Open DNS not working??? - Page 2

marcyz · ‎05-19-2014

I recently set up Open DNS and everything on my account appears to be set up correctly. HOWEVER... it is not blocking anything :( HELPPPPPP!!!

camptuckahoe544 · ‎12-19-2015

The DNS Addresses are setup on the CentryLink C2000T modem. Both on LAN and WAN configurations.

DNS timed out on the nslookup per your request.

rotblitz · ‎12-19-2015

"Both on LAN and WAN configurations."

This is most likely overdone, but shouldn't prevent from using OpenDNS.

"DNS timed out on the nslookup per your request. "

Then try this variation of the commands:

nslookup -timeout=12 -type=txt debug.opendns.com.

nslookup -timeout=12 -type=txt debug.opendns.com. 208.67.222.220

If you still get timeouts for both commands, copy & paste the complete plain text output of the following command:

ipconfig /all

Because of the unusual timeouts, you may also want to post the output of the following command if you want me to look at the timeout problem:

tracert 208.67.222.220

Think about to take all of these commands from the network where OpenDNS does not work for you.

Hidden Valley Scout Reservatio · ‎12-19-2015

Tracing route to resolver3.opendns.com [208.67.222.220]
over a maximum of 30 hops:

1    <1 ms     1 ms     2 ms 192.168.0.1
2    21 ms    22 ms    22 ms pa-67-234-216-1.dhcp.embarqhsd.net [67.234.216.
]
3    21 ms    25 ms    25 ms crls-agw1.inet.qwest.net [75.160.220.17]
4    39 ms    41 ms    40 ms chp-brdr-03.inet.qwest.net [67.14.8.190]
5    39 ms    38 ms    39 ms ae5.chi12.ip4.gtt.net [173.205.63.229]
6    41 ms    40 ms    40 ms xe-1-2-0.chi11.ip4.gtt.net [141.136.107.189]
7    40 ms    43 ms    40 ms opendns-gw.ip4.gtt.net [216.221.158.198]
8    41 ms    43 ms    40 ms resolver3.opendns.com [208.67.222.220]

Trace complete.

rotblitz · ‎12-20-2015

@Hidden Valley Scout Reservation
Are you the same person as camptuckahoe544? There's nothing wrong with your traceroute.

@camptuckahoe544
If you need more help, you'd to post the other commands as well.

camptuckahoe544 · ‎12-20-2015

Yeah Hidden Valley and Camp Tuckahoe are still me, I was running the trace route by accident from the other account. So everything is working as it should be?

rotblitz · ‎12-20-2015

The traceroute was to show where the timeouts might be coming from. But it didn't explain it.

You said you had the "same issues" as the original poster, meaning your content filtering and stats did not work. I cannot know if everything is working now, only you can know.

camptuckahoe544 · ‎12-20-2015

Currently at this time, its still not working. Not sure where else to look.

rotblitz · ‎12-20-2015

I said what command outputs I need to see to help futher, so do so as advised.

Hidden Valley Scout Reservatio · ‎12-20-2015

C:\Users\Camp Director>nslookup - timeout=12 -type=txt debug.opendns.com
Usage:
   nslookup [-opt ...]             # interactive mode using default server
   nslookup [-opt ...] - server    # interactive mode using 'server'
   nslookup [-opt ...] host        # just look up 'host' using default server
   nslookup [-opt ...] host server # just look up 'host' using 'server'

and...

C:\Users\Camp Director>nslookup -timeout=12 -type=txt debug.opendns.com. 208.67.
222.220
Server: resolver3.opendns.com
Address: 208.67.222.220

Non-authoritative answer:
debug.opendns.com text =

"server 11.chi"
debug.opendns.com text =

"flags 20 0 70 5950800000000000000"
debug.opendns.com text =

"originid 0"
debug.opendns.com text =

"actype 0"
debug.opendns.com text =

"source 67.234.221.109:51250"

Hidden Valley Scout Reservatio · ‎12-20-2015

Windows IP Configuration

   Host Name . . . . . . . . . . . . : CampDirector-PC
   Primary Dns Suffix . . . . . . . :
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : domain

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix . : domain
   Description . . . . . . . . . . . : Realtek RTL8168C(P)/8111C(P) Family PCI-E
Gigabit Ethernet NIC (NDIS 6.20)
   Physical Address. . . . . . . . . : 00-25-64-E5-DA-E0
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::a455:c80b:f07f:e8e9%10(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.0.10(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Sunday, December 13, 2015 10:16:23 PM
   Lease Expires . . . . . . . . . . : Sunday, December 20, 2015 11:46:26 AM
   Default Gateway . . . . . . . . . : 192.168.0.1
   DHCP Server . . . . . . . . . . . : 192.168.0.1
   DHCPv6 IAID . . . . . . . . . . . : 234890596
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-1D-0F-6C-DB-00-25-64-E5-DA-E0

   DNS Servers . . . . . . . . . . . : 208.67.222.222
                                       208.67.220.220
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter isatap.domain:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix . : domain
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

C:\Users\Camp Director>ipconfig /all

rotblitz · ‎12-20-2015

The first command "nslookup - timeout=12 -type=txt debug.opendns.com." failed, because there was a space between - and timeout, therefore the usage was explained.

The second nslookup shows that your IP address 67.234.221.109 is not registered with your network at https://dashboard.opendns.com/settings/
Therefore OpenDNS cannot associate your DNS queries with your dashboard settings, and your settings cannot take effect. If you fix this, content filtering and stats will work, and your problems should have gone.

"When I go to the Dashboard, it claims that it is registered to the account appropriately."

Therefore this statement is not correct.

The "ipconfig /all" output shows that your PC is connected via cable to the router, and that you have configured the OpenDNS resolver addresses on the PC. That's fine.

Hidden Valley Scout Reservatio · ‎12-21-2015

C:\Users\Camp Director>nslookup -timeout=12 -type=txt debug.opendns.com
Server: resolver1.opendns.com
Address: 208.67.222.222

Non-authoritative answer:
debug.opendns.com text =

"server 5.chi"
debug.opendns.com text =

"flags 20 0 70 5950800000000000000"
debug.opendns.com text =

"originid 0"
debug.opendns.com text =

"actype 0"
debug.opendns.com text =

"source 67.234.221.109:51293"

C:\Users\Camp Director>"nslookup - timeout=12 -type=txt debug.opendns.com"

Hidden Valley Scout Reservatio · ‎12-21-2015

Please see attachments as I provided from my Dashboard settings as well.

capture 3.JPG
Capture 2.JPG
capture 6.JPG
capture 5.JPG
Screen 1.JPG
capture 4.JPG

Hidden Valley Scout Reservatio · ‎12-21-2015

I also provided screenshots of my Router/Modem provided by CenturyLink T2000 series.

capture 7.JPG
capture 10.JPG
capture 8.JPG
capture 9.JPG

mattwilson9090 · ‎12-21-2015

One thing you *MUST* do is disable IPv6 on the router. It's entirely likely that all of your DNS traffic is going out via IPv6, in which case OpenDNS will not receive or process any of it for filtering. Even if you were using the OpenDNS IPv6 "sandbox" addresses, which you aren't, those only support name resolution, not filtering or any other services.

Once your traffic is going out via IPv4 to OpenDNS, about 24 hours your stats will start populating.