Opendns/OpenWrt/Hotspotsystem

salyerlake · ‎02-28-2014

I am having a little bit of time getting OpenDNS to work.

If I connect to the router's wifi (which is not set up as open hotspot) the open dns blocks like it should.

When I connect to the ubiquiti 2.4ghz picostation that is currently running openwrt/with the hotspotsytems. The hotspotsytems works as it should but it bypasses the access point and routers open dns setting.

I really like the set up of the hotspotsystem, with a landing page. But I need to block the content. This is going to be deployed at a church camp. The main use would be for the adult sponsors but still want it restricted

I have the dns set on the local router & the access point to.
208.67.222.222
208.67.220.220

Could some one give me detailed steps/some screenshots on how to fix this.

Thank you,
Paul Wood

rotblitz · ‎03-01-2014

Is this your manual? http://dl.ubnt.com/guides/airOS/airOS_UG.pdf

Do you operate the Picostation in bridged mode or in router mode? Is the Picostation WAN side connected to your router which handles the ISP connection? Or does the Picostation handle the ISP connection?

If the WAN side is connected to your router' LAN side, you'll want to assign the Picostation a static WAN facing IP address in the WAN Network Settings, so that you become able to enter the OpenDNS resolver addresses.

Alternatively, disable the "DNS Proxy" in the LAN Network Settings to become able entering the OpenDNS resolver addresses there. This will impact or break local name resolution, so that you'll have to enter your internal names as VPN exceptions at your OpenDNS dashboard.

rotblitz · ‎03-01-2014

Ah, you're using OpenDNS. Then you can use OpenDNS with DNSCrypt: http://wiki.openwrt.org/inbox/dnscrypt

Else you' want to see http://blog.equk.co.uk/2011/09/use-opendns-with-openwrt/

rotblitz · ‎03-01-2014

* I meant to say "Ah, you're using OpenWRT."

salyerlake · ‎03-01-2014

Not finding

We have disabled /tmp/resolv.conf.auto file since it instruct dnsmasq to use your ISP's DNS.
noresolv option also disables /etc/resolv.conf file for similar reason.
127.0.0.1#2053 is the DNSCrypt address.
/pool.ntp.org/208.67.222.222 adds exception for pool.ntp.org domain, which will be resolved thru standard unencrypted DNS channel.
DNSCrypt requires precise time, otherwise you are not able to resolv domain, including pool.ntp.org. OpenDNS server is used for this.

where do you disable this file at?

rotblitz · ‎03-01-2014

I think that https://forum.openwrt.org/ is the best place to discuss this. This is where the OpenWRT experts are. Here are the OpenDNS experts.