OPENDNS is not blocking sites please help

Comments

16 comments

  • Avatar
    rotblitz (Edited )

    OpenDNS blocks domains, but you don't send your DNS traffic to OpenDNS.  You have configured 208.67.222.222 and 208.67.220.220, but you're actually using

    Server: UnKnown
    Address: fe80::1

    Pretty different, what?  You must configure ::ffff:d043:dedc and ::ffff:d043:dcde as DNSv6 server addresses in the IPv6 properties of your computer (or router?) too.

    1
    Comment actions Permalink
  • Avatar
    kean26

    So i should also configure ipv6.. But I'm using IPV4. Sorry I'm not realy that techy. But i'll follow your advice. I'll change ipv6 address. Thanks for the response

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    You are using BOTH IPv6 and IPv4. If you want OpenDNS to work properly and consistently for you that means configuring things so that all of your DNS traffic reachess OpenDNS, which is what rotblitz suggestions accomplish. Otherwise your choice is to disable IPv6 or to live with inconsistent and unreliable blocking by OpenDNS.

    1
    Comment actions Permalink
  • Avatar
    kean26 (Edited )

    Thanks

     

    0
    Comment actions Permalink
  • Avatar
    grizzlykoala

    thanks rotblitz!  That solved it for me.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Welcome!

    -1
    Comment actions Permalink
  • Avatar
    grizzlykoala

    It stopped working for me again.  Here is some more info: https://support.opendns.com/hc/en-us/community/posts/360018327183-Web-filter-not-working?page=1#community_comment_360004604091

     

    Appreciate the help.  Thanks.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    It really does not make sense to generate multiple posts about the same issue... :(

    -1
    Comment actions Permalink
  • Avatar
    pidijigih

    Hey bro I am having the same problem...can You help me out :|

    Here are the command results:

    ------------------------------------------------------------------

    nslookup -type=txt debug.opendns.com. 208.67.220.220

    Server: resolver2.opendns.com
    Address: 208.67.220.220

    opendns.com
    primary name server = auth1.opendns.com
    responsible mail addr = noc.opendns.com
    serial = 1571723470
    refresh = 16384 (4 hours 33 mins 4 secs)
    retry = 2048 (34 mins 8 secs)
    expire = 1048576 (12 days 3 hours 16 mins 16 secs)
    default TTL = 2560 (42 mins 40 secs)

    ------------------------------------------------------------------

    ------------------------------------------------------------------

    nslookup -type=txt which.opendns.com.

    Server: resolver1-fs.opendns.com
    Address: 208.67.222.123

    Non-authoritative answer:
    which.opendns.com text =

    "r4.mum1"

    opendns.com nameserver = auth1.opendns.com
    opendns.com nameserver = auth2.opendns.com
    opendns.com nameserver = auth3.opendns.com
    auth1.opendns.com internet address = 208.69.39.2
    auth1.opendns.com AAAA IPv6 address = 2620:119:30::53
    auth2.opendns.com internet address = 146.112.60.53
    auth2.opendns.com AAAA IPv6 address = 2a04:e4c0:53::53
    auth3.opendns.com internet address = 208.69.39.2

    ------------------------------------------------------------------

    ------------------------------------------------------------------

    nslookup whoami.akamai.net.

    Server: resolver1-fs.opendns.com
    Address: 208.67.222.123

    Non-authoritative answer:
    Name: whoami.akamai.net
    Addresses: 2404:6800:4000:1003::102
    172.217.34.195

    ------------------------------------------------------------------

    ------------------------------------------------------------------

    nslookup pornhub.com

    Server: resolver1-fs.opendns.com
    Address: 208.67.222.123

    Non-authoritative answer:
    Name: pornhub.com
    Address: 66.254.114.41

    ------------------------------------------------------------------

    ------------------------------------------------------------------

    netsh interface ipv4 show config

    Configuration for interface "Ethernet"
    DHCP enabled: Yes
    InterfaceMetric: 5
    DNS servers configured through DHCP: None
    Register with which suffix: Primary only
    WINS servers configured through DHCP: None

    Configuration for interface "Local Area Connection* 1"
    DHCP enabled: Yes
    InterfaceMetric: 25
    DNS servers configured through DHCP: None
    Register with which suffix: Primary only
    WINS servers configured through DHCP: None

    Configuration for interface "Local Area Connection* 2"
    DHCP enabled: Yes
    InterfaceMetric: 25
    DNS servers configured through DHCP: None
    Register with which suffix: Primary only
    WINS servers configured through DHCP: None

    Configuration for interface "Wi-Fi"
    DHCP enabled: Yes
    IP Address: 192.168.0.104
    Subnet Prefix: 192.168.0.0/24 (mask 255.255.255.0)
    Default Gateway: 192.168.0.1
    Gateway Metric: 0
    InterfaceMetric: 50
    Statically Configured DNS Servers: 208.67.222.123
    208.67.220.123
    Register with which suffix: Primary only
    WINS servers configured through DHCP: None

    Configuration for interface "Loopback Pseudo-Interface 1"
    DHCP enabled: No
    IP Address: 127.0.0.1
    Subnet Prefix: 127.0.0.0/8 (mask 255.0.0.0)
    InterfaceMetric: 75
    Statically Configured DNS Servers: None
    Register with which suffix: Primary only
    Statically Configured WINS Servers: None

     

    ------------------------------------------------------------------

    ------------------------------------------------------------------



    It'll be really great if u could help me @rotblitz

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Something redirects your DNS traffic to another DNS service, most likely your ISP. Call your ISP to opt out from this redirection.

    1
    Comment actions Permalink
  • Avatar
    pidijigih

    What to ask them exactly? Sorry but I don't have much knowledge related to networking and stuffs @rotblitz

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    You ask that you want to opt out from their DNS redirection because you want to use a 3rd party DNS service.

    1
    Comment actions Permalink
  • Avatar
    pidijigih (Edited )

    Thanks man for your help :) You're awesome! @rotblitz

    0
    Comment actions Permalink
  • Avatar
    pidijigih

    Can I check myself through any command if my ISP is performing any DNS redirection or can I stop it myself? @rotblitz

    0
    Comment actions Permalink
  • Avatar
    sigillumdei

    For some reason even disabling ipv6 didn't work so I re enabled ipv6 and put in the provided DNS ipv6 servers and VIOLA! Thank you so much!

    0
    Comment actions Permalink
  • Avatar
    andrewbc836

    I know this is an old post, but trying to make sense on why some devices on the network seem to block the correct things, but not everything. Can I set up the IPV6 DNS numbers on my router? I currently have IPV6 turned off on my only windows machine, and it's turned off on the router, but I just wanted to see about making sure all my Apple devices always route to the correct OpenDNS servers too.

    Thanks in advance.

    0
    Comment actions Permalink

Please sign in to leave a comment.