K-12 Forums

Talk with other K-12 network administrators in your state.

Or see all states.

Categories

Vanilla 1.1.4 is a product of Lussumo. More Information: Documentation, Community Support.

    • CommentAuthorkanoop
    • CommentTimeNov 7th 2009
     permalink
    Perhaps being a bit controversial here, but does the OpenDNS model for blocking domains actually work? It seems to me that there is far too much scope for domains to be wrongly tagged and approved, thereby causing too many invalid blocks giving OpenDNS a bad name.

    At the moment, my users are complaining that translate.google.co.uk is blocked. We regularly receive information in foreign languages and it is useful to quickly pass it to google to get an idea what it is about.

    Looking at the 'approved' tags for translate.google.co.uk it has been tagged with both Proxy/Anonymizer and Web Mail...

    You have to ask yourself how that tagging happened? And more to the point, why? Did the 'approver' actually look at the site and decide that it looked like a web mail client, or a Proxy??

    Curiously, translate.google.com has not been tagged as such, and when checking the cache it appears to be the same site.

    Of course I could just whitelist it, but that defeats one of the purposes of OpenDNS - namely to give me a reliable DNS service that blocks suspicious domains.

    I'm not complaining, don't get me wrong, OpenDNS has the potential to be a great service, but at the moment my users are not impressed and I am being pressured to switch it off.
    • CommentAuthorrotblitz
    • CommentTimeNov 7th 2009
     permalink
    Did you become aware that the forum is full of related threads covering the same matter, tagging and categorization, and that you are not the first one raising this?
    Just as example translate.google.co.uk: http://forums.opendns.com/search.php?PostBackAction=Search&Keywords=translate.google.co.uk&Type=Comments&btnSubmit=Search
    And you are right, there is no "common sense" about domain tagging. How could it?

    "it has been tagged with both Proxy/Anonymizer and Web Mail..."
    For me as "Research/Reference" and "Proxy/Anonymizer" only, not as "Webmail":
    http://domain.opendns.com/translate.google.co.uk
    Where did you see "Webmail"?
    • CommentAuthorkanoop
    • CommentTimeNov 7th 2009
     permalink
    From http://domain.opendns.com/translate.google.co.uk :

    Tag Status Is this an appropriate tag?
    Webmail added by rotblitz Awaiting Votes
    Advertising added by rotblitz Awaiting Votes
    Forums/Message boa... added by rotblitz Awaiting Votes
    Research/Reference added by rotblitz Approved You didn't vote
    Proxy/Anonymizer added by rotblitz Approved You didn't vote

    So it seems that you yourself added it as Webmail (awaiting votes). I guess my question is really "What was your motivation for adding it as Webmail??"

    In the link you posted, you seem to say that you disagreed with the site being tagged as Proxy/Anonymizer - the list above seems to contradict that, as you were the one adding it!?

    Common sense in domain tagging should come from checking carefully before tagging a domain, rather than trying to tag as many domains as possible with nonsensical tags such as Webmail on a translation site. Otherwise OpenDNS will be perceived as not dependable on for keeping users safe. Ultimately, this will hit OpenDNS in that people will be reluctant to subscribe to their paid-for services. I know I wouldn't, unless I could depend on it, which I can't as things stand.
    • CommentAuthorrotblitz
    • CommentTimeNov 7th 2009 edited
     permalink
    "So it seems that you yourself added it as Webmail (awaiting votes)."
    Yes, an old bug of the domain tagging system, several times reported here. :devil:
    What I did in fact was flagged it for review regarding "Proxy/Anonymizer" several times, and voted on everything else with "no". I hope you did the same, did you?

    "What was your motivation for adding it as Webmail??"
    Do you really want this question still be answered by me? :cool:

    Beside this, I rather tend fully agreeing with you. As I said, this matter is often discussed here, and if you look for the comments from me, you know where I stand.
    •  
      CommentAuthorfatts
    • CommentTimeNov 9th 2009
     permalink
    Administrator
    There is a bug within domain tagging that seems to be allowing users to vote on 'phantom' domain tags, and then adds them to the list of tags for that domain as if they've been submitted by the user that voted on it in the first place, regardless of if they have voted 'yes' or 'no' for that particular tag.

    We are aware of it and are working on a fix.

    Also, tags that are 'awaiting votes' don't apply to that domain until they are reviewed and approved by an OpenDNS moderator.
    • CommentAuthorkanoop
    • CommentTimeNov 9th 2009
     permalink
    So if it says 'approved' it means that an OpenDNS moderator has looked at it and agreed that the tag is appropriate? If that is the case, then the Proxy/Anonymizer tag is just bizarre... Or what exactly is the role of the Moderator??
    • CommentAuthorkanoop
    • CommentTimeNov 9th 2009
     permalink
    What's even more frustrating is that, as of a few seconds ago, translate.google.co.uk is accessible even though it is apparently tagged as Proxy/Anonymizer and I've asked OpenDNS to block that category.

    Frustrating because of the seemingly random behaviour... So tomorrow, will it or won't it...? Hmmm....
    • CommentAuthorrotblitz
    • CommentTimeNov 10th 2009
     permalink
    "translate.google.co.uk is accessible even though it is apparently tagged as Proxy/Anonymizer"

    That might be due to a different reason:
    1. Still using OpenDNS? http://welcome.opendns.com/
    2. Was your IP address in sync at this time? http://www.opendns.com/dashboard/settings/
  1.  permalink
    Did you flush local resolver cache(s) or reboot, and clear browser cache(s), and wait 3-5 minutes after changing the setting? (If you didn't just change the setting, this does not apply necessarily.)

    translate.google.com can be gamed to be used as a proxy, bypassing things like your OpenDNS filtering settings, so enough people found it important enough to tag and approve it as Proxy/Anonymizer. Yeah, it isn't the primary purpose of Translate to be a proxy, but it can easily be used as one.
    • CommentAuthorwolvo2741
    • CommentTimeNov 12th 2009
     permalink
    This really makes me laugh, Open DNS Is a GREAT Service.
    Considering you are using the free service STOP Moaning about it.
    If you want that blocked use your blacklist that is what it is for.
    If its a bug report it.

    It is simple really don’t expect everything for free, openDNS is good enough to provide a free service so stop giving them hassle and let them get on with other projects.
  2.  permalink
    @ wolvo2741

    Funny thing, I use OpenDNS for ... DNS!
    I can't really get a grip on the great number of people who want to use it for blocking, let alone those who think that blocking "is the whole point" of OpenDNS.
    I mean, it can only block by domain anyway.
    Thankful People: rotblitz
    • CommentAuthorRed Prince
    • CommentTimeNov 13th 2009
     permalink
    @kanoop: "Frustrating because of the seemingly random behaviour..."

    Nah, there's nothing random about it. You have obviously not done one simple important step in your configuration. Could easily tell you what it is, but with your attitude, I don't feel like it. :shocked: