How to properly block "youporn.com"

[prkrnt]

I have been an OpenDNS user for some time.  I don't really have any issues, but recently I needed to test some settings to recommend to another family.  They were having an issue with youporn.com being accessed and needed a way to block it.

With my current "custom" content filters, most pornographic sites are blocked as expected except for youporn.com, which is what my test was mostly for.  Below are my content settings:

• Lingerie/Bikini
• Portals
• Sexuality
• Tobacco
• Web Spam
• Hate/Discrimination
• Parked Domains
• Proxy/Anonymizer
• Tasteless
• Adware
• Nudity
• Pornography
• Typo Squatting

I haven't enabled Video Sharing or Adult Themes because I feel those are "too restrictive".  Just curious as to why youporn.com isn't blocked using the settings above.

Thanks,

prkrnt

[rotblitz]

Is this still the case? If yes, copy & paste the plain text output of the following commands here:

nslookup -type=txt debug.opendns.com.
nslookup youporn.com.
nslookup www.youporn.com.

If the site is blocked, then we cannot reproduce this, but are limited to assumptions.

[prkrnt]

Here are the results:

Server:  resolver2.opendns.com Address:  208.67.220.220

debug.opendns.com text =

 "server 11.lax" debug.opendns.com text =

 "flags 20 0 2fe c007e6000201001" debug.opendns.com text =

 "id 15338279" debug.opendns.com text =

 "source 70.176.222.56:55466" Server:  resolver2.opendns.com Address:  208.67.220.220

Name:    youporn.com Address:  67.215.65.131

Server:  resolver2.opendns.com Address:  208.67.220.220

Name:    www.youporn.com Address:  67.215.65.131

[rotblitz]

All fine, you're using the Los Angeles OpenDNS location, and your IP address 70.176.222.56 is registered with your OpenDNS network ID 15338279. You have youporn.com in your "always block" list, because OpenDNS returns the IP address of hit-block.opendns.com for it, not its real IP address. So, this site should be blocked by your settings.

If you can access the site nevertheless, then you may have visited it before, and it's still in your browser cache. So flush this. Or your browser generally circumvents OpenDNS, because you have something like a "turbo mode" enabled or a proxy or VPN configured. What browser are you using?

[anthony.clarke]

Confirmed, YouPorn.com is not blocked by OpenDNS. When I add it, OpenDNS comments that it is already blocked by one of more of my selected types of site to block, but it most certainly does not.

Other porn site give the OpenDNS 'blocked' page, but "youporn.com" does not.

On the command line:

ipconfig /flushdns          *** (to make sure the dns cache is empty)

nslookup youporn.com

Gives the output:
Server: UnKnown
Address: 2620:0:ccc::2

Non-authoritative answer:
Name: youporn.com
Address: 31.192.116.24

This is *not* a browser cache or issue. OpenDNS, you have mucked this one up somewhere - I think one of your staff is in the take from YouPorn ;-)

[anthony.clarke]

OpenDNS: Here is the output using the commands you asked to be run....

C:\Windows\system32>nslookup -type=txt debug.opendns.com.
Server: UnKnown
Address: 2620:0:ccc::2

Non-authoritative answer:
debug.opendns.com text =

"server 9.lon"
debug.opendns.com text =

"flags 20 0 0 0"
debug.opendns.com text =

"id 0"
debug.opendns.com text =

"source [2a01:348:6:872a:856d:d0d1:d6c8:806c]:49368"

C:\Windows\system32>nslookup youporn.com.
Server: UnKnown
Address: 2620:0:ccc::2

Non-authoritative answer:
Name: youporn.com
Address: 31.192.116.24

Come on now - two years and you still fail to replicate the problem. I think this is a case of the "Won't do it's" rather than the "Can't do it's". Is YouPorn an OpenDNS sponsor?

[rotblitz]

"Server: UnKnown
Address: 2620:0:ccc::2"

"source [2a01:348:6:872a:856d:d0d1:d6c8:806c]:49368"

You're using IPv6 connectivity, and content filtering is not supported with IPv6 yet, because you cannot register your IPv6 address with OpenDNS.  You'll want to disable IPv6 connectivity to use content filtering reliably.

"Come on now - two years and you still fail to replicate the problem."  -  LOL, please don't be stupid.  (Btw, I'm just a user, so I never fail. ;-))
Also, your problem is totally unrelated to the original problem reported.

But, yeah, OpenDNS should now introduce to register also an IPv6 address beside the IPv4 address. It's the right time now.

[anthony.clarke]

@robitz,

0. I know IPv6 addresses are not yet filtered.

1. The address returned is for IPV4 after - did you not read the trace.,

2. Content filtering for IPV4 addresses using this configuration *works* perfectly for all other porn sites even when accessing the IPv6 OpenDNS addresses.

3. Who is the stupid one now.

Basically, OpenDNS *have* screwed this one up. Although they have youporn.com. in their lists, it is set to pass through the real IP. The ability or non-ability to add IPv6 addresses is irrelevant to this case.

Apology please - or get of the boards.

[rotblitz]

"The address returned is for IPV4 after - did you not read the trace."

This "address returned" is absolutely irrelevant.

I say it again, you need to disable IPv6 connectivity, because your DNS queries go out via IPv6, and it is not possible to register your IPv6 address 2a01:348:6:872a:856d:d0d1:d6c8:806c at https://dashboard.opendns.com/settings/ yet.  Therefore OpenDNS is not able to associate your DNS queries with your settings.  At the end, your settings simply don't take effect.

"Who is the stupid one now."  -  Better no comment.

[anthony.clarke]

@ rotblitz

Once again you have failed to read all the information. Tell you what, I'll shout it.

OPENDNS FILTER BLOCKS OTHER PORN SITES USING THIS CONFIGURATION. GET IT. DO YOU. IT BLOCKS PHIMSEX, IT BLOCKS FUCKBUDDY, IT BLOCKS EVERYTHING EXCEPY YOUPORN.

Now more quietly. Time for you to actually *read* the posts rather than quoting the IPv6 mantra. OpenDNS DOES 'block' DNS requests for other porn sites. Your comment about it not picking up my external IPv6 address is now moot, AS ALL OTHER SITES ARE BLOCKED. 

Further - on a PURE IPv4 LOOKUP (work network) it also fails to block YouPorn. 

Do you get it now? Just shut up and leave the experts to figure it out.

[anthony.clarke]

Elevated to OpenDNS - who do think this is worth looking into.

[rotblitz]

I don't have an explanation why it blocks certain sites.  You would have to post more diagnostics, so that I could see what's going on.  But this is not the question, but the question was why YouPorn is not being blocked.  But...

Well, I told you twice what to do.  As you stay advice resistent, I give up...
You simply could have done it to see that it really works then.

"leave the experts to figure it out."

I thought I'm one.  No matter, I'm confident that "experts" will tell you the same.

[Anonymous]

@anthony.clarke I have just responded to your ticket (#100921), please follow up with us via the support ticket. 

[bethyboops]

I am a new user to OpenDNS.  I am also trying to block youporn.com without success.  Has there been any improvement in the blocking of this site?  Please advise.  Thank you!

[rotblitz]

There is no improvement needed.  If you configured OpenDNS correctly, it is blocked.

Do you use OpenDNS at all?  http://welcome.opendns.com/

Is your IP address registered with OpenDNS?  https://dashboard.opendns.com/settings/