OpenDNS Forums
The official support and discussion site of OpenDNS
Support
K-12 Forums
Categories
- Administrative
- Adult site blocking
- DNS-O-Matic / dynamic IPs
- Domain blocking
- Domain Name System (DNS) troubles
- Mobile instructions
- OpenDNS services
- Proxies, accelerators, and more
- Router instructions
- Satellite
- Shortcuts
- Wishlists and feature requests
-
Feeds
Vanilla 1.1.4 is a product of Lussumo. More Information: Documentation, Community Support.
-
During the last 4 days or so, I have not been able to get to www.rei.com. In the past I have gone to this common site easily. None of the computers on my home network can open this site. yesterday and today, I cannot get to www.lowes.com. So I went to the DNS section of my router and set the primary and secondary dns servers to 0.0.0.0. Now I can get to each of these sites. That tells me that Open DNS is having some sort of trouble. Is my assessment correct and do I need to take any other action. I want to use OpenDNS in the future for porn filtering, etc.
-
I should also say that I flushed the dns cache using ipconfig/flushdns but this did not help.
-
No problems reaching and loading the two mentioned sites here.
"I have not been able to get to ..."
How exactly does this look like? Any detailed error messages out of what?
Can you successfully perform (when using OpenDNS):
nslookup www.rei.com.
nslookup www.lowes.com.
If so, it is not OpenDNS related, but something else. -
Yes, when using Open DNS, and using a webbased Nslookup at KLOTH.net, I get the IP address
DNS server handling your query: localhost
DNS server's address: 127.0.0.1#53
Non-authoritative answer:
Name: rei.com
Address: 206.81.220.22
When I cut and paste 206.81.220.22 into the address bar of firefox, it says connecting to rei.com and then fails after about 30 secs with:
The connection has timed out
The server at www.patagonia.com is taking too long to respond.
I have turned off my firewall, flushed the dns cache, and looked at the hosts file, which just has one entry :
127.0.0.1 localhost
But when I go back to DNS server = 0.0.0.0 then I can get to rei.com
I get the trouble when trying internet explorer too.
thanks for any advice
scoulter -
"When I cut and paste 206.81.220.22 into the address bar of firefox..."
This works for me, and I am landing at rei.com.
"using a webbased Nslookup at KLOTH.net"
I expected you to execute the nslookup commands in a command line window on your computer, not at kloth.net, as this doesn't help at all. Kloth.net probably doesn't use OpenDNS...
"But when I go back to DNS server = 0.0.0.0..."
Where do you have the OpenDNS server addresses configured, on the router or on the computer?
"I want to use OpenDNS in the future for porn filtering, etc."
Not sure if you will be able to do so. See http://forums.opendns.com/comments.php?DiscussionID=4946 -
I could not get a valid response using the windows nslookup, even on websites that worked. I guess I don't know what I am doing there. went to cmd prompt, typed nslookup rei.com.
open dns server addresses are configured on my router.
I have rebooted the router, powered it down and back up, and did release and renue.
The porn filtering does work for me.
thanks
thanks -
"I could not get a valid response using the windows nslookup"
What does this mean? Can you copy and paste that output here? This may be the culprit!
Also you may post the output of "ipconfig /all" here.
"The porn filtering does work for me."
No reason to give up with the other sites. We will make it work!
"open dns server addresses are configured on my router."
What exact router model do you have? Do you change anything else beside the two DNS server addresses? -
C:\>ipconfig/all
Windows IP Configuration
Host Name . . . . . . . . . . . . : stup4
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : lighttube.net
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : lighttube.net
Description . . . . . . . . . . . : 3Com Gigabit LOM (3C940)
Physical Address. . . . . . . . . : 00-0E-A6-4B-A9-38
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 192.168.0.196
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DHCP Server . . . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1
Lease Obtained. . . . . . . . . . : Saturday, September 19, 2009 4:02:59
PM
Lease Expires . . . . . . . . . . : Sunday, September 20, 2009 4:02:59 P
M
C:\>
then nslookup
C:\>nslookup rei.com
DNS request timed out.
timeout was 2 seconds.
