IPV6 not being filtered

[yaniv123]

Hi,
After playing with this all night, and reading most of the posts about it, I couldn't understand if IPV6 filtering (for openDns family) will work.

I'll start from the end: when disabling ipv6 (https://support.opendns.com/hc/en-us/articles/227988887) on my local computer, everything works. I tried using this guide (https://www.opendns.com/about/innovations/ipv6/), in order to use ipv6, but my router doesn't support these addresses (for example, 2620:119:35::35).

Is there something else that I can do?
My main problem is that I cannot change local configurations for IPV6 on smart TV / Xiaomi box etc.

[rotblitz]

“IPV6 not being filtered”

This is correct but will change at some time. There is no filtering for DNSv6 traffic and no IPv6 resolver addresses for FamilyShield.

Your options are:

1. For dual-stack connectivity use these resolver addresses in the IPv6 settings:
::ffff:d043:de7b and ::ffff:d043:dc7b
Your DNS traffic goes then via IPv4, whereas your web traffic can be IPv6.

2. Disable IPv6 altogether.

3. Accept the fact that DNSv6 related traffic is not filtered.

“My main problem is that I cannot change local configurations for IPV6 on smart TV / Xiaomi box etc.”

Router would be sufficient.

[yaniv123]

Thanks for the answer!
Regarding option 1, if I understand correct, I should be able to add these addresses to the "Primary DNS" and "econdary DNS" fields. This is not the case (I get an error: "Incorrect static dns IP Setting"). So I don't know how to do it...
Regarding options 2, I think that my router does not support that option (I cannot find it).

Not sure that I understand regarding option 3. Do you mean that I won't be able to block specific consumers? (smart TV, for example?). This is the case for me. The smart TV is not filtered, but computers are (because I disabled IPV6 on them).

Thanks, again!

[yaniv123]

OK, an update. I think that all traffic just started being blocked, suddenly. I think it was some kind of cache. 
Now all devices are being filtered correctly!

Thanks!

[rotblitz]

Re option 3, yes.

I forgot an option: get another router what supports what you need.

What did you do to make it work?

[yaniv123]

I just ordered a new Router, waiting to receive it. Not sure if it will support this (and, I'll have to configure my ISP manually. My current router in one I got from my ISP).

I actually didn't do anything. I have no idea how it started working! Maybe cache?

[yaniv123]

Ok, it is not 100% solved. I have one router which is connected via a cable to the main router. Traffic via this router is blocked.
Traffic via the main router doesn't. I'm checking how come.

[rotblitz]

Your other router may not support IPv6?

[yaniv123]

This is exactly what I was thinking. I'll try to check it later. Thanks!

[AussieDavo]

I have IPv6 configured within my network pointing to OpenDNS servers 2620:119:35::35 and 2620:119:53::53 however, I would like to filter my DNS traffic the same way I do for IPv4.

When will IPv6 filtering be available to configure within the Portal?

I am not interested in using dual-stack with the following addresses: ::ffff:d043:de7b and ::ffff:d043:dc7b

I am also not interested in disabling IPv6.

Ideally, I would like to disable IPv4 DNS resolution altogether and only use IPv6 for DNS resolution. IPv6 has been around for a long time and it would be awesome if this worked. It would certainly help in IPv6 adoption worldwide. 

I'm also interested to know if your DoH service supports IPv6 connectivity with filtering, as this would be another good alternative.

[reham1]

Hello,

Unfortunately at this time, OpenDNS is not able to provide content filtering to users who have configured our IPv6 DNS servers on their router or their computers

[dig]

FamilyShield is available at the following IPv6 addresses:

2620:119:35::123
2620:119:53::123

DoH and DoT are available at familyshield.opendns.com over both IPv4 and IPv6 as well.

Anything using Discovery of Designated Resolvers (DDR) should be able to automatically recognize that the FamilyShield IPs are DoH/DoT capable. DNSCrypt also works for advanced implementations.