 185.236.105.105 — in Wi-Fi settings on iPhone/Android/Windows/Mac. Less elegant than router-level, but works without new hardware.

4

Consider the upgrade anyway

A $60–100 router of your own behind the Xfinity gateway gives you better Wi-Fi and full VeeShield protection for everything — usually worth it.

5

Verify your protection

Either way, finish by running the protection check on your VeeShield dashboard's Setup page.

Ready to make your Xfinity network family-safe?

Adult content, scams, malware and screen-time battles — handled at the network, on every device, starting tonight.

Get VeeShield — $6.99/mo

No contracts. Cancel anytime.

Common questions

Will this slow down my internet?

No. VeeShield runs on a global anycast DNS network ranked the fastest filter in the world by DNSPerf — most homes actually see pages start loading faster, because ads and trackers get blocked before they download.

Does this cover phones and tablets too?

Yes — everything connected to your Wi-Fi is covered automatically: phones, tablets, laptops, smart TVs, and game consoles. Nothing to install on each device.

Can my kids just undo it?

The setting lives in your router's admin panel, which is protected by your router password. VeeShield also blocks the VPN and proxy sites commonly used to sneak around filters. For extra security, change your router admin password while you're in there.

What if a site gets blocked that shouldn't be?

Open your VeeShield dashboard and allow it with one click — the change takes effect in seconds.

Free checklist

Not ready yet? Take the checklist.

Get our 5-step family internet safety checklist — the five settings that make the biggest difference, whether or not you ever buy anything from us.