Randomly getting error messages with opendns software installed

genericreplies · ‎09-09-2014

The pc which I which to monitor has a dynamic IP. The pc is a user account with no admin access. The opendns is installed with all the IP settings. I have followed all the settings and installed the software. I noticed that on two occasions, opendns is not working.

1. The IP address is registered to/used by another user. I have no idea why this happens. Managed to get this once and restarting the pc solved the problem.

2. The computer IP does not match the opendns IP, or something like that. True enough, the IP is different compared to the IP provided by opendns.

Are there methods to cure this problem?

In both instances, the opendns popup box comes out and warns there is a problem with IP. The only problem with this is that the user may know/detect that opendns is used and will try methods to circumvent the filter, even when running the software in hidden mode it is not really that hidden. I have tried qustodio, and the hidden mode is much superior. You will need to log in online to deactivate the hidden mode and on a user without admin access, access for filtered content is impossible unless there is a 3rd person app or a portable app which uses a different proxy, for example.

Thank you.

rotblitz · ‎09-10-2014

"The IP address is registered to/used by another user. I have no idea why this happens."

If you inherit an IP address from another OpenDNS user who doesn't keep the IP address information updated at OpenDNS, you'll get this error message, meaning your current IP address is still/already registered with anotherOpenDNS network. This can rarely happen. Rebooting your ISP facing device should solve it, because you may get a different IP address assigned this way.

"True enough, the IP is different compared to the IP provided by opendns."

OpenDNS does not provide IP addresses. Only your ISP does.

"The computer IP does not match the opendns IP, or something like that."

Your computer's IP address is irrelevant if your computer is behind a router. Only your ISP assigned IP address counts. If you execute the command:

nslookup myip.opendns.com.

it will show you the IP address OpenDNS sees from you. This is the one which must be configured at https://dashboard.opendns.com/settings/ for your settings to take effect at all.

"The only problem with this is that the user may know/detect that opendns is used and will try methods to circumvent the filter, even when running the software in hidden mode it is not really that hidden."

Yes, running this OpenDNS Updater is suboptimal in such a scenario. Better uninstall it, and install and run Marc's Updater instead. You can hide its systray icon too, better than with the official OpenDNS Updater. This runs as a Windows service in the background, independent from a user or admin being logged in.
http://updater.marc-hoersken.de/

genericreplies · ‎09-10-2014

Thanks for the help. Will do that.

genericreplies · ‎09-10-2014

So the Marcs Updater is superior than OpenDNS's own software?

I cannot run both at the same time? Or will there be issues?

genericreplies · ‎09-11-2014

I also noticed that if the computer is connected, disconnected, the openDNS software pops up and reconnect back to the same wifi network, the filter list seems to be disabled as long as the update IP is not pressed.

A second problem I've encountered is that the software seems to not be able to detect the onboard wifi IP address. When I press update/refresh, the computer IP is blank and the filters are not in place.

rotblitz · ‎09-11-2014

"So the Marcs Updater is superior than OpenDNS's own software?"

Not really. It was the official updater before the current OpenDNS one. Every updater has advantages and disadvantages. In your scenario Marc's Updater is apparently the better solution.

"I cannot run both at the same time?"

You could, but why would you want to do it? There is no reason for.

" Or will there be issues?"

Well, the issues with the official OpenDNS Updater you reported will remain, and you will be sending abusive (unnecessary) updates to OpenDNS.

"the openDNS software pops up and reconnect back to the same wifi network"

Not sure what you're saying here. Isn't it supposed to connect via the active network connection? Isn't that your WiFi network?

"the filter list seems to be disabled as long as the update IP is not pressed."

Yes, OpenDNS content filtering and stats do not take effect as long as your IP address information is not registered with OpenDNS.
You can check this at https://dashboard.opendns.com/settings/
The IP address information not being registered indicates that an update did not take place or was unsuccessful. The update log of the Updater should give more insights.

"A second problem I've encountered is that the software seems to not be able to detect the onboard wifi IP address. When I press update/refresh, the computer IP is blank"

Again not sure what you mean by "onboard wifi IP address". I don't know this term as an ICT term. What exact IP address are you talking about? Where and/or how do you see it? The only relevant IP address is your ISP assigned public IP address as seen at e.g. http://myip.dnsomatic.com/

genericreplies · ‎09-13-2014

Thank you for the reply.

The PC which uses OpenDNS is via wifi. I noticed when the wifi has been disconnected either manually or not, the software updates, then pc reconnects back to the same wifi, but the software has not been updated, I noticed that it is possible to access the blocked websites?

I've also tried android thetering and configured the IP for OpenDNS. I noticed that I can still access the blocked websites even though the software is on. Is there a way to fix this?

