Router setup fails to block Windows 10 Laptop

[ghoomar]

Hello

I am a new user - and am trying to get OpenDNS setup.

So far I have:

Completed the Router Configuration 

     * Configured my router (ASUS RT-N12D1) to use the OpenDNS IP addresses 

     * Disabled IPv6 on my router 

    * Rebooted the router  

Setup my Network Profile

   * It is set to my Routers WAN IP Address 

   * Set the filtering rules to "High" 

Verified that the setup works on my iPad / Android Tablet

  * Visited http://welcome.opendns.com/ and confirmed that it says I am using OpenDNS

But on my Windows 10 Pro Laptop the same test fails and it shows I am not using OpenDNS.

* I have flushed the DNS cache 

* I have restarted the PC 

* I have verified each individual Network Adapter IPv4 setting to confirm they are all configured to get hte DNS automatically. 

* I have verified that IPConfig -ALL shows the only DNS to be the Home Router. 
* I have confirmed that IPV6 is disabled for my network adapter 

Based on the tests I saw recommended on other threads here is the output 

nslookup -type=txt debug.opendns.com. 208.67.220.220

Server: resolver2.opendns.com
Address: 208.67.220.220

Non-authoritative answer:
debug.opendns.com text =

"server m49.sea"
debug.opendns.com text =

"flags 40020 0 50 1800000000000000000039500007F00400814C3"
debug.opendns.com text =

"originid 419131114"
debug.opendns.com text =

"actype 2"
debug.opendns.com text =

"bundle 12704254"
debug.opendns.com text =

"source 162.213.76.125:63101"

nslookup -type=txt which.opendns.com.

Server: router.asus.com
Address: 192.168.127.1

Non-authoritative answer:
which.opendns.com text =

"m21.sea"

nslookup whoami.akamai.net.

Server: router.asus.com
Address: 192.168.127.1

Non-authoritative answer:
Name: whoami.akamai.net
Address: 172.98.86.135

I would really appreciate any suggestion on what I can try to resolve this... 

Thanks  

[rotblitz]

You did everything well, and your command outputs look fine if you posted from the laptop where it does not work.

It looks like your browser or a browser extension ignores your system settings and uses its own way of DNS handling.  I suggest disabling the offending component, so that you can use OpenDNS.

[ghoomar]

I thought so - that is why I first tested the behavior across all the 3 browsers I have (Chrome / IE / Edge) and got the same result. 

I can believe Chrome may have an extension but there is nothing added to Edge or IE... 

Anything else I can look at? 

[rotblitz]

You could run a test like https://www.dnsleaktest.com/ to see what DNS service your browser is actually using.

[ghoomar]

Ok so I ran the test and found this: 

208.67.216.19  m9.sea.opendns.com.                  Cisco OpenDNS, LLC New York, United States
208.67.216.21  m11.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.31  m21.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.36  m25.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.61  m29.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.66  m33.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.71  m37.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.76  m41.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.81  m45.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
208.67.216.86  m49.sea.opendns.com.                Cisco OpenDNS, LLC New York, United States
66.115.149.2    br1-atl5.vl255.nationalnet.com.    Total Server Solutions L.L.C. Seattle, United States
172.98.86.135  None                                            Total Server Solutions L.L.C. United States

I am guessing the last two entries are the ones causing the problem - but how do i get rid of them? 

Given that only my Windows 10 PC is impacted and not any other device (Android Tablet / iPad / Chromebook) this is something on my PC itself. - But the DNS do not show up in any settings any where. 

[ghoomar]

I found it!  -- It was "AVG Internet Security's "  "Fake Website Shield" Protection feature (hidden under "Full Protection" in Settings). Once I turned it Off - it started working.  

But now the questions is

* Is this a safe thing to do? 

* Am I going to be "less secure" because I have turned this feature off? 

[rotblitz]

Excellent! This is a known conflict with AVG and Avast. And disabling this is the only way to use OpenDNS. You have the choice for either OpenDNS or the AVG feature.  I do not know what of the two services offer better protection.