Not blocking adult websites

[satishkr]

I had setup OpenDNS in my router as per the instructions provided in OpenDNS.com and also flushed the DNS (ipconfig /flushdns) and web browser cache but still the adult websites (like www.xvideos.com) are not blocked and also couldn't find any requests showing up in Stats log - not sure if the setup is really correct; tried to follow all the instructions provided in OpenDNS.com. Please advice how to troubleshoot what I missed.

[satishkr]

Update - I just found some traffic in the Stat logs but it didn't find the adult website that I was testing with (but it came up through fine while testing).

[rotblitz]

Stats are not real-time. Initially it takes up to 24 hours, later on it takes 2-3 hours to appear.

If your settings do not take effect and stats are not collected, then your IP address information is not updated: https://dashboard.opendns.com/settings/

[satishkr]

I could see some traffic in the Stats log now but not sure how to test if it really blocks adult websites. I tried to google and was able to open few adult sites. Is there any adult site that this OpenDNS will block for sure (that assures that my settings are correct) and how do I make it to block all other adult sites? Thanks in advance.

[cervezafria]

@satishkr... playboydotcom should be blocked by either nudity or pornography filters.

[rotblitz]

http://www.exampleadultsite.com/

[satishkr]

Thank you rotblitz and cervezafria. I tried both the above sites exampleadultsite and playboy - they are not blocked. For exampleadultsite I could see the text "if you were using OpenDNS Parental Controls... this demo and real adult sites would be blocked." in it. I have installed the IP updater software as well just in case. Please advice.

[rotblitz]

Post the complete plain text output of the following command here:

nslookup -type=txt debug.opendns.com.

[satishkr]

Below is the result of the command: nslookup -type=txt debug.opendns.com.

----------------------------------------

Server:  UnKnown

Address:  192.168.0.5

Non-authoritative answer:

debug.opendns.com       text =        "server 1.dfw"

debug.opendns.com       text =        "flags 20 0 2fe 0"

debug.opendns.com       text =        "id 16907007"

debug.opendns.com       text =        "source 72.179.139.16:2056"

--------------------------------

"192.168.0.5" is my router IP and "72.179.139.16" is my IP address (the same shows up when I login to opendns.com).

[rotblitz]

I know what these IP addresses are. Your output looks good. Now post the output of this command:

nslookup www.exampleadultsite.com.

[satishkr]

Thank you rotblitz; below is the output of: nslookup www.exampleadultsite.com.

--------

5.0.168.192.in-addr.arpa
primary name server = localhost
responsible mail addr = nobody.invalid
serial = 1
refresh = 600 (10 mins)
retry = 1200 (20 mins)
expire = 604800 (7 days)
default TTL = 10800 (3 hours)
Server: UnKnown
Address: 192.168.0.5

Non-authoritative answer:
Name: www.exampleadultsite.com
Address: 67.215.92.210

[rotblitz]

This 67.215.92.210 is the real IP address, not the one of those which would appear for blocked domains.

The only explanations I would have is that your IP address 72.179.139.16 is not registered with your OpenDNS network, but with another. Then network ID 16907007 would not be yours.
https://dashboard.opendns.com/settings/

Or you didn't check the related categories for blocking in your dashboard settings.

[ahoncian]

@satishkr, I was able to look up your account and see that the IP address in this thread matches in your account. It seems that your filters are not yet set up in your dashboard. Please visit https://opendns.zendesk.com/forums/21242740-Getting-Started-with-OpenDNS for information how to configure your OpenDNS network to block certain content.

After completing the above step, please flush your browser and DNS cache by following the instructions below:

http://www.opendns.com/support/article/67
http://www.opendns.com/support/article/68

Next try visiting playboy.com or exampleadultsite.com, you should be directed to a block page. 

Best,

Anthony Honciano
OpenDNS inc.