How to set up Kestrel, what the DNS filter does, how to manage your licence and how to remove Kestrel again.
The setup opens on the first start. On the Mac, Kestrel watches every connection right away; in the second step you set up the DNS filter, which blocks data collectors for all programs. macOS asks for your password once.
On Windows and Linux the setup allows the installed programs with a valid signature and checks that the Kestrel service is running.
The DNS filter runs on your Mac and answers lookups for trackers, advertising and telemetry by saying the name does not exist. It looks up every other name with the DNS of your network or, if you choose, with Quad9 or Cloudflare, encrypted if you like.
If the filter ever stops answering, a watchdog restores the previous DNS settings at once so the internet keeps working. While a VPN sets its own DNS, the filter is bypassed and the app tells you so.
To hold a connection until you allow it, Kestrel needs a network extension on the Mac, which macOS only permits for signed apps. It comes with the signed version. Until then Kestrel watches every connection and blocks data collectors through the DNS filter.
With the signed version you allow the extension once in System Settings under General › Login Items & Extensions › Network Extensions; Kestrel takes you there. On Windows and Linux a service does this job.
Remove the key on the old computer in the settings under Licence with “Remove key”, then enter it on the new computer in the same place. You find the key in the purchase email and in your customer account. If you can no longer reach the old computer, free it in your customer account.
When you enter the key, Kestrel registers the computer with us once. After that it checks the key on the computer itself, so Pro works without a constant internet connection.
A computer is free as soon as you have removed the key there in the settings under Licence. If it was lost or sold, free it in your customer account.
In your customer account at license.m8werk.de you see your purchases, invoices and licences. You sign in without a password through a link sent by email. If you bought several licences, you pass them on to other people there one by one.
On the Mac, open the Data collectors page in the settings and choose “Uninstall …” at the DNS filter. Kestrel restores the DNS settings from before the setup and removes the filter; macOS asks for your password. Afterwards, move Kestrel from the Applications folder to the Bin.
On Windows and Linux, uninstalling also removes the service and every filter Kestrel created.
Kestrel