Use Wildcard to Limit TLD (and block Google search images)

[jmerichards]

Hi Folks,

I'm new, so please take it easy.

I know this has been canvassed to death over the years on OpenDNS forums, but I have found no recent discussion on the subject.

I want to be able to block all Google search sites, without having to list and maintain every TLD they prefix "google" to.  For example, I'd like to be able to enter "google.*" into my always block list, then allow certain Google domains (e.g. translate.google.com).  I've already got explicit blocking on google.com, google.ca, etc., but the list is too extensive to reasonably maintain.  I'm allowing translate.google.com through and it all seems to work and I have not noticed any performance issues.

For those people that are wondering why, it's because Google do not support blocking porn from their search results, but Bing do (via explicit.bing.com). I am blocking access to all Google search sites in favour of Bing for this reason.

If you'd like to suggest installing other software on computers, that is not feasible because of the number of devices accessing the Internet through my network (tablets, computers, TV's, etc.).

Any help or suggestions welcome, thanks in advance.

EDIT: Please see the document attached to this original post (below) for a summary solution from this thread.

Use Wildcard to Limit TLD (and block Google search images).pdf

[rotblitz]

"my router doesn't have those options. I'm looking for a new one."

You didn't say what exact model you have.  There may be options nevertheless also with this router.

"I have the automated email reply, I just don't have a reply from the support desk."

So "reply" to this e-mail, keeping the reference number in the subject line, to reach out to OpenDNS support.

[jmerichards]

My router is a Belkin F1PI243EGAU, marketed in Australia as BoB (version 1), by iiNet. It has limited DDNS features. With regard to the ticket number, I will take your advice; thanks.

[rotblitz]

Yes, I see from http://ftp.iinet.net.au/pub/iinet/belkin/F1PI243EGau/Documentation/ that your router supports only dyndns.com and tzo.com (which is now dyndns.com too).  You had to get another router to do the updates for you.

[jmerichards]

Yep. We have a high speed broadband rollout going on in Australia at the moment (although It has halted pending review by a new federal government), so I needed a new router anyway.

[defgal]

If you do block Google , you are also blocking some of the kid friendly search engine (like kids.gov or something like that. They use Google so kids can search within their website). It gets very frustrating for a kid. My son did. So I allow it now. And safe search rarely work and when I can lock safesearch, they can unlock it by clearing history and caches.

Try adding k-9 protection software

[pengalo]

This is a very frustrating problem.  Many, many sites now depend on some portion of google for functionality (not just search, but other functionality too).   You can't just block google.* since it breaks half the sites on the internet.  Somehow google is now so ingrained in everything internet that you can't block them.  Their SafeSearch is a scam to try and pacify parents.  I've sent my feedback to them repeatedly to please, please implement something like bing did with explicit.bing.net, which works great.  Everyone concerned with this issue needs to send their feedback to google to give us a DNS or router based way to block porn searches.

[jmerichards]

@defgal: "Try adding k-9 protection software"

Hi. These kinds of options might work for a home environment using only desktops (PC's/Macs, etc).  However the range of computing devices available these days, particularly smart phones and tablets, makes "Net Nanny" style solutions somewhat redundant (except in treating specific machines).

This is where services like OpenDNS can have the edge, if it's easy to implement and properly marketed so as to control client expectations. Despite some of the grumbling I have done in this thread, I'm happy with the solution posted here as a means to limit the viewing of porn on my home network, on all devices that use it.

@pengalo: I feel your pain.

[jmerichards]

I've attached a document to the top of this thread (in the original post) that lists the changes I've made in my home network to get the results I was looking for. I will update the information in the document as I find the need to make changes to my OpenDNS settings to keep things safe.

[cervezafria]

@jmerichards... OpenDNS is pretty useless for cell phones, once you go beyond your personal wifi network with either external APs or the cellular networks, unless you VPN into your home network once you leave the house. Every smartphone brings a world of porn to its user.

[karenam]

cervezafria, while this is true I do not think jmerichards was primarily intending his instructions for this, it was mainly for his home network, which I appreciate the posts very much as this is my main concern. If you need something for cell phones, K9 works very good for us. it is totally free and once set up has so far has worked very well for us, also works for other portable devices like ipad and ipods. Just a thought.

[jmerichards]

@cervezafria: Yes, I understand that, no problem. It is as Karenam has said; I'm wanting to control the use within the confines of my wifi network. I don't want to be responsible for giving my guests children access to porn on their smart phones via my home network. @Karenam: Thanks for your suggestion about K9. I have downloaded it on my ipad to test it and will install it on my youngest's phone. Apologies to all if there's no line breaks in my replies; they don't seem to work from an ipad.

[davidlev]

Just to follow up: I've done everything above, and still can find porn images when searching Bing. Haven't tried vagina, like above, but something as simple as 'sex' returns bad images. I wish there was a way to force the 'strict' or 'moderate' search results in bing magically. I should note I have the bing.net blocked (per above), but have mm.bing.net allowed. Google maps is working, but not in satellite mode (no terrain/pictures of houses, which I need).

[cervezafria]

@davidlev... OpenDNS lacks the granularity you are seeking; worse yet, a simple proxy can bypass all your filters.You may want to consider a software solution. In addition, you might restrict net usage to machines located in a very public area (no bedrooms, no closed doors, etc.) OpenDNS is an 80% solution. It protects well gains inadvertent exposure, but NOT intentional exposure.. If you're going to look for porn, you will find it. OpenDNS can't prevent that. There are too many porn websites created daily, and the OpenDNS classification system takes months, even years to respond. Bing and Google images add another layer of access which OpenDNS is not set up to handle without totally blocking all access to their search results.

[davidlev]

Thank you. I had bad luck with safe eyes / internet safety.com / MacAfee, so went with OpenDNS. The 50 blacklist cap is what I'm against with OpenDNS, and it keeps showing those 'sex' and 'vagina' images on Bing - the only site I believe I have available to search the web on right now (with the explicit blocked, etc.). I want to enforce the 'strict' setting in bing, but cannot find a way to do so across all wifi-enabled or desktop devices.  Open to other options for software-based solutions.  Was considering the Umbrellla-thing, too.  I am willing to pay up to several hundred a year to secure my family, no problem - especially if on iDevices as well. Educate me to what my options are - this search results showing bad images problem is huge - reading about it everywhere in these forums for past 5 days.

[davidlev]

I should also note that it sounds like if the umbrella/proxy software is installed on the iOS device, they are covered at home with OpenDNS configured on router, mobile/data roaming with VPN client/umbrella, but if they go to friends' wifi or starbucks, or even school/college and jump on their wifi, they will not be protected. Surely someone has thought about and fixed this somehow by now...any suggestions?