*** Can't find server name for address 192.168.0.1: Timed out
*** Default servers are not available
Server: UnKnown
Address: 192.168.0.1
Non-authoritative answer:
Name: rei.com.lighttube.net
Address: 208.67.216.132
C:\>
router is dlink 655 -
- CommentAuthorihateopendns66
- CommentTimeSep 19th 2009
can somebody please tell me how to turn this thing off, its driving me crazy... thanks -
- CommentAuthormaintenance
- CommentTimeSep 20th 2009 edited
@ ihateopendns66
Turn it off the same way you turned it on. Remove the server addresses from router or computer.
@ scoulter
DNS Suffix Search List. . . . . . : lighttube.net
Connection-specific DNS Suffix . : lighttube.net
Remove these from TCP/IP config.
Your nslookups are failing at your router.
*** Can't find server name for address 192.168.0.1: Timed out
nslookup rei.com. <--- Note the trailing dot. -
@scoulter
Yeah, you did an nslookup for rei.com.lighttube.net and NOT for rei.com.
And certainly, rei.com.lighttube.net does not exist. -
Ok, I have learned a little more about how to use nslookup and get to it's special prompt.
When DNS server is 0.0.0.0 then
> nslookup rei.com
DNS request timed out.
timeout was 2 seconds.
Server: rei.com
Address: 206.81.220.22 (and this did go to rei.com when cut and paste into address bar, so this worked)
When using Open DNS server at 208.67.222.222 then
> nslookup rei.com
Server: rei.com.lighttube.net
Address: 208.67.216.132
DNS request timed out.
timeout was 2 seconds.
*** Request to rei.com timed-out
>
So it looks like Open DNS is having some sort of trouble and I just plan to use 0.0.0.0 until they get it sorted out.
Is there any sort of cache I need to clear, etc, or other action to take?
Thanks -
"Ok, I have learned a little more about how to use nslookup"
Unfortunately not.
Read http://www.opendns.com/support/article/34 and try again...
(Believe me, rei.com.lighttube.net does not exist and will probably never.)
Also, to prevent from timeouts:
nslookup -timeout=10 rei.com.
"So it looks like Open DNS is having some sort of trouble"
No, that's you having troubles.
-
- CommentAuthormaintenance
- CommentTimeSep 20th 2009
Refer to the two posts prior to your last one. It isn't an OpenDNS problem. -
Maintenance - how/where do I change
DNS Suffix Search List. . . . . . : lighttube.net
and
Connection-specific DNS Suffix . : lighttube.net
I snooped around network connections, Internet Protocal ( TCP/IP) but did not see this.
nslookup now works using opendns when the trailing period is included. but I still can't load rei.com
Thanks -
As @maintenance already said "It isn't an OpenDNS problem", if nslookup returns 206.81.220.22 with OpenDNS enabled. So it turns out to be a local problem, probably browser related. Have you tried another browser too?
"how/where do I change DNS Suffix Search List. . . . . . : lighttube.net..."
Start > Settings > Control Panel > Network Connections > Ethernet adapter Local Area Connection > Properties > Internet Protocol (TCP/IPv4) > Properties > Advanced > DNS -
- CommentAuthorinfinity306
- CommentTimeSep 21st 2009
do nslookup rei.com.
the period at the end is important.. do not drop it..that will tell it to not add lighttube.net -
- CommentAuthorinfinity306
- CommentTimeSep 21st 2009
and the lighttube.net is most likely being propagated by your router.. check for it there and remove it.. you should only need it at modem level.. -
- CommentAuthorinfinity306
- CommentTimeSep 23rd 2009
check your router, if it has a spot for domain name, instead of leaving it blank put a . there.. should clear the DNS suffix being propagated from your ISP -
What is your connection (or your computers connection) with lighttube.net ?
Perhaps that has something to do with it... -
- CommentAuthormaintenance
- CommentTimeSep 24th 2009
Lighttube.net would be the ISP appending it's DNS suffix. You have to configure the router ans/or computer not to do this. -
Well I have kept trying different things. I was able to remove lighttube.net from the connection specific dns and dns suffix search list.
Windows IP Configuration
Host Name . . . . . . . . . . . . : stup4
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : .
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . : .
