cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Bookmark
|
Subscribe
|
290
Views
0
Helpful
7
Replies

OpenDNS not blocking websites

parent_ninja
Level 1
Level 1

I have configured my router settings to use opendns. When I hit https://welcome.opendns.com/, I see the text- Welcome to OpenDNS!Your Internet is safer, faster, and smarter.because you’re using OpenDNS.Thank you!

Under web content filtering settings of my network in opendns, I have blocked certain websites. e.g. youtube.com, quora.com, facebook.com. But I can still open these websites and they are not blocked.

Providing outputs of some relevant commands:

C:\Users\anshimis>nslookup -type=txt debug.opendns.com.
Server: resolver1.opendns.com
Address: 208.67.222.222

Non-authoritative answer:
debug.opendns.com text =

"server m65.sin"
debug.opendns.com text =

"flags 20 0 8050 180000000000000000003950000000000000000"
debug.opendns.com text =

"originid 181617414"
debug.opendns.com text =

"actype 2"
debug.opendns.com text =

"bundle 11443968"
debug.opendns.com text =

"source 122.177.15.170:61585"
_________

C:\Users\anshimis>nslookup whoami.akamai.net.
Server: resolver1.opendns.com
Address: 208.67.222.222

Name: whoami.akamai.net
Address: 2620:0:cca::70
_________

C:\Users\anshimis>netsh interface ip show dns

Configuration for interface "Ethernet"
DNS servers configured through DHCP: 206.223.27.2
206.223.27.1
10.254.79.138
Register with which suffix: Primary only

Configuration for interface "Local Area Connection* 2"
DNS servers configured through DHCP: None
Register with which suffix: Primary only

Configuration for interface "Wi-Fi"
DNS servers configured through DHCP: 208.67.222.222
208.67.220.220
Register with which suffix: Primary only

Configuration for interface "Bluetooth Network Connection"
DNS servers configured through DHCP: None
Register with which suffix: Primary only

Configuration for interface "Loopback Pseudo-Interface 1"
Statically Configured DNS Servers: None
Register with which suffix: None

_________

C:\Users\anshimis>nslookup -type=txt debug.opendns.com. 208.67.220.220
Server: resolver2.opendns.com
Address: 208.67.220.220

Non-authoritative answer:
debug.opendns.com text =

"server m49.sin"
debug.opendns.com text =

"flags 20 0 8050 180000000000000000003950000000000000000"
debug.opendns.com text =

"originid 181617414"
debug.opendns.com text =

"actype 2"
debug.opendns.com text =

"bundle 11443968"
debug.opendns.com text =

"source 122.177.15.170:63256"

 

Kindly help. Thanks!

7 Replies 7

rotblitz
Level 6
Level 6

Your command outputs look good.

If it still does not block according to your dashboard settings, check these points:

parent_ninja
Level 1
Level 1

Thanks for replying!!

I have checked/tried all these steps. Still websites aren't blocked. 

1 - Flushed both caches

2 - Yes I had registered the correct ip address. But here's the thing. Today the ip address has changed to 122.177.198.208. (I have tried from this one too though). Could this be an issue? How would we register permanently to such changing ips? 

3 - I haven't installed data saver extension. Can't find any such setting in chrome. Am I missing something?

4 - https://www.whatismyip.com/proxy-check/ says - No Proxy Detected and No Tor Node Detected

rotblitz
Level 6
Level 6

"How would we register permanently to such changing ips?"

You must run an Updater client within your network.
https://support.opendns.com/hc/en-us/articles/227987787

"Still websites aren't blocked."

What is the output of these commands?

nslookup www.quora.com.
nslookup www.facebook.com.
nslookup www.youtube.com.

 

parent_ninja
Level 1
Level 1

https://support.opendns.com/hc/en-us/articles/227987787 - Enable dynamic IP update under Dynamic IP Update is already checked and turned on by default. Regarding step: "Download, install and run the Dynamic IP Updater client on a computer that is powered on 24/7, or started up daily and does not leave your home network." - I don't have any such computer. Gotta leave for office :) I think I should rather use http://www.thewebblocker.com/

Command outputs:

Server: resolver1.opendns.comC:\Users\anshimis>nslookup www.quora.com

Address: 208.67.222.222

Non-authoritative answer:
Name: quora.map.fastly.net
Addresses: 151.101.1.2
151.101.65.2
151.101.129.2
151.101.193.2
Aliases: www.quora.com


C:\Users\anshimis>nslookup www.facebook.com
Server: resolver1.opendns.com
Address: 208.67.222.222

Non-authoritative answer:
Name: star-z-mini.c10r.facebook.com
Addresses: 2a03:2880:f137:87:face:b00c:0:50fb
157.240.23.39
Aliases: www.facebook.com


C:\Users\anshimis>nslookup www.youtube.com
Server: resolver1.opendns.com
Address: 208.67.222.222

Non-authoritative answer:
Name: www.youtube.com
Addresses: 146.112.61.104
146.112.61.104

rotblitz
Level 6
Level 6

"I don't have any such computer."

You do not necessarily need a computer.  The built-in DDNS update client of your router, NAS, DVR, IP camera, etc. would do it if it supports at least one of OpenDNS, DNS-O-Matic or "custom / user defined".  I use my router for this task.

"I think I should rather use http://www.thewebblocker.com/"

This is locally running software and covers Windows computers only, and you need to install it on every Windows computer.  OpenDNS however is a service in the cloud and covers all devices in your network if configured on the router, as you did.

From your command outputs: I see that YouTube is being blocked by your OpenDNS blacklist settings, not so Quora and Facebook.  Again, ensure that your current (dynamic) IP address is being registered for your network at https://dashboard.opendns.com/settings/
Else OpenDNS have no way to associate your DNS queries with your dashboard settings.

rioux44
Level 1
Level 1

I got the same issu. It was working before. Windows 10 - not working - iOS not working.

cache cleared and etc.

i installed the dyndns.

it just doesnt work at all.

Note: is there a wait to enforce safe search for youtube and google? i know a dns trick but i wanted opendns ...

rotblitz
Level 6
Level 6

"it just doesnt work at all."

The output of the diagnostic commands could help others to help you.

"is there a wait to enforce safe search for youtube and google?"

This is pointed to at https://support.opendns.com/hc/en-us/articles/227986807
Not supported by OpenDNS.