Internal DNS Resolvers

LGfL's core network has several resilient, high-performance DNS resolver servers to provide reliable, fast and safe DNS resolution for school networks.

Why use LGfL's DNS resolvers?

LGfL's DNS resolver servers bring additional security and safeguarding features:

Enforced Safe Search on Google, Bing, DuckDuckGo, Brave and other search engines
Ability to set YouTube mode (see below)
Cleansing of certain records that could allow filtering bypass (such as TLS-ECH)
Additonal cyber security protections from the NCSC's Protective DNS (PDNS) service

Certain features of LGfL applications such as SchoolProtect also require schools to be using LGfL DNS resolvers.

Which DNS servers should my school be using?

The decision on which DNS resolvers to point your network at depends on the YouTube mode you wish to apply. Details of this can be found in this article.

How do I set up my network to use LGfL DNS?

School networks generally have an internal DNS server (usually a Windows Domain Controller) which devices point to. This server can be configured to send DNS requests to another server (called forwarders). For serverless schools, the LGfL DNS servers can be set directly in DHCP. Your IT department or provider will be able to set the forwarders or DHCP options on the network to the correct LGfL DNS server.

What are the LGfL DNS resolver addresses?

The IP addresses for these are different depending on whether your school is on the 'Inside London' or 'Outside London' network (this does not always follow the geographical location of the school). If you are not sure which network your school is connected to, please contact the support team.

Inside London DNS

Mode Primary Resolver Secondary Resolver Strict Restricted 172.30.178.53 172.30.178.54 Moderate Restricted 172.30.187.53 172.30.187.54 Unrestricted 172.30.187.55 172.30.187.56

Outside London DNS

Mode Primary Resolver Secondary Resolver Strict Restricted 172.30.210.53 172.30.210.54 Moderate Restricted 172.30.210.153 172.30.210.154 Unrestricted 172.30.210.155 172.30.210.156

Please make sure you set both the primary and secondary resolver IP addresses in your forwarders or DHCP scopes.