mosdns is an extensive DNS forwarder. Users can customize their DNS handling logic on demand.
mosdns comes with:
- Matcher:
- Match request pattern: domain, type, source IP, etc.
- Match response pattern: response IP, CNAME, etc.
- Functions:
- UDP, TCP, DoT, DoH (H3 supported), DoQ Client and Server.
- Cached responses (ECS not supported).
- Automatically determines if a domain name is a dual-stack domain and then blocks IPv4/6 requests without affecting pure IPv6/4 domains.
- Append preset ECS to requests.
- Modify the TTL of the response.
- Set IP for the domain name.(hosts)
- Return a response with a specific IP. (blackhole)
- Replace (redirects) the requested domain name. Requested domain A but return a record for domain B. (redirect) (redirect)
- Manually construct a response containing arbitrary records. (arbitrary)
- Countercheck a mosdns-processed domain name with an IP. This can be done in response to a PTR request or through the HTTP interface. (reverse_lookup)
- Dynamic routing: Write response IPs to ipset and nftables.
Publisher’s description
What is mosdns?
mosdns is an open-source firewall & privacy program for Windows from Irine Sistiana. It is written in Go.
Installation and requirements
Official installers exist for 64-bit as Portable. It runs without installation (portable).
Updates and version history
The current version is 5.3.4, released on January 11, 2026. 2 versions are listed since August 14, 2024, each with links to its own installer files. That is about 1.4 releases a year.
Popularity and file types
The source code on GitHub (IrineSistiana/mosdns) has 3,764 stars. Similar programs include OnionShare, dnscrypt-proxy and Portmaster.
Project description on GitHub: “一个 DNS 转发器”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Portable: runs without installation
Cons
- No native ARM64 build
In short: mosdns is an open-source firewall & privacy tool for 64-bit PCs.
Is mosdns safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
3D55B6647E632AD86A1D86E7CF21B96BB63ADFDE3B4FFDC098C9AF79381638CA· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Security practices (OpenSSF Scorecard)
Automated checks of the IrineSistiana/mosdns repository on GitHub by the Open Source Security Foundation, last run on October 19, 2026.
- No binaries in the repository10
- No dangerous workflows10
- Licence declared10
- Actively maintained0
- Static code analysis0
- Code review0
- Restricted token permissions0
- OpenSSF Best Practices badge0
- Security policy0
- Fuzzing0
- Pinned dependencies0
- Branch protection0
- Signed releases0
The score rates how the project is developed and released, not whether the program is safe to install. scorecard.dev
Recent versions
All 2 versions ›2 versions over 1 year · about 1.4 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 5.3.4Latest | January 11, 2026 | — | 64-bit ZIP |
| 5.3.3 | August 14, 2024 | — | 64-bit ZIP |
Install from the command line
Silent install ›winget install --id IrineSistiana.mosdns -eProgram files (.exe): mosdns.exe
Related guide: How to use winget: install and update apps
Information
- Publisher
- Irine Sistiana
- Category
- Firewall & privacy
- Licence
- GPL-3.0
- Price
- Free
- Source code
- github.com/IrineSistiana/mosdns
- Written in
- Go
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- Portable
- Version
- 5.3.4
- Released
- January 11, 2026
- Added to the catalogue
- March 12, 2025
- Versions listed
- 2
- Updates / year
- 1.4
- GitHub stars
- 3,764
- GitHub forks
- 496
- Website
- github.com
- winget ID
- IrineSistiana.mosdns
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to mosdns
See all ›-
OnionShare2.7OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor networkOpen source40.7K ↓ -
Open source15.1K ↓ -
Portmaster2.2.3Portmaster is a free and open-source application that puts you back in charge over all your computers network connections.Open source21.4K ↓ -
Open source57.4K ↓ -
DingTalk Workspace CLI1.0.65dws — DingTalk Workspace on the command line, built for humans and AI agents.Open source5.7K ↓ -
Open source21.7K ↓ -
Subsurface6.0.5504Subsurface can plan and track single and multi-tank dives using air, Nitrox or TriMix.Open source5.4K ↓ -
GreenTunnel3.0.5GreenTunnel is an anti-censorship utility designed to bypass the DPI system that is put in place by various ISPs to block access to certain websites.Open source854 ↓
Frequently asked questions
Is mosdns free?
Yes. mosdns is open-source software under the GPL-3.0 licence.
Is mosdns safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install mosdns with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Does mosdns run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of mosdns?
The versions page lists all 2 versions with links to their official installer files, back to August 14, 2024.
Can I use mosdns without administrator rights?
Yes, it is portable: unpack and run it.
What are alternatives to mosdns?
OnionShare, dnscrypt-proxy, Portmaster, Prey Anti-Theft and DingTalk Workspace CLI. The alternatives page compares them.
