Re: What DNS addresses to use with OpenDNS Home VIP ??

Anonymous · ‎08-29-2020

What DNS addresses to use with OpenDNS Home VIP ??

rotblitz · ‎08-29-2020

There are no different addresses. Just the dashboard is a bit different.

Anonymous · ‎08-29-2020

Do I use the Family Shield (.123) or the main ones (.222, .220).

I'm having trouble getting any category customization and specific domains blocked. It says 3 minutes to update, but how long really with all the caching taking place along the line?

Jerry

rotblitz · ‎08-29-2020

You can use any address, normal or FamilyShield.

Do you use OpenDNS at all? http://welcome.opendns.com/

If you flush the caches, your settings changes will be immediate.

Anonymous · ‎08-29-2020

Yes the Welcome page works. I'm just having trouble with the Custom and domain blocking. They don't seem to work. I'l try some more in a couple hours.

And, Thanks for your help!!!!!

Jerry

Anonymous · ‎08-29-2020

I cannot get any functionality using .222 or .220. I get porn blocking with .123. Any changes in the dashboard do nothing. Even setting filter to none still results in porn blocking. Individual domain blocking does not work either. I do see activity in the stats.

So I am left with the assumption that my setup is either wrong or corrupt.

Any ideas on a fix?

Jerry

rotblitz · ‎08-30-2020

Porn will always be blocked with the FamilyShield addresses regardless of your other settings. Your other symptoms indicate that your IP address is not registered at your VIP dashboard. Or you did not configure the right (VIP) dashboard network.

Anonymous · ‎08-30-2020

I came to that conclusion last night also. There must be a configuration issue somewhere. I just don'r see any other way to configure it. I have deleted the config 3 times and recreated. I saw a post that said I should get an email to verify my IP. i"m not getting any but maybe that post was old.

I also don't know what this means..."For individual IP addresses, verification is self-service, if you can click on a link from the network IP address. "

Is there a document somewhere to help with the registration?

Thanks again for your help with this.

Jerry

rotblitz · ‎08-30-2020

https://support.opendns.com/hc/en-us/articles/227988127-Getting-started-About-using-OpenDNS

Anonymous · ‎08-30-2020

Confirming Your Account

"After you have configured your network (devices) to use OpenDNS you should check your email for an account confirmation email from OpenDNS. Not all email services allow hyperlinks within the content of messages, if the link in your email is not clickable copy and paste the link into your browser to confirm your account. If you click (or copy and paste) the link in the confirmation email you will be taken to your OpenDNS dashboard. "

I did not receive an email (I checked trash and spam also) confirming setup. Could this be why it's not working correctly?

Is there any way to generate this email without contacting support?

Jerry

rotblitz · ‎08-31-2020

Copy & paste the complete plain text output of the following diagnostic commands to here:

nslookup -type=txt debug.opendns.com.
nslookup whoami.akamai.net.

rotblitz · ‎08-31-2020

And post a screenshot of this page.
https://dashboard.opendns.com/settings/

Anonymous · ‎08-31-2020

Here is the info.................

C:\Users\l>nslookup -type=txt debug.opendns.com
Server: cdns01.comcast.net
Address: 2001:558:feed::1

opendns.com
primary name server = auth1.opendns.com
responsible mail addr = noc.opendns.com
serial = 1598902568
refresh = 16384 (4 hours 33 mins 4 secs)
retry = 2048 (34 mins 8 secs)
expire = 1048576 (12 days 3 hours 16 mins 16 secs)
default TTL = 2560 (42 mins 40 secs)

C:\Users\l>nslookup whoami.akamai.net
Server: cdns01.comcast.net
Address: 2001:558:feed::1

Non-authoritative answer:
Name: whoami.akamai.net
Address: 69.252.33.23

support.opendns.com_hc_user_images_k8wZ3NrexWuOfDYQlgV3Cg.png

rotblitz · ‎08-31-2020

You are clearly not using OpenDNS, but the DNSv6 service of your ISP Comcast. It seems you missed to configure the IPv6 side of things. Configure your IPv6 settings with DNS server addresses from the following list:
::ffff:d043:dede ::ffff:d043:dcdc ::ffff:d043:dedc ::ffff:d043:dcde

The Organization drop down field, what other options does it show?

Anonymous · ‎08-31-2020

Hmm.. Then why does it work when I use the Family Shield .123 nameserver in my router?

The organization drop down shows only "home".

From Open DNS doumentation:

We support recursive IPv6 DNS resolution and security filtering for IPv6 traffic. Our IPv6 DNS server addresses are:

2620:119:35::35
2620:119:53::53

Currently, it is not possible for users to register IPv6 addresses in the OpenDNS Dashboard. Custom content filtering cannot be set for IPv6 traffic.

For users looking for an RFC-compliant DNS service that does not provide any level of filtering, the following IPv6 DNS server addresses can be used instead:

2620:0:ccc::2
2620:0:ccd::2

Where are the instructions for IPV6 in the setup documentation?

After entering the IPV6 info you provided in my router:

C:\Users\l>nslookup -type=txt debug.opendns.com.
Server: UnKnown
Address: 208.67.222.222

*** UnKnown can't find debug.opendns.com.: No response from server

C:\Users\l>nslookup whoami.akamai.net.
Server: UnKnown
Address: 208.67.222.222

*** UnKnown can't find whoami.akamai.net.: No response from server

Jerry