Pemanfaatan internet yang semakin luas menghadirkan tantangan serius dalam penyaringan konten negatif, khususnya pada jaringan RT/RW Net yang belum memiliki sistem keamanan memadai. Penelitian ini bertujuan mengembangkan sistem DNS filtering berbasis perangkat Orange Pi Zero 3 untuk menangkal akses ke situs terlarang seperti pornografi, perjudian, dan konten SARA. Metode penelitian menggunakan Secure Policy Development Life Cycle (SPDLC) yang mencakup lima tahap: analysis, design, implementation, enforcement, dan enhancement. Perangkat Orange Pi dikonfigurasi dengan sistem operasi ringan DietPi serta aplikasi Pi-hole sebagai DNS sinkhole untuk memblokir domain dalam daftar blacklist. Hasil implementasi menunjukkan sistem mampu menghambat akses ke situs terlarang dengan tingkat keberhasilan 100%, dimana kategori pornografi, judi online, SARA, dan phishing/malware berhasil diblokir. Sistem juga dilengkapi pembaruan otomatis daftar blokir serta filter untuk menghindari duplikasi dengan daftar nasional. Solusi ini terbukti efektif, ringan dan dapat diterapkan secara luas pada jaringan lokal skala kecil hingga menengah dalam mendukung kebijakan internet sehat pemerintah. The increasingly widespread use of the internet poses serious challenges in filtering negative content, especially on RT/RW Net networks that do not yet have adequate security systems. This study aims to develop a DNS filtering system based on the Orange Pi Zero 3 device to block access to prohibited sites such as pornography, gambling, and SARA content. The research method uses the Secure Policy Development Life Cycle (SPDLC), which includes five stages: analysis, design, implementation, enforcement, and enhancement. The Orange Pi device is configured with the lightweight DietPi operating system and the Pi-hole application as a DNS sinkhole to block domains on the blacklist. The implementation results show that the system is capable of blocking access to prohibited sites with a 100% success rate, where the categories of pornography, online gambling, SARA, and phishing/malware were successfully blocked. The system is also equipped with automatic updates to the block list and filters to avoid duplication with the national list. This solution has proven to be effective, lightweight, and widely applicable to small to medium-sized local networks in supporting the government's healthy internet policy.