My OpenDNS is not blocking web sites

heintz_57 · ‎01-27-2015

I have reviewed the documentation and I am sill unable to get web sites blocked. My dashboard shows IP address 97.121.160.114, but my updater box shows IP address 198.105.244.23. I am sure i have a dynamic IP address which is why i have downloaded the updater. The DNS O Matic box is unchecked. Open DNS has worked for me for about a year and i recently discovered the web site protection is no longer functional. It seems to be a dynamic IP address issue, but i cannot figure out how to solve the problem. Thank you.

rotblitz · ‎01-27-2015

First check if you're using OpenDNS at all: http://welcome.opendns.com/

If not, then check that the OpenDNS resolver addresses are still configured where you configured them, and that no other resolver addresses are in use.

Else if yes, then post the complete plain text output of the following command here: nslookup -type=txt debug.opendns.com.

Anonymous · ‎01-27-2015

@heintz_57 I am not seeing any traffic being sent to us from your current IP address. My guess is that you either you have a dated IP address registered in your dashboard, or your DNS is not pointing to us. You can find out your IP address by visiting http://www.whatismyip.com/. Whatever the website reports the IP as, that is address that you need registered. Can you visit https://www.opendns.com/welcome/ and let me know what message appears for you.

heintz_57 · ‎01-28-2015

I checked the welcome link and received an OOPS message that i am not using Open DNS. When i go to what is my IP, i get this IP 71.34.134.164. How do i get the correct ip address registered? Thank you.

heintz_57 · ‎01-28-2015

My Open DNS dashboard still shows this ip address - Your current IP is 71.34.134.164, Does that mean my ip addresses are matching? I waited several minutes and still can access sites i am trying to block. Thank you.

rotblitz · ‎01-28-2015

"I checked the welcome link and received an OOPS message that i am not using Open DNS."

That's bad. This has nothing to do with your IP address.

"When i go to what is my IP, i get this IP 71.34.134.164... My Open DNS dashboard still shows this ip address..."

What IP address you have registered is totally irrelevant and unrelated as long as you even do not use OpenDNS, because your dashboard settings cannot take effect then. Ensure that you have the OpenDNS resolver addresses correctly configured and that no other resolver addresses are in effect.

To see possible problems, please copy & paste the complete plain test output of the following commands here:

nslookup -type=txt debug.opendns.com. 208.67.220.220

nslookup whoami.akamai.net.

netsh interface ip show dns

heintz_57 · ‎01-28-2015

OOPS is bad, got it, but my OpenDNS Updater window says yes under Using Open DNS? Below are the copy/pastes of the command you sent and the output.

C:\Documents and Settings\jheintz>nslookup -type=txt debug.opendns.com. 208.67.2
20.220
Server: resolver2.opendns.com
Address: 208.67.220.220

Non-authoritative answer:
debug.opendns.com text =

"server 11.dfw"
debug.opendns.com text =

"flags 20 0 2F6 19500007E00400014C3"
debug.opendns.com text =

"originid 27927332"
debug.opendns.com text =

"actype 2"
debug.opendns.com text =

"bundle 7068786"
debug.opendns.com text =

"source 71.34.134.164:2865"

C:\Documents and Settings\jheintz>nslookup whoami.akamai.net.
Server: PK5001Z.PK5001Z
Address: 192.168.0.1

Non-authoritative answer:
Name: whoami.akamai.net
Address: 205.171.172.89

C:\Documents and Settings\jheintz>netsh interface ip show dns

Configuration for interface "Wireless Network Connection 2"
DNS servers configured through DHCP: 192.168.0.1
205.171.2.25
Register with which suffix: Primary only

Configuration for interface "Network Connect Adapter"
DNS servers configured through DHCP: None
Register with which suffix: Primary only

kpatullo1 · ‎01-28-2015

It looks like your computer is using your router and one of Qwest's DNS servers for DNS resolution:

DNS servers configured through DHCP: 192.168.0.1 <-- Your router
205.171.2.25 <--Qwest's DNS server

Qwest's DNS server will need to be removed from your machine for filtering to work correctly. If you find your computer's IPV4 DNS settings you should be able to remove the 205.171.2.25 address.

