01What Quad9 announced
On 22 October 2026, the Swiss foundation Quad9 announced that it will stop serving users located in France from Tuesday 24 November 2026, for its services with and without threat blocking. It leaves about a month to change resolver.
The cause: a ruling of the Paris judicial court of 21 October 2026, obtained by beIN Sports, which orders Quad9, under a daily penalty, to block sites streaming tennis matches illegally. A first order, of 13 May 2026, also covered Google and DNS4EU. Quad9 refuses to change the answers of its DNS, has appealed, and says it faces some twenty other proceedings in France.
02Who is affected
Everything that asks Quad9 from a connection in France:
- computers, phones and routers set by hand to 9.9.9.9 or 149.112.112.112 (or their IPv6 addresses 2620:fe::fe and 2620:fe::9);
- encrypted DNS set to dns.quad9.net in a browser, in the private DNS of Android or by a profile on iPhone, iPad and Mac;
- filters installed at home (Pi-hole, AdGuard Home…) and company DNS servers that forward their queries to Quad9;
- Mullvad Browser: when the DNS of Mullvad closes on 2 November, its default settings move to Quad9, which stops answering in France three weeks later.
03What to check before 24 November
Look for every place where Quad9 was set, and replace it:
- the router: the DNS servers it gives to the devices (DHCP);
- the secure DNS of the browsers and the private DNS of Android;
- the DNS profiles installed on iPhone, iPad and Mac;
- the upstream servers of Pi-hole, AdGuard Home, Unbound, Bind or the DNS of Windows Server.
04What to replace Quad9 with
Several ways, with their trade-offs:
- The DNS of your Internet provider: nothing to set, but it sees every name your devices ask.
- Another public resolver, such as DNS4EU (Czech Republic), AdGuard DNS (Cyprus) or Cloudflare. Those that stay in France apply the blocks ordered by the courts, as Google and DNS4EU did.
- A filter at home in front of an encrypted resolver: the names are filtered on a box of your network, which then asks the resolver of your choice for those it lets through.
05Warda: already moved to AdGuard DNS
Warda is a DNS box for the home (Raspberry Pi, Docker or Debian): it blocks advertising, trackers, malware and phishing for every device of the network, even those where nothing can be installed. Since version 0.9.4, it asks AdGuard DNS without filtering (European Union) by default, then Cloudflare, over encrypted DNS: Warda alone decides what is blocked.
A Warda box set to “Quad9 only” moves to AdGuard DNS by itself when it updates: nothing to do before 24 November.