Re: YouTube suddenly blocked and can't unblock it....

tetelestai1 · ‎09-25-2018

I've used OpenDNS for several years, so I know how to get around. From time to time, weirdness seems to occur for no reason. This time, starting a week or so back, suddenly I can't get to YouTubes at all. I've unblocked it, both the secure and unsecure http...and it almost worked for a day or two! I could search and see results, but nothing would play. Now I'm back to basically a blank screen with YouTube header....

Help...I love my music vids...

rotblitz · ‎09-26-2018

Your symptoms indicate that the wrong IP address is registered at https://dashboard.opendns.com/settings/

agalliasis · ‎09-26-2018

I'm having the same trouble. Can't resolve it. I am using the DNS updater and that says my ip is registered and working correctly.

Any help?

rotblitz · ‎09-27-2018

I need more information. Copy & paste the complete plain text output of the following diagnostic commands to here:

nslookup -type=txt debug.opendns.com.
nslookup s.ytimg.com.
nslookup ytimg.l.google.com.
nslookup www.youtube.com.
nslookup googlevideo.com.
nslookup youtubei.googleapis.com.
nslookup ytstatic.l.google.com.

agalliasis · ‎09-27-2018

nslookup -type=txt debug.opendns.com.

Server: 192.168.1.1

Address: 192.168.1.1#53

Non-authoritative answer:

debug.opendns.com text = "bundle 784561"

debug.opendns.com text = "actype 2"

debug.opendns.com text = "flags 20 0 10 180000000000000000003950000FF40715856E3"

debug.opendns.com text = "originid 1282313"

debug.opendns.com text = "source 173.49.85.150:39254"

debug.opendns.com text = "server m53.ash"

Authoritative answers can be found from:

ComputerName:~ UserName$ nslookup s.ytimg.com.

Server: 192.168.1.1

Address: 192.168.1.1#53

Non-authoritative answer:

Name: s.ytimg.com

Address: 146.112.61.106

ComputerName:~ UserName$ nslookup ytimg.l.google.com.

Server: 192.168.1.1

Address: 192.168.1.1#53

Non-authoritative answer:

Name: ytimg.l.google.com

Address: 146.112.61.106

ComputerName:~ UserName$ nslookup www.youtube.com.

Server: 192.168.1.1

Address: 192.168.1.1#53

Non-authoritative answer:

www.youtube.com canonical name = youtube-ui.l.google.com.

Name: youtube-ui.l.google.com

Address: 172.217.12.206

Name: youtube-ui.l.google.com

Address: 172.217.10.78

Name: youtube-ui.l.google.com

Address: 172.217.10.142

Name: youtube-ui.l.google.com

Address: 172.217.3.110

Name: youtube-ui.l.google.com

Address: 172.217.12.142

Name: youtube-ui.l.google.com

Address: 172.217.10.46

Name: youtube-ui.l.google.com

Address: 172.217.10.14

Name: youtube-ui.l.google.com

Address: 172.217.11.14

Name: youtube-ui.l.google.com

Address: 172.217.7.14

Name: youtube-ui.l.google.com

Address: 172.217.12.174

Name: youtube-ui.l.google.com

Address: 172.217.6.206

ComputerName:~ UserName$ nslookup googlevideo.com.

Server: 192.168.1.1

Address: 192.168.1.1#53

Non-authoritative answer:

Name: googlevideo.com

Address: 146.112.61.106

ComputerName:~ UserName$ nslookup youtubei.googleapis.com.

Server: 192.168.1.1

Address: 192.168.1.1#53

Non-authoritative answer:

youtubei.googleapis.com canonical name = googleapis.l.google.com.

Name: googleapis.l.google.com

Address: 172.217.10.106

Name: googleapis.l.google.com

Address: 172.217.12.170

Name: googleapis.l.google.com

Address: 172.217.3.106

Name: googleapis.l.google.com

Address: 172.217.6.234

Name: googleapis.l.google.com

Address: 172.217.7.10

Name: googleapis.l.google.com

Address: 172.217.12.202

Name: googleapis.l.google.com

Address: 172.217.10.10

Name: googleapis.l.google.com

Address: 172.217.10.74

Name: googleapis.l.google.com

Address: 172.217.10.138

Name: googleapis.l.google.com

Address: 172.217.6.202

Name: googleapis.l.google.com

Address: 172.217.11.10

ComputerName:~ UserName$ nslookup ytstatic.l.google.com.

rotblitz · ‎09-28-2018

Ensure that your IP address 173.49.85.150 is registered at https://dashboard.opendns.com/settings/
If this is the case:

The DNS lookups where 146.112.61.106 (hit-adult.opendns.com) is being returned indicate that you have one or more categories blocked (maybe implicitly by the content filtering level) which contain domains being needed for YouTube to function. Special candidates are the categories Video Sharing and Content Delivery Networks, but most likely the latter.

