topic How to lock DNS settings on a per device basis? in OpenDNS

How to lock DNS settings on a per device basis?

michael blatchford — Tue, 09 Feb 2016 15:37:28 GMT

I would like to use OpenDNS on a family member's phone but I don't see a way to lock the settings. The user can go into settings and change the DNS settings at any time defeating the purpose. Apple doesn't seem to include restrictions for wifi settings. I can set allowed times or lock out safari neither of which are useful to me. I could purchase umbrella service but correct me if I'm wrong, have to blanket lock all app deletions to prevent circumvention. This person is actually the home network geek so he needs access to most functions and features and just wants to keep a locked filter on his phone for whatever wifi connection he is on. If you could clarify what my options are that would be great.

Thanks!

Michael

Re: How to lock DNS settings on a per device basis?

rotblitz — Tue, 09 Feb 2016 22:21:18 GMT

Your options can work only within your network, not when the roaming device is using other WiFi or mobile networks, unless you take the device away, because you apparently do not have control over that device.

You configure the OpenDNS resolver addresses on your router, and you block port 53 passthrough on the router, the latter preventing from the use of another DNS service.

Re: How to lock DNS settings on a per device basis?

michael blatchford — Tue, 09 Feb 2016 22:25:18 GMT

Thanks for the reply - I'm not so concerned about the router because any restrictions I place through OpenDNS at a router level affect all devices on the network. Are you saying that even the Umbrella service with iPhone restrictions for preventing app deletion will not provide OpenDNS service on all wifi connections?

Re: How to lock DNS settings on a per device basis?

rotblitz — Tue, 09 Feb 2016 22:46:22 GMT

No idea. You'll have to raise this with OpenDNS directly, or you'll have to wait for another user knowing the answer.

This looks promising: https://www.opendns.com/enterprise-security/solutions/off-network-coverage/
but needs confirmation about that it is what you really need.

E.g. I could not find that it comes "with iPhone restrictions for preventing app deletion".