Family Shield and Glype

[davide.88]

Family shield dns works really well for proxy site..but it can't block a kind of proxy, the Glype proxies....can u resolve? or how can i resolve?

example of proxy that aren't blocked:

http: samstevenm.com/prox/

http://ricardoalcala.com/index.php

and many others of the same kind... 

[rotblitz]

• You add the domain names samstevenm.com, ricardoalcala.com, etc. to your "always block" list.  This is the immediate measure.  This option is not possible if you don't maintain your dashboard, of course.
• You submit the same domains at https://community.opendns.com/domaintagging/submit/ under the Proxy/Anonymizer category so that they appear under this category as soon as approved and you can remove them from your blacklist again later on if you manage your dashboard.
• You can raise a support ticket with the same list of domains to OpenDNS to speed things up.

[davide.88]

First, thank you for the reply.

But if i put these sites in the "always block" list in my dashboard, this simply doesn't work.

It seems that open dns can't block all the proxies made with glype...

[rotblitz]

This assumption is wrong.

Do you use OpenDNS at all?  http://welcome.opendns.com/
If not, your dashboard settings do not take effect.  Your problem is then of a different nature, unrelated to blocking web proxies.

Only if you use OpenDNS, check at https://dashboard.opendns.com/settings/ that your IP address is correctly registered, so that your DNS queries can be associated with your dashboard settings.

Still problems?  To better see what the problem may be, copy & paste the complete plain text outputs of the following diagnostic commands to here:

nslookup -type=txt debug.opendns.com.
nslookup samstevenm.com.
nslookup ricardoalcala.com.

[davide.88]

i don't know why but only now after some hour i blocked the domains, is working...

but i can't block all the glype proxies name by name because they are infinite, and i don't understand why opendns doesn't recognize them as proxy, while is correctly blocking the other normal proxy site...am i wrong with some setting?

thanks

[rotblitz]

"i don't know why but only now after some hour i blocked the domains, is working..."

I know why: you certainly did not flush your local caches after the settings change, right?
https://support.opendns.com/hc/en-us/articles/227988627
Therefore you have been served with outdated stuff from your caches, as normally is.  Only if the related cache item expires, after some delay, you will be picking up your new settings.

"i can't block all the glype proxies name by name because they are infinite"

You can't add them to your individual blacklist, but you can submit them under the category, 1000 at a time, as I have explained above.  But this will take some time to get them approved.

"i don't understand why opendns doesn't recognize them as proxy"

OpenDNS doesn't recognize anything, because it doesn't access anything.  This is not how it works.  Tagging and categorization are community efforts.  Read on here:
https://community.opendns.com/domaintagging/faq/
You are invited to improve this with your submissions and voting on others' submissions.

"while is correctly blocking the other normal proxy site..."

Yes, because these are already categorized via the community driven domain tagging system.

"am i wrong with some setting?"

Not with your setting, but with your thinking...

[davide.88]

Ok, thank you so much, now i understand better the method of opendns.

And now i understand that glype is a proxy that can be implemented in subdomains of non proxy-site as the sites linked before, so probably they can't be categorized at all.

To block them, i need a keyword blocking service using the words "browse.php" that is ever present in these sites.

I already know opendns can't block keywords.

Really appreciate your help,

Thank you