Your IP:

Our Forums Have Moved!

Visit our new forums at http://community.opendns.com/forums/ to post on topics and read the latest content. These forums are now read-only archives.

K-12 Forums

Talk with other K-12 network administrators in your state.

Or see all states.

Categories

Vanilla 1.1.4 is a product of Lussumo. More Information: Documentation, Community Support.

This discussion has been inactive for longer than 30 days, and is thus closed.
    • CommentAuthorcp-center
    • CommentTimeMay 31st 2012
     permalink
    I must be nuts or something.

    A month or two ago I was giving Open DNS a test spin and everything was working fine--domain filtering was working as expected.

    Fast forward to today. I haven't used Open DNS in a month (possibly longer). I change the DNS settings on my PC and... hmmm, domain filtering is not working for some reason.

    The first thing I do is check my network's external IP address against the network IP address registered with Open DNS--they are the same.

    Next, I clear my DNS cache and run nslookup on games.yahoo.com (I have game sites blocked). Open DNS (more specifically, resolver1.opendns.com) merrily retrieves the relevant IP address and alias information for me.

    Okay, so what is going on here? I don't think that I'm doing anything wrong. I'm using the free Open DNS service, by the way.
    • CommentAuthorrotblitz
    • CommentTimeMay 31st 2012
     permalink
    Still using OpenDNS at all? http://welcome.opendns.com/
    IP address information up to date? https://dashboard.opendns.com/settings/

    Only if yes to both, copy and paste the complete output of the following commands:
    nslookup -type=txt debug.opendns.com.
    nslookup www.exampleadultsite.com.
    Thankful People: cp-center, zelus
    • CommentAuthorcp-center
    • CommentTimeJun 1st 2012
     permalink
    Thank you for your reply.


    > Still using OpenDNS at all? http://welcome.opendns.com/

    Yes. (When I open the above URL I see, "Welcome to OpenDNS!", etc.)


    > IP address information up to date? https://dashboard.opendns.com/settings/

    Yes. My current IP address matches the network IP address in the dashboard.


    > Only if yes to both, copy and paste the complete output of the following commands:
    > nslookup -type=txt debug.opendns.com.

    Here is the output from the above command:


    C:\Users\myself>nslookup -type=txt debug.opendns.com.
    サーバー: resolver1.opendns.com
    Address: 208.67.222.222

    権限のない回答:
    debug.opendns.com text =

    "server 10.sin"
    debug.opendns.com text =

    "flags 20 0 2f6 7c0040080cc1"
    debug.opendns.com text =

    "id 8265195"
    debug.opendns.com text =

    "source 122.19.58.7:53130"


    > nslookup www.exampleadultsite.com.

    Here is the output from the above command:


    C:\Users\myself>nslookup www.exampleadultsite.com.
    サーバー: resolver1.opendns.com
    Address: 208.67.222.222

    権限のない回答:
    名前: www.exampleadultsite.com
    Address: 67.215.65.130


    So it appears that Open DNS is not filtering www.exampleadultsite.com. Not really sure why this would be.

    Just to be sure my filter settings aren't screwed up somehow (I used the custom setting), I changed the filter to "medium." Still nothing changes (i.e. nslookup yields the same results as before).

    This is weird. Any ideas?
    • CommentAuthorcp-center
    • CommentTimeJun 1st 2012
     permalink
    Oh wait, it looks like the adult site is being blocked after all. Maybe there was some sort of caching issue?
    • CommentAuthorcp-center
    • CommentTimeJun 1st 2012
     permalink
    Okay, filtering seems to be working fine. I can think of 3 reasons why it wasn't working initially:

    1) Some sort of weird DNS caching behavior somewhere.
    2) My filtering category settings were messed up somehow.
    3) The sites I was viewing to test the filtering feature were not yet approved in any Open DNS filter categories. (I was looking at Japanese sites.) I now realizing that there are quite a few Japanese gaming sites that have not yet been approved for the Open DNS "game" filter category.

    Anyhow, thank you for your patience and your help.
  1.  permalink
    Probably #3, or as you demonstrated with your misunderstanding of the IP address returned for exampleadultsite.com, OpenDNS blocked the domain but you did not check the IP. hit-block.opendns.com (or whatever domain name they are using these days) has an IP address...

    Ah, www.blocked-website.com is what gets displayed in the address bar, and is the cname for block.opendns.com.

This discussion has been inactive for longer than 30 days, and is thus closed.