Re: Windows 7 setup not working, getting oops message

scrappydeb · ‎10-24-2015

I'm trying to use OpenDNS to restrict/monitor my kids' computer usage. I was unable to configure our Comcast Router since it isn't possible to change the DNS settings, but I figured that's ok - I'll just configure their computer, as I can control the other devices in the house pretty easily. I went through the very easy-to-follow setup guide for a Windows 7 computer, cleared the DNS cache, and then checked the settings... and got the "oops you're not using OpenDNS yet" message. I've gone back and checked and re-checked everything, and I have no idea what the issue is. Debug output below. Thanks for any help you can offer!

Microsoft Windows [Version 6.1.7601]

C:\Users\Family>nslookup -type=txt debug.opendns.com
Server: cdns02.comcast.net
Address: 2001:558:feed::2

*** cdns02.comcast.net can't find debug.opendns.com: Non-existent domain

mattwilson9090 · ‎10-24-2015

Disable IPv6. Preferably at the router so that no IPv6 traffic passes to the internet, but if you absolutely must, do it at the PC level. Of course since this is a kid's computer and you want to restrict their activities, an absolute must is to not allow them to be local admins on that or any other computer they can access, or else they can just change whatever you configure.

rotblitz · ‎10-24-2015

The OpenDNS resolver addresses are 208.67.222.222 and 208.67.220.220 and some more as you have seen from the instructions. But your output clearly shows that you used "Server: cdns02.comcast.net Address: 2001:558:feed::2". So, this is clearly a Comcast IPv6 DNS server address, not an OpenDNS IPv4 one.

Therefore disable IPv6 on the internet connection as advised by mattwilson9090.
Then the output will show something like "Server: resolver2.opendns.com Address: 208.67.220.220".

scrappydeb · ‎10-24-2015

Thanks for the suggestion. I am not able to figure out how (or if it's possible) to disable at the router level, but I did look up how to disable at the PC level. Did that, and still getting the oops message.

rotblitz · ‎10-24-2015

What does the nslookup output show now?

nslookup -type=txt debug.opendns.com.

scrappydeb · ‎10-24-2015

C:\Users\Family>nslookup -type=txt debug.opendns.com
Server: resolver1.opendns.com
Address: 208.67.222.222

*** resolver1.opendns.com can't find debug.opendns.com: Non-existent domain

Looks like some progress??

mattwilson9090 · ‎10-24-2015

As I recall now, IPv6 generally can't be disabled at the router level with Comcast equipment. That's just one of many reasons why I *always* use my own router "inside" of whatever equipment the ISP has provided.

scrappydeb · ‎10-24-2015

Yes, my research and limited knowledge suggests that it's hard to do much of anything with Comcast routers (their lack of robust parental controls is what led me to find OpenDNS as a possible solution in the first place). I may at some point get a better router to bridge (?) the Comcast equipment to, but for now, I'm trying to see what I can do with what I have.

rotblitz · ‎10-25-2015

"Looks like some progress??"

Indeed, it showns now that you attempt to use "Server: resolver1.opendns.com Address: 208.67.222.222", but your DNS query didn't reach OpenDNS ("Non-existent domain"). Your DNS query was redirected by something to another DNS service.

Most likely: In case you use something like Avast Security Suite 2015, disable the "Secure DNS" feature.

If this is not the case, or if this does not help, post the complete plain text output of the following diagnostic command:

nslookup whoami.akamai.net.

scrappydeb · ‎10-26-2015

"Most likely: In case you use something like Avast Security Suite 2015, disable the "Secure DNS" feature."

Indeed I do! That was the solution! I disabled it, and now I have a "success" message! Thank you so much for your help!

rotblitz · ‎10-27-2015

Excellent! You're welcome.