Hi,
I am having a similar problem. I set up the OpenDNS servers as described on the Ubuntu setup page and the test website shows I am OK, but pornhub for example is not blocked.
I am running Ubuntu 21.10
> uname -a
Linux ... 5.13.0-21-generic #21-Ubuntu ...
> nslookup pornhub.com
Server: 127.0.0.53
Address: 127.0.0.53#53
Non-authoritative answer:
Name: pornhub.com
Address: 66.254.114.41
Here I copy the output of the diagnostic commands above.
> nslookup -type=txt debug.opendns.com
Server: 127.0.0.53
Address: 127.0.0.53#53
Non-authoritative answer:
debug.opendns.com text = "server r7.cdg1"
debug.opendns.com text = "flags 60040020 0 70 180000000000000000007950800000000000000"
debug.opendns.com text = "originid 0"
debug.opendns.com text = "orgflags 2000000"
debug.opendns.com text = "actype 0"
debug.opendns.com text = "source 86.238.152.104:58515"
Authoritative answers can be found from:
> nslookup -type=txt debug.opendns.com 208.67.222.222
Server: 208.67.222.222
Address: 208.67.222.222#53
Non-authoritative answer:
debug.opendns.com text = "server r1.cdg1"
debug.opendns.com text = "flags 60040020 0 70 180000000000000000007950800000000000000"
debug.opendns.com text = "originid 0"
debug.opendns.com text = "orgflags 2000000"
debug.opendns.com text = "actype 0"
debug.opendns.com text = "source 86.238.152.104:34746"
Authoritative answers can be found from:
> nslookup -type=txt -port=443 debug.opendns.com 208.67.222.222
Server: 208.67.222.222
Address: 208.67.222.222#443
Non-authoritative answer:
debug.opendns.com text = "server r2.cdg1"
debug.opendns.com text = "flags 60040020 0 70 180000000000000000007950800000000000000"
debug.opendns.com text = "originid 0"
debug.opendns.com text = "orgflags 2000000"
debug.opendns.com text = "actype 0"
debug.opendns.com text = "source 86.238.152.104:57354"
Authoritative answers can be found from:
> nslookup -type=txt -port=5353 debug.opendns.com 208.67.222.222
Server: 208.67.222.222
Address: 208.67.222.222#5353
Non-authoritative answer:
debug.opendns.com text = "server r6.cdg1"
debug.opendns.com text = "flags 60040020 0 70 180000000000000000007950800000000000000"
debug.opendns.com text = "originid 0"
debug.opendns.com text = "orgflags 2000000"
debug.opendns.com text = "actype 0"
debug.opendns.com text = "source 86.238.152.104:52514"
Authoritative answers can be found from:
> traceroute 208.67.222.222
traceroute to 208.67.222.222 (208.67.222.222), 30 hops max, 60 byte packets
1 _gateway (192.168.1.1) 0.851 ms 1.043 ms 1.265 ms
2 80.10.235.169 (80.10.235.169) 9.266 ms 9.530 ms 9.797 ms
3 ae107-0.ncidf203.rbci.orange.net (193.249.213.242) 9.765 ms 10.028 ms 9.984 ms
4 ae41-0.niidf201.rbci.orange.net (193.252.98.161) 10.248 ms 10.216 ms 10.481 ms
5 ae40-0.niidf202.rbci.orange.net (81.253.129.186) 10.447 ms 10.711 ms 11.174 ms
6 193.252.137.74 (193.252.137.74) 11.410 ms * *
7 ae-26.a00.parsfr05.fr.bb.gin.ntt.net (129.250.66.141) 9.053 ms 9.316 ms 9.579 ms
8 ae-14.r20.parsfr04.fr.bb.gin.ntt.net (129.250.2.150) 13.197 ms 13.164 ms ae-14.r21.parsfr04.fr.bb.gin.ntt.net (129.250.2.70) 9.481 ms
9 ae-0.a00.parsfr04.fr.bb.gin.ntt.net (129.250.3.252) 12.583 ms 12.539 ms 17.319 ms
10 xe-1-5-0-1.a00.parsfr04.fr.ce.gin.ntt.net (81.25.197.6) 12.201 ms 11.862 ms 12.667 ms
11 * * *
> traceroute api.opendns.com
traceroute to api.opendns.com (146.112.255.155), 30 hops max, 60 byte packets
1 _gateway (192.168.1.1) 0.868 ms 1.074 ms 1.337 ms
2 80.10.235.169 (80.10.235.169) 8.991 ms 9.255 ms 9.519 ms
3 ae107-0.ncidf203.rbci.orange.net (193.249.213.242) 9.486 ms 9.750 ms 9.715 ms
4 ae41-0.niidf201.rbci.orange.net (193.252.98.161) 9.970 ms 9.937 ms 10.201 ms
5 ae40-0.niidf202.rbci.orange.net (81.253.129.186) 10.469 ms 10.708 ms 10.675 ms
6 193.252.137.74 (193.252.137.74) 10.936 ms 3.723 ms *
