How to Add Mechtrace VPN onto various devices

From Mechsolve
Mechtrace VPN
Mechtrace VPN

MechTrace DNS — VPN & Device Setup Guide

This page explains how to connect a device to MechTrace DNS and, optionally, how to route that connection through a VPN. It covers Windows, macOS (OSX), iOS (DNS Override), and Android.

You can point a device at MechTrace DNS directly (plain DNS or encrypted DNS), and/or use a VPN client such as WireGuard to connect devices to the MechTrace network remotely. Using a VPN is optional but recommended for off-network or remote devices, since it lets you reach MechTrace DNS securely from anywhere, not just from a network that already routes to it.

MechTrace DNS reference values

Keep this table handy — every section below refers back to it.

Type Field Value
Unfiltered Primary DNS 103.213.208.45
Secondary DNS 45.112.32.194
Filtered (malware & adult content blocked) Primary DNS 103.213.208.46
Secondary DNS 45.112.32.195
Encrypted DNS (adblocker.mechtrace.com) DoH h3://adblocker.mechtrace.com
Secure DoH https://adblocker.mechtrace.com
TLS DoT (hostname only) adblocker.mechtrace.com

Note: Plain DNS fields (Wi-Fi/Ethernet DNS servers, iOS "Configure DNS", Android per-network static DNS) accept the IP addresses. Encrypted DNS fields (Windows DoH, Android Private DNS, iOS DNS Override app) accept the hostname or URL shown above, not the IPs.

Using a VPN to connect devices

A VPN lets a device reach the MechTrace network securely from anywhere, rather than only on a network that already points to MechTrace DNS. WireGuard is a fast, free, open-source option available on every platform covered here:

Once installed, import the .conf tunnel file or QR code that MechTrace provides for your account, then toggle the tunnel on. Once connected, follow the DNS steps below as usual — the tunnel doesn't set your DNS automatically unless the config already specifies it.

Windows

1. Install a VPN client (optional)

Install WireGuard for Windows if you plan to connect remotely. Import your tunnel and connect before continuing.

2. Set plain MechTrace DNS

Windows — Edit DNS settings
  1. Open Settings (Win + I) → Network & internet.
  2. Click your active connection (Wi-Fi or Ethernet), then Hardware properties.
  3. Next to DNS server assignment, click Edit.
  4. Change the dropdown to Manual and turn IPv4 on.
  5. Enter a Preferred DNS and Alternate DNS from the Unfiltered or Filtered pair in the reference table above.
  6. Click Save.

3. Set encrypted MechTrace DNS (DoH)

Windows 11 only shows the DoH toggle for DNS servers already on its known-server list, so register MechTrace's resolver first:

  1. Open PowerShell as Administrator.
  2. Run:
Add-DnsClientDohServerAddress -ServerAddress '103.213.208.45' -DohTemplate 'https://adblocker.mechtrace.com' -AllowFallbackToUdp $False -AutoUpgrade $True
  1. Repeat step 2 above (Settings → Network & internet → Hardware properties → Edit), entering 103.213.208.45 as the Preferred DNS.
  2. A Preferred DNS encryption dropdown will now appear — set it to Encrypted only (DNS over HTTPS).
  3. Click Save. The DNS entry should now show (Encrypted) next to it.

macOS (OSX)

1. Install a VPN client (optional)

Install WireGuard for Mac if you plan to connect remotely. Import your tunnel and connect before continuing.

2. Set plain MechTrace DNS

macOS — Network → DNS tab
  1. Open the Apple menu → System Settings → Network.
  2. Select your active connection (Wi-Fi or the Ethernet adapter) and click Details… (older macOS: Advanced…).
  3. Open the DNS tab.
  4. Click + and add both IPs from the Unfiltered or Filtered pair in the reference table above.
  5. Click OK, then Apply.

macOS does not have a built-in field for entering a DoH or DoT hostname system-wide. To use MechTrace's encrypted DNS on a Mac, either route the Mac through the WireGuard tunnel (Section "Using a VPN" above) with the tunnel configured to push MechTrace DNS, or enable DoH inside an individual browser (e.g. Firefox's Enable Secure DNS setting, pointing at https://adblocker.mechtrace.com).

iOS (iPhone / iPad) — DNS Override

1. Install a VPN client (optional)

Install WireGuard for iOS if you plan to connect remotely. Import your tunnel and connect before continuing.

2. Set plain MechTrace DNS (Wi-Fi only, built-in)

iOS — Configure DNS
  1. Open Settings → Wi-Fi.
  2. Tap the ⓘ next to your connected network.
  3. Scroll to DNS and tap Configure DNS.
  4. Switch to Manual.
  5. Remove any existing entries and Add Server for both IPs from the Unfiltered or Filtered pair in the reference table above.
  6. Tap Save.

This method only applies to that one Wi-Fi network, and iOS does not allow changing DNS for cellular data natively.

3. Set encrypted MechTrace DNS for all networks (DNS Override app)

iOS doesn't provide a native field for a custom DoH/DoT hostname, so use the DNS Override app, which applies your chosen DNS to both Wi-Fi and cellular:

  1. Install DNS Override from the App Store.
  2. Open the app and create a custom profile.
  3. Enter the encrypted DNS hostname: adblocker.mechtrace.com (the app will use this for DoH/DoT).
  4. Save the profile, select it, and enable it globally when prompted to install its DNS-enforcement profile.

Android

1. Install a VPN client (optional)

Install WireGuard for Android if you plan to connect remotely. Import your tunnel and connect before continuing.

2. Set encrypted MechTrace DNS (Private DNS / DoT — recommended, all networks)

Android — Private DNS
  1. Open Settings → Network & internet (Samsung: Connections).
  2. Tap Advanced (or More connection settings) → Private DNS.
  3. Select Private DNS provider hostname.
  4. Enter: adblocker.mechtrace.com
  5. Tap Save.

This applies to Wi-Fi and mobile data, and requires Android 9 or later.

3. Set plain MechTrace DNS (per Wi-Fi network)

  1. Open Settings → Network & internet → Wi-Fi.
  2. Press and hold your connected network, then tap the gear icon.
  3. Expand Advanced → change IP settings to Static.
  4. Enter both IPs from the Unfiltered or Filtered pair in the reference table above as DNS 1 and DNS 2.
  5. Tap Save.

Verifying your setup

After configuring any of the above, confirm it's working:

  • Visit a DNS leak test site in a browser on the device.
  • On Windows, run ipconfig /flushdns after changing settings, then nslookup mechtrace.com and check the server it reports.
  • On Android, look for the key/shield icon in the status bar when Private DNS is active.

Support

If a device won't connect or DNS settings don't stick, contact MechTrace:

  • Email: contactus@mechtrace.com
  • Phone: +91 (80) 4089-5060
  • Address: 143H Bommasandra Industrial Area, Hosur Main Road, Bangalore, Karnataka 560099, India
Retrieved from "https://kb.mechtrace.com/index.php?title=How_to_Add_Mechtrace_VPN_onto_various_devices&oldid=1497"