Thanks

rotblitz · ‎09-14-2014

"The PC which uses OpenDNS is via wifi. I noticed when the wifi has been disconnected either manually or not, the software updates, then pc reconnects back to the same wifi, but the software has not been updated"

I don't see a relationship to OpenDNS here. It is most likely something else. And yes, if you disconnect, software updates cannot complete, generally.

"I noticed that it is possible to access the blocked websites?"

Is it? Then post the complete plain text output of the following diagnostic command here:

nslookup -type=txt debug.opendns.com.

so that I can see what the problem may be.

genericreplies · ‎09-16-2014

I opened cmd and entered as you said. Here is what I got:

nslookup -type=txt debug.opendns.com

unknown query type: txt.debug. opendns.com

Default Server: resolver1.opendns.com

Address: 208.67.222.222

I also typed this:

nslookup -type=txt which.opendns.com 208.67.220.220

Server: resolver2.opendns.com

Address: 208.67.220.220

Non-authoritative answer:

which.opendns.com text=

"9.sin"

and also tried this:

nslookup -type=txt which.opendns.com

Server: resolver1.opendns.com

Address: 208.67.222.222.

Non-authoritative answer:

which.opendns.com text=

"5.sin"

So, can I buy my own modem and place the openDNS code in it and it can block it at modem level?Or has My ISP fixed the DNS for me?

rotblitz · ‎09-17-2014

"unknown query type: txt.debug. opendns.com"

Try again this command, you made a typo mistake: nslookup -type=txt debug.opendns.com.

The other commands confirm that you're using OpenDNS (location Singapore) for your DNS queries, but not necessarily your dashboard settings.

"So, can I buy my own modem and place the openDNS code in it and it can block it at modem level?"

Hmm, this is strange terminology. There is no blocking at modem or computer level. This is all OpenDNS, not the modem or computer.

If you configure the OpenDNS resolver addresses on your modem or router, OpenDNS takes effect on all connected devices obtaining the configuration automatically from that router.

"Or has My ISP fixed the DNS for me?"

No, as can be seen from your (successful) command outputs.

alexahar · ‎09-17-2014

Based on all of the above and the desire to run hidden filtering on this user, the Roaming Client may be a better choice here. The Updater Client isn't actually performing the filtering and it's only keeping the registered IP address up to date so that the settings apply. The Roaming Client would allow the computer to filter in a hidden mode without any prompts, IP already exists, or mismatch conflicts.

Unlike the OpenDNS Home Basic package, the Roaming Client is available on the Umbrella Prosumer package which runs at $20/user/year for a subscription. It's a relatively low cost to eliminate the headaches you're seeing and it fulfills many of the requests you've had along the way. Hidden mode instructions are available from the readme.txt file after downloading the Roaming Client's .zip file.

genericreplies · ‎09-19-2014

Ok. I did the nslookup -type=txt debug.opendns.com.

Here is what I got:

Non-authoritative answer:

debug.opendns.com text=

"server 5 sin"

debug.opendns.com text=

"flags 20 0 2FC 3C0000000000"

debug.opendns.com text=

"originid23830413"

debug.opendns.com text=

"actype 2"

debug.opendns.com text=

"bundle 6433869"

"source (my IP)

I would like to try the free solution first. I can always direct other users to the guest account when they are here.

rotblitz · ‎09-20-2014

Ok, that's fine. There's nothing problematic.

"I can always direct other users to the guest account when they are here."

There is no "guest account" with OpenDNS you could direct other users to. You just configure the OpenDNS resolver addresses, so that your DNS queries are handled by OpenDNS. That's all. You must have misunderstood something.

genericreplies · ‎09-20-2014

I see. So I guess as long as someone has something like tor already downloaded, they can always access the filtered websites?

Will the Roaming Client or anything solve this? I tried to block the installer at a computer level, however the problem is that people can always tether with their smartphone and download tor and bypass the OpenDNS IP address.

rotblitz · ‎09-20-2014

"as long as someone has something like tor already downloaded, they can always access the filtered websites?"

Ah, this is what you're after! You should have started your original message with this sentence, so that we got quickly to the point and could have saved all the discussion above.

TOR and such are VPN services which use their own DNS, not the DNS you have configured on any of your systems. Therefore OpenDNS cannot take effect then. You have to block such services by IP address and port filtering on your router.

"Will the Roaming Client or anything solve this?"

Two No for the Roaming Client:

How will you become able to install it on devices you don't own and don't have control over? No way!
The Roaming Client may be in conflict with VPN software, or even not. But if the VPN is used, most likely the Roaming Client isn't used at the same time, and vice versa.

Yes for anything: As I said, you'll want to block the IP address ranges and ports on your router representing these VPN services.