7 ae-26.a00.parsfr05.fr.bb.gin.ntt.net (129.250.66.141) 10.203 ms 10.457 ms 10.423 ms
8 ae-14.r20.parsfr04.fr.bb.gin.ntt.net (129.250.2.150) 9.499 ms ae-14.r21.parsfr04.fr.bb.gin.ntt.net (129.250.2.70) 9.766 ms ae-14.r20.parsfr04.fr.bb.gin.ntt.net (129.250.2.150) 9.734 ms
9 ae-1.a00.parsfr04.fr.bb.gin.ntt.net (129.250.3.254) 31.508 ms 31.778 ms ae-0.a00.parsfr04.fr.bb.gin.ntt.net (129.250.3.252) 18.268 ms
10 xe-1-5-0-1.a00.parsfr04.fr.ce.gin.ntt.net (81.25.197.6) 10.488 ms 14.444 ms 14.712 ms
11 146.112.177.9 (146.112.177.9) 14.975 ms 146.112.177.37 (146.112.177.37) 14.944 ms 146.112.177.17 (146.112.177.17) 15.101 ms
12 * * *
> ifconfig
enp0s31f6: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.18 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::c52:51bd:2bc8:411f prefixlen 64 scopeid 0x20<link>
inet6 2a01:cb04:74a:f300:4368:69b3:cfbf:8a6c prefixlen 64 scopeid 0x0<global>
inet6 2a01:cb04:74a:f300:fcd5:abb2:e24d:7ef1 prefixlen 64 scopeid 0x0<global>
ether 2c:56:dc:48:46:c5 txqueuelen 1000 (Ethernet)
RX packets 20438 bytes 20301432 (20.3 MB)
RX errors 0 dropped 154 overruns 0 frame 0
TX packets 11357 bytes 1300189 (1.3 MB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
device interrupt 16 memory 0xdf200000-df220000
lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1000 (Local Loopback)
RX packets 1979 bytes 188566 (188.5 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1979 bytes 188566 (188.5 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
> nslookup internetbadguys.com
Server: 127.0.0.53
Address: 127.0.0.53#53
Non-authoritative answer:
Name: internetbadguys.com
Address: 146.112.61.108
Name: internetbadguys.com
Address: ::ffff:146.112.61.108
> nslookup internetbadguys.com 208.67.222.222
Server: 208.67.222.222
Address: 208.67.222.222#53
Non-authoritative answer:
Name: internetbadguys.com
Address: 146.112.61.108
Name: internetbadguys.com
Address: ::ffff:146.112.61.108
> nslookup internetbadguys.com 208.67.220.220
Server: 208.67.220.220
Address: 208.67.220.220#53
Non-authoritative answer:
Name: internetbadguys.com
Address: 146.112.61.108
Name: internetbadguys.com
Address: ::ffff:146.112.61.108
> nslookup internetbadguys.com 4.2.2.1
Server: 4.2.2.1
Address: 4.2.2.1#53
Non-authoritative answer:
Name: internetbadguys.com
Address: 146.112.255.155
> traceroute internetbadguys.com
traceroute to internetbadguys.com (146.112.61.108), 30 hops max, 60 byte packets
1 _gateway (192.168.1.1) 0.830 ms 1.094 ms 1.363 ms
2 80.10.235.169 (80.10.235.169) 8.697 ms 8.962 ms 9.226 ms
3 ae107-0.ncidf203.rbci.orange.net (193.249.213.242) 9.193 ms 9.458 ms 9.409 ms
4 ae41-0.niidf201.rbci.orange.net (193.252.98.161) 9.673 ms 9.916 ms 9.883 ms
5 ae40-0.niidf202.rbci.orange.net (81.253.129.186) 10.147 ms 10.778 ms 11.030 ms
6 * * *
7 ae-26.a00.parsfr05.fr.bb.gin.ntt.net (129.250.66.141) 7.981 ms 8.247 ms 8.512 ms
8 ae-14.r20.parsfr04.fr.bb.gin.ntt.net (129.250.2.150) 8.479 ms 8.746 ms 11.385 ms
9 ae-11.r01.londen14.uk.bb.gin.ntt.net (129.250.3.64) 14.902 ms 15.157 ms 17.020 ms
10 ae-2.a01.londen14.uk.bb.gin.ntt.net (129.250.3.9) 14.495 ms 17.512 ms 17.739 ms
11 ae-0.cisco-opendns.londen14.uk.bb.gin.ntt.net (83.231.146.186) 17.193 ms 12.520 ms 12.522 ms
12 * * *
Even after flushing the DNS caches I get this:
> sudo systemd-resolve --flush-caches
> nslookup http://www.internetbadguys.com
Server: 127.0.0.53
Address: 127.0.0.53#53
Non-authoritative answer:
Name: http://www.internetbadguys.com
Address: 146.112.61.108
Name: http://www.internetbadguys.com
Address: ::ffff:146.112.61.108
> nslookup http://www.exampleadultsite.com/
Server: 127.0.0.53
Address: 127.0.0.53#53
** server can't find http://www.exampleadultsite.com/: NXDOMAIN
Thanks a lot for the help in advance!