Description . . . . . . . . . . . : 3Com Gigabit LOM (3C940)
Physical Address. . . . . . . . . : 00-0E-A6-4B-A9-38
Dhcp Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
IP Address. . . . . . . . . . . . : 69.196.210.101
Subnet Mask . . . . . . . . . . . : 255.255.254.0
Default Gateway . . . . . . . . . : 69.196.210.1
DHCP Server . . . . . . . . . . . : 69.196.210.1
DNS Servers . . . . . . . . . . . : 69.196.208.8
69.196.208.10
Lease Obtained. . . . . . . . . . : Wednesday, September 30, 2009 10:23:
06 AM
Lease Expires . . . . . . . . . . : Wednesday, September 30, 2009 1:21:1
This did not help.
Also now even opendns.com is having trouble loading, taking a couple of minutes and then in a simple text format.
moved over to a Ubuntu machine on my network and rei.com would not load when using opendns servers for dns. would load if dns was 0.0.0.0
Turned off firewall, Norton Internet Security, this did not help.
Reflashed my router.
Strangely, when looked at the "failed to load screen" in firefox, I turned off Ad Block Plus extension, and when Firefox reloaded, REI.com came up. When I tried REI.com myself a moment later, it would not come up.
Disconnected router, plugged this PC directly into Ethernet, in TCP properties set DNS to open dns and could not load rei.com.
then set TCP properties to obtain DNS server address automatically, then and REI.com would load quickly.
any advice would be appreciated. maybe my ubuntu experience offers a clue. -
Asking again: What exact router model do your have?
Also, where are you located, and what is your ISP?
"Also now even opendns.com is having trouble loading, taking a couple of minutes and then in a simple text format."
Yes, they apparently have a problem with their domain www-files.opendns.com, where they load JavaScript, CSS and images from. This is not related to your problem.
You can speed up the loading while appending "0.0.0.0 www-files.opendns.com" to your hosts file. This is a temporary solution, don't forget to remove it again! -
I have the dlink dir-655 router running firmware version 1.21,hardware version A3. I am in middle TN and ISP is lighttube.net, a fiber to the home service from our local utility. Ethernet comes from their box up to my router.
Thanks -
Strange, the D-Link DIR-655 seems to be a good router, even able to handle DNS-O-Matic DDNS updates:
http://forums.opendns.com/search.php?PostBackAction=Search&Keywords=dir+655&Type=Comments&btnSubmit=Search
Beside this, sorry, I ran out of ideas. -
Somehow my watchguard soho6 router was assigning a DNS suffix from an old isp that I didn't even have anymore. I checked the router settings and the dns suffix box was blank.
I added a "." to the field as suggested in this forum and now the strange dns suffix is replaced by a dot when I view connection details in windows. I hope this fixes my issue. I was getting a dns error in event viewer.
I looked at the openDNS router set up instructions and none say anything about the dns suffix. Why not? -
The instructions do not say anything about DNS suffixes, because this matter is almost unrelated to setting up the OpenDNS servers and/or to update a dynamic IP address in the dashboard. In some cases a DNS suffix may be needed to work with the ISP, in others they don't harm, and only in a few cases they may cause problems. Also, DNS suffix is nothing special regarding OpenDNS.
Edit: My routers do not support configuring a DNS suffix, so may be many others. -
- CommentAuthorinfinity306
- CommentTimeOct 5th 2009
most cases it is no matter, but some routers seem to decide to go ahead and pass the domain handed to them by the ISP, when it is usually not needed past the router.. adding the . if it is available is the same as configuring the third DNS Server address, it prevents the router from picking up the Domain suffix that is passed to it via WAN..
the thing is that xp seems to know to not use the domain suffix for domain names with a TLD without the period, but Vista/7 apply the suffix unless you manually add a period.. doesn't seem to affect web browsing though usually.. just confined to nslookup.. and probaly just a change that microsoft did to make it behave as it should instead of being kludged.. similar to how they fixed some of the stuff in IE that tended to end up breaking some poorly done websites.. -
Having similar problems.
I changed the DHCP configuration at home so the addresses of the OpenDNS servers were handed out instead of the local router. This broke my vpn connection to work, so I had to change it back.
What I find interesting is that when using nslookup, if I query using OpenDNS I must have the trailing period for the resolution to work. If I query using my ISP's DNS, I don't. I changed ISPs about 6 months ago, and I didn't have to use the trailing period with their DNS either.