In order to unblock these YouTube domains, either do not block these categories, or add ytimg.com, googlevideo.com, ytimg.l.google.com and maybe others to your "never block" list. Enter only domains which are actually blocked by your settings.
You find all domains being blocked by your settings here: https://dashboard.opendns.com/stats/all/blockeddomains

Also, I'm really surprised that you block things at your dashboard and then come to here to complain about it. This does not make sense for me...

bykergyrl · ‎09-28-2018

Why, rotblitz, are you surprised that someone would actually come to the community support page looking for support? I understand what the original poster is implying and going through. I am, as well. I have been using OpenDns for about 6-7 years and have never, EVER changed any of my settings since I originally set up my account. I have a static IP, so it doesn't change so it's unlikely to be an IP issue. Youtube has also stopped working for me about 10 days ago. After spending the last 10 days troubleshooting, I called my ISP. They said it was a DNS issue. Even when I completely disable all filters and allow open access, it still does not work. Only when I change my DNS servers from OpenDNS to my ISP default, does YouTube play.

We are allowed to come here looking for support, that's what this forum is for.

agalliasis · ‎09-28-2018

bykergyrl said it exactly. Youtube stopped working over night about 10 days ago. I've been using OpenDNS for years with the same settings. tonight I am trying by changing settings to the "moderate" category instead of my custom settings. Short of using another DNS option I'm not sure what else to try if the moderate category doesn't work. Currently just waiting a little bit to make sure it takes effect.

Thanks for your input.

agalliasis · ‎09-28-2018

Ok, looks like the "moderate" category fixes it. I guess I could have left it on my custom settings if I added all of the correct sites to the Whitelist.

Thanks again.

rotblitz · ‎09-29-2018

@agalliasis

Not reviewing the own settings over a long time is exactly what causes these problems. DNS and domain tagging are very dynamic, and not keeping up with changes in this area definitely cause such problems. And with using the filtering level or custom category filter you get rid of own control, but leave it with the domain tagging community to determine your settings.

For example, ytimg.l.google.com has just been recently approved in category Video Sharing, on Sep 17, see
https://domain.opendns.com/ytimg.l.google.com
This and maybe similar recent changes are the root cause for your problems with YouTube. Also, selecting a level instead of specific "custom" categories is not a good idea. You give too much control out of your hands. You better select "custom" to only block the specific categories you really want to block. The "high" level includes the category Video Sharing, so YouTube and such are blocked. The "moderate" level does not include category Video Sharing. This is the reason why it works for you now.

As it is written on the content filtering page:

Choose your filtering level

	High	Protects against all adult-related sites, illegal activity, social networking sites, video sharing sites, and general time-wasters. 26 categories in this group - View - Customize
	Moderate	Protects against all adult-related sites and illegal activity. 13 categories in this group - View - Customize
	Low	Protects against pornography. 4 categories in this group - View - Customize
	None	Nothing blocked.
	Custom	Choose the categories you want to block.

@bykergyrl

Again, why do you willingly block Video Sharing and/or Content Delivery Network categories at your dashboard and then come to here to complain about it that you did? I really do not understand this. And, of course, you have the right to ask for support, but not for such an evident and trivial case. This is just wasting other users' time.

tetelestai1 · ‎10-02-2018

Thank you everyone. Fixed. I started by unchecking the video sharing box and it's alive again.

Rotblitz. Most of your replies were rather unhelpful and trying to heap condemnation on us, your customers. I've experienced this with Intuit, when they made a change in their software that suddenly prevented me from using a pdf printer I've used for decades! They claimed ignorance, my fault. I knew better. That printer still works on the older versions, not on newer ones.

The neat thing about Open DNS is that we can customize it, and I suspect most of us do. When you guys make a change that changes it on our end, it's not our fault. You merely need to explain what you changed so that we can adjust our settings. That's all that this was about.

But I do appreciate that you're there and very responsive! That started it all off so that we could get a solution. Less bark, more kindness! lol

rotblitz · ‎10-02-2018

@tetelestai1

"your customers"

I strictly refuse that anyone here is my customer! I'm just a user like you, not affiliated in any way with Cisco or OpenDNS.

"Most of your replies were rather unhelpful and trying to heap condemnation on us"

This is subject to proof. According to most feedback I get here this is simply not true.

"When you guys make a change that changes it on our end"

If you mean OpenDNS with "you guys", they didn't change anything. The domain tagging community consists also only of users like you and me. If you check the link I provided, you'll see that the domain was approved by doaa77 for the category Video Sharing on Sep 17, 2018. Although this is a domain tagging moderator, (s)he is still a user, not OpenDNS staff. Every user can apply for a domain tagging moderator, you too.
https://community.opendns.com/domaintagging/mod_application.php?subject=Moderator%20Application

And it is impossible that every change in the domain tagging system is notified. This would result in possibly thousands of notifications per day. This does not really make any sense. If you use the content filtering categories, you accept this dynamic behavior, because this is the nature of such a concept. What else!

tetelestai1 · ‎10-02-2018

My apologies! I thought you were tech support staff! And in that case, you did rather well explaining stuff that eludes most of us.

And now I understand what happened and how. Thanks for your clarification. (Now wondering how the heck we're supposed to keep up with changes like that, like we need another thing to do in our lives...)

Again, thanks. And my apologies for drawing all the wrong conclusions.