Opendns family shield suddenly notworking

wbaucum · ‎10-05-2017

I can confirm it did work as early as a few days ago, but our family discovered it not working tonight.

222.123 and 220.123 are setup for DNS in our Linksys router.

https://welcome.opendns.com/ shows i am "using OpenDNS as a DNS resolver"

However, http://www.internetbadguys.com/ is not blocked.

And of course, http://www.exampleadultsite.com/ is not blockd.

If it helps, I did the following nslookup.

===============================================

nslookup -type=txt debug.opendns.com

1.0.0.127.in-addr.arpa
primary name server = localhost
responsible mail addr = nobody.invalid
serial = 1
refresh = 600 (10 mins)
retry = 1200 (20 mins)
expire = 604800 (7 days)
default TTL = 10800 (3 hours)
Server: UnKnown
Address: 127.0.0.1

Non-authoritative answer:
debug.opendns.com text =

"server m37.ash"
debug.opendns.com text =

"device 010101AC1FD8B7FC"
debug.opendns.com text =

"flags 36 0 40 3800000000000000000"
debug.opendns.com text =

"originid 106199749"
debug.opendns.com text =

"orgid 2359219"
debug.opendns.com text =

"orgflags 1"
debug.opendns.com text =

"actype 0"
debug.opendns.com text =

"bundle 799099"
debug.opendns.com text =

"source 68.100.251.4:63465"
debug.opendns.com text =

"dnscrypt enabled (713156774457306E)"

============================

Please help! Thank you!

rotblitz · ‎10-05-2017

"222.123 and 220.123 are setup for DNS in our Linksys router."

This is irrelevant, because you're using DNSCrypt on the computer, so your router's DNS settings don't matter unless you also use other devices connected to the router without DNSCrypt where it does not work.

So, the first measure would be to ensure that your DNSCrypt is configured to proxy to one of the FamilyShield (.123) addresses, not to the normal OpenDNS resolver addresses. Then it will work as you expect.

If it is not this, then your problem is of a different nature, most likely your browser is circumventing your DNS settings on the computer. What browser are you using?

If this issue is only on your other devices, then fill also the DNS3 field on the router with one of the FamilyShield addresses.

wbaucum · ‎10-06-2017

At the ris of sounding really stupid, i had no idea what DNSCrypt is until today. I have never knowingly setup a client on my system. You're referring to the same dnscrypt on https://dnscrypt.org? Should I download this client then?

I am using Google Chrome.

rotblitz · ‎10-06-2017

"Should I download this client then?"

No, I said that DNSCrypt is installed on your computer, and it works, so no need to download and install it again.

This is the proof:

Server: UnKnown
Address: 127.0.0.1

debug.opendns.com text =

"dnscrypt enabled (713156774457306E)"

"I have never knowingly setup a client on my system."

If not you, then somebody else. If you don't want it, then you can uninstall it. Or, as I said, you configure it to proxy to a FamilyShield address, not to the normal one. Or you leave it as it is, but use your OpenDNS dashboard to configure what you want.

"I am using Google Chrome."

After all, your browser does not seem to be the culprit. But just in case, if you have the Data Saver mode enabled, disable it.

"However, http://www.internetbadguys.com/ is not blocked."

Then it seems it is not DNSCrypt alone, but something in addition, no idea what.