I'm assuming the vpn client broke because the domain suffix for work is being appended to any lookups.
So who's in the 'wrong'? The ISP, OpenDNS or the O/S client? -
None of the components is wrong for itself, just the combination.
-
I am the original poster. Now, almost 6 weeks after this all started, I have switched back to OpenDns, just to give it a try. Now I can view the troublesome websites: rei.com and lowes.com. Don't know if OpenDNs changed, or my ISP, or something else.??? I still prefer OpenDns because of their porn filters, etc.
-
rotblitz can you elaborate? I'm seeing different behaviour depending on the DNS I'm using. Something's not right somewhere.
Really annoying as I consider myself to be pretty proficient with networking! -
@peterdeg
"rotblitz can you elaborate?" - Sure, I will.
"What I find interesting is that when using nslookup..."
Generally, use nslookup always with a trailing dot, unless you explicitly want to have your current DNS suffix from your current network connection appended, else you cannot be sure what nslookup makes out of your lookup...
Microsoft, officially:
http://support.microsoft.com/kb/200525
"Nslookup will always devolve the name from the current context. If you fail to fully qualify a name query (that is, use trailing dot), the query will be ..."
http://support.microsoft.com/kb/214544
"If a trailing dot is specified, NSLOOKUP works as expected: > set q=mx > acmewho .com. (note the trailing dot) Server: blue-dns.acmewho.com Address: ..."
Even OpenDNS points this out in the KB: http://www.opendns.com/support/article/34
For people who really seek for help and read it...
"I changed the DHCP configuration at home so the addresses of the OpenDNS servers were handed out instead of the local router. This broke my vpn connection..."
Sure, it does, as expected by me. You "intendendly" took away any local resolution possibilities from your PC and restricted it to perform only external resolution. (I know, you didn't know and were not aware of this.
Else you wouldn't have done it, of course. But if you think further, it sounds logical, isn't it?)
"So who's in the 'wrong'? The ISP, OpenDNS or the O/S client?"
I leave it with you now to decide about the finger pointing stuff. I would say, it's just as today's technology works, and we all have to understand and to accept it. -
Still doesn't explain why the nslookups against the ISP's DNS resolve but against OpenDNS fail. Ain't technology wonderful! (and yes, I'd already found that link ;-) )
-
If a domain suffix is appended or not can also often be seen with "ipconfig /all". The reasons why such a suffix appears at all can be different: coming via DHCP from the router, from a "connection assistent", or simply by setting it up manually, e.g. in domain or workgroup environments. If I had access to your equipment, I probably would be able to tell you after 15 minutes, why this happens as it happens.
"Still doesn't explain why the nslookups against the ISP's DNS resolve but against OpenDNS fail."
They do not fail! You just have to append the trailing dot to make an FQDN, for both, your ISP and OpenDNS. You fail doing this. -
"They do not fail! You just have to append the trailing dot to make an FQDN, for both, your ISP and OpenDNS. You fail doing this. "
Quite deliberately! The basic assumption I have is if I can do "nslookup www.google.com.au" against my ISP DNS and get the expected result then I should be able to do the same against the OpenDNS one.
It'll be a few weeks before I can have another look.
Thanks for the input. -
So now, why is the one behavior wrong and the other right? As I said, always apply the trailing dot, as documented by Microsoft, so it is always right. So easy!
-
- CommentAuthorRed Prince
- CommentTimeNov 3rd 2009
>>The basic assumption I have is if I can do "nslookup www.google.com.au" against my ISP DNS and get the expected result then I should be able to do the same against the OpenDNS one.<<
That reminds me of how my FORTRAN teacher, long time ago, insisted we start each FORTRAN program with the words "ASSUME NOTHING".
Anyway, it looks like your ISP gets too many queries from people who do not use nslookup properly, so their DNS server strips the additional nonsense that nslookup (and perhaps other Windows software) appends.
If so, it may be useful to their customers, but it is non-standard behavior, as it is not the job of a DNS server to assume, no matter how intelligently, what people meant instead of what people (and their software) typed. And since it is non-standard, OpenDNS is correct in the way it responds to your queries. -
Hoisted by my own petard - have always taught my kids "assumptions are dangerous things"
Thankful People: Red Prince
1 to 39 of 39
