topic Re: OpenDNS with PiHole not blocking porn in OpenDNS

OpenDNS with PiHole not blocking porn

Jamzieth01 — Wed, 20 May 2020 13:52:42 GMT

I have configured my network to use my PiHole for DNS and for the PiHole to use 208.67.222.222, 208.67.220.220 and 2620:119:35::35#53 (there just in case but my DHCP server doesn't serve v6) as the upstream servers. In OpenDNS, I have set the web filtering to Low (which includes porn) but porn still isn't being blocked.

When I test using the OpenDNS test sites, I get confirmation I am using OpenDNS and that phishing website are blocked but the adult sites seem to still work.

My OpenDNS dashboard also doesn't seem to be showing any requests but I've read this could take 24 hours to populate.

Can anyone please help?

Re: OpenDNS with PiHole not blocking porn

rotblitz — Wed, 20 May 2020 14:50:13 GMT

The resolver 2620:119:35::35#53 does not make use of your dashboard settings. You need to use the IPv4 replacement addresses like ::ffff:d043:dedc and ::ffff:d043:dcde

"there just in case but my DHCP server doesn't serve v6"

LOL, we are talking about DNS, not about DHCP.

Re: OpenDNS with PiHole not blocking porn

Jamzieth01 — Wed, 20 May 2020 14:56:44 GMT

Thanks for the quick reply and just to be on the safe side I have made this change but it shouldn't and doesn't make any difference. I do not use IPv6 inside my network or outside so nothing will use these to resolve:

Re: OpenDNS with PiHole not blocking porn

rotblitz — Wed, 20 May 2020 17:14:09 GMT

Ok, you do not seem to forward your DNS queries to OpenDNS, check at http://welcome.opendns.com/
If this is the case, you're not using OpenDNS at all, especially not the dashboard settings.

Copy & paste the complete plain text output of the following diagnostic commands from an end user device to here:

nslookup -type=txt debug.opendns.com. 208.67.220.220
nslookup -type=txt which.opendns.com.
nslookup whoami.akamai.net.

Re: OpenDNS with PiHole not blocking porn

Jamzieth01 — Wed, 20 May 2020 19:52:09 GMT

Thanks for your reply. Here are my outputs.

nslookup -type=txt debug.opendns.com. 208.67.220.220

Server: 208.67.220.220

Address: 208.67.220.220#53

Non-authoritative answer:

debug.opendns.com text = "server r1.lon"

debug.opendns.com text = "flags 40020 0 8050 180000000000000000003950000000000000000"

debug.opendns.com text = "originid 417079200"

debug.opendns.com text = "actype 2"

debug.opendns.com text = "bundle 12690742"

debug.opendns.com text = "source 86.188.39.98:62237"

nslookup -type=txt which.opendns.com.

Server: 192.168.1.200

Address: 192.168.1.200#53

Non-authoritative answer:

which.opendns.com text = "r3.lon"

Authoritative answers can be found from:

nslookup whoami.akamai.net.

Server: 192.168.1.200

Address: 192.168.1.200#53

Non-authoritative answer:

Name: whoami.akamai.net

Address: 208.69.34.82

Re: OpenDNS with PiHole not blocking porn

rotblitz — Wed, 20 May 2020 21:03:19 GMT

Everything’s fine. Your dashboard settings should take affect.

Re: OpenDNS with PiHole not blocking porn

Jamzieth01 — Thu, 21 May 2020 06:35:53 GMT

Thanks for all your help. Looks like I had initially set it up correctly (minus the ipv6 addresses) it just looks like it takes 24 hours to initially kick in.

Not a problem for me but worth noting if anyone needs to set this up to keep innocent little eyes innocent.

Re: OpenDNS with PiHole not blocking porn

rotblitz — Thu, 21 May 2020 10:31:14 GMT

That assumption is wrong. Just the logs and stats become active after 24 hours. Filtering and blocking are available instantly. If not, then you have a caching problem and must flush your local DNS caches, the local resolver cache and the browser cache. There can be many more reasons for not working, but they are almost local to the end user device being used.

Re: OpenDNS with PiHole not blocking porn

Jamzieth01 — Thu, 21 May 2020 11:07:46 GMT

Usually I would agree with you but this is a brand new lab with a brand new setup of everything in it. Nothing has been cached, nothing has been previously browsed, nothing has been previously requested. It just didn’t work for 24 hours.

An anomaly I am sure but that’s what it is. I have a “small” amount of knowledge in this area but unfortunately no previous experience with OpenDNS.

My testing of other services (in replica labs) have been instant.

Re: OpenDNS with PiHole not blocking porn

rotblitz — Thu, 21 May 2020 11:51:15 GMT

Whatever it was, it cannot be investigated any longer, because it has gone.