Have you configured your router to use our DNS settings? If you provide the output of the following command it will show whether or not your router is configured correctly:

nslookup -type=txt debug.opendns.com. 192.168.0.1

We have directions to configure the PK5001Z ZyXel router here: https://support.opendns.com/entries/30787100-Configuring-Actiontec-M1000-or-W1000-ZyXel-PK5001Z

heintz_57 · ‎01-29-2015

i tried using the directions in the link you sent and completely messed up my modem connection. My modem is now reset to factory defaults. Below is the cmd output.

C:\Documents and Settings\jheintz>nslookup -type=txt debug.opendns.com. 192.168.
0.1
Server: PK5001Z.PK5001Z
Address: 192.168.0.1

*** PK5001Z.PK5001Z can't find debug.opendns.com.: Non-existent domain

rotblitz · ‎01-29-2015

You still do not use OpenDNS but whatever is configured on this router at 192.168.0.1.

Now follow the link posted by Kristy to configure OpenDNS on your router, doing exactly and only what is described there:
https://support.opendns.com/entries/30787100-Configuring-Actiontec-M1000-or-W1000-ZyXel-PK5001Z
You shouldn't mess it up with this.

Then flush your caches and test again at http://welcome.opendns.com/ to see if it works.

matthewbowers · ‎05-15-2015

I'm having a similar problem. I have blocked a group of sites, which are also religious related and they are not being blocked. I've attached screen shots. I'm using an Apple Time Machine (Router), and an iMAC, running the latest OS. Please advise. Thank you.

Screen Shot 2015-05-15 at 11.33.03 AM.png
Screen Shot 2015-05-15 at 12.06.12 PM.png
Screen Shot 2015-05-15 at 12.02.37 PM.png

rotblitz · ‎05-15-2015

According to your configuration it seems you also have IPv6 connectivity, because you have the OpenDNS IPv6 Sandbox addresses configured: 2620:0:ccc::2 and 2620:0:ccd::2. But as mentioned in several threads here, if using IPv6 connectivity (for DNS queries), the additional features of OpenDNS (content filtering, individual domain blocking, logs and stats, etc) do not take effect, because you cannot register your IPv6 address at https://dashboard.opendns.com/settings/ yet, just your IPv4 address.

Therefore, to make use of the additional features, you have to disable IPv6 connectivity over the internet (foremost for DNS if you can), on the router or on the end user devices.

To see if you're using IPv6 connectivity for your DNS queries and if you configured OpenDNS correctly, you raise a DNS lookup command like:

nslookup -type=txt debug.opendns.com.

holtfamilyhouse · ‎09-01-2015

I'm having the same problem.

When I try http://welcome.opendns.com/, it works fine.

Here's what I get when I use the command nslookup -type=txt debug.opendns.com

Server: 192.168.0.1

Address: 192.168.0.1#53

Non-authoritative answer:

debug.opendns.com text = "server 1.mia"

debug.opendns.com text = "flags 20 0 72 19500007E0000000441"

debug.opendns.com text = "originid 36107581"

debug.opendns.com text = "actype 2"

debug.opendns.com text = "bundle 7852101"

debug.opendns.com text = "source 201.217.253.220:60050"

Authoritative answers can be found from:

Can you help me?? Thanks!

mattwilson9090 · ‎09-01-2015

The device you tested from appears to be using your router as your local DNS server, which is a good thing. That means your router needs to be configured to use OpenDNS as it's DNS resolvers, but it appears not to be. You should carefully look at your router's settings to see what is being used for DNS and change them to the OpenDNS addresses.

jtoliver44 · ‎04-17-2016

nslookup -type=txt debug.opendns.com. 208.67.220.220

nslookup whoami.akamai.net.

netsh interface ip show dns