Blocking sites by keyword

Comments

130 comments

  • Avatar
    rotblitz

    "Shouldn't be too hard to implement."

    True, with one of the following you can implement blocking domains or URLs by keyword. It's not too hard for you.

    See also https://support.opendns.com/entries/22063350-Blocking-sites-by-keyword

     

  • Avatar
    tuckson

    Hi,

     

    Thnx for your comment. True... there are many programs like you mention. However, they all have one thing in common. They are client based. They require me to install something in the device. I recommend OpenDNS to many people including locations where autistic or ADD children are being cared and so. (My household knows some of these too BTW). People and I want to prevent thins to happen. So a new device (phone, tablet)  should not be able to see the things that need to be blocked regardless of what device is being used.

     

    Don't get me wrong, I am not asking for content filtering based on keywords, just url filtering.   

  • Avatar
    rotblitz

    "They are client based."

    No, the first two can be used as server where all your network traffic goes (is proxied) through.

  • Avatar
    tuckson

    lol.... ok... you want everyone to implement their own server solution on their own network. Besides the fact that the majority of people does not have the slightest idea on how to achieve that,... Isn't it why people end up with services like OpenDNS, because there are organisations LIKE OpenDNS who do this much better en requires very little knowlegde of the user him/herselves?

     

    Of course you could set things as your own proxy. You could also position your own e-mailserver, firewall, and all other things.  Heck, something like DD-Wrt already mages to do nice things like this. Also there is clearOS, which also does a fine job in all these things.

     

    But if that is the point of view, why even bother starting a company of OpenDNS?

     

    The point is, for the majority of people it needs to be easy, understandable (as in manageable, not as in knowing the techniques used to achieve it), and at a decent price. And I would understand if services like keyword filtering would be part of the VIP package and not be free. That even the category content filtering is availble for free is already amazing. But I do would like to see it implemented. Just because of the reasons OpenDNS advertises with:

    - Parental controls that protect every Internet-connected device in your home, instantly

    I interpret this as that I don't have to hassle with every new device and I don't have to create serverside solution myself.

    - The most trusted and recommended Internet parental controls service

    Why would I create my own things when OpenDNS appears to build a great name in this bussiness?

  • Avatar
    rotblitz

    "you want everyone to implement their own server solution on their own network."

    I got the impression you thought I'm staff, but I'm not. I'm a user like you...
    Just for the sake of clarity. And no, you didn't convince me.

  • Avatar
    cervezafria

    I get a kick out of hearing from users that they must block youngsters from this-and-that website. OpenDNS is only a tool, but "parenting" is the foundation. It is like putting on a sweater when going out in the cold weather. It offers some protection, but it won't prevent you from getting cold. Countless sex-oriented sites are spawned daily. OpenDNS will never keep up. If you want a higher-level of insulation, use a white-list only approach.

    BTW you can't even compare Google with OpenDNS. The former is top-down driven, and OpenDNS is driven bottom-up by a consensus of users. What you find objectionable, might be another's hobby.

    I'll close with this... there's a vast difference between "protect" and "prevent". OpenDNS protects.

  • Avatar
    tuckson

    Appearantly the kick was not hard enough :-(

    Who are you to judge about parents? Do you have any idea about the millions of parents nowadays that struggle with kids with things like ADD and/or autism and things like that? Appearently not, under your own stone things are perfect. Well it's not under mine. My wife and I give 200 % of our lives in order to keep our auti boys home and have them grow up in a bit of a good direction. And most people don't have the slightest idea on what it takes to care for children like these. So please keep your incredibly harsh and unfounded words like that by yourself. Also now we're not alone. There are hundreds of thousands of parent in the same situation. Know what they all say? "too bad others really don't understand what we are in".

     

    Back to Google. i did not compare Google to OpenDNS. I just mentioned google finds new sites faster than OpenDNS can block them. Which is totally understandable given the way OpenDNS functions. it's not a crawler.

    But consider this: The way these kids find sexsites is often by just searching words in Google. For example sex and xxx gives this url:

    https://www.google.nl/search?client=opera&q=sex+xxx&sourceid=opera&ie=utf-8&oe=utf-8&channel=suggest

     

    When simple keyword matching on this url would take place now it would be blocked, hiding search results on this. Which is exactly what I want.

    Would it also block good things? Yes. But I prefer the safe way and PREVENT my boys from seeing things they really should not see. I am not diving into the psychological reason behind this, but read yourself a bit about ADD, autism and MCDD. maybe some day ever you will find out the world is not just devided in good parents and bad parents.

     

  • Avatar
    rotblitz

    @cervezafria, cool, I would like to second you with these statements.

     

    @tuckson, good that you come to Google. What would you say if you searched for anything and didn't find it? Your most likely complained with the incompetent search engine...
    So you find what you're looking for and complain with the incompetent DNS service...

    And continuing with Google, a DNS service like OpenDNS can block by domains only, not by search terms, because you don't send this information to OpenDNS. So you could block Google as a whole, or nothing of Google. But especially for Google, they have created this SafeSearch function what exactly does what you want. Here is your search term "sex xxx" again with strict SafeSearch enforced:

    https://www.google.nl/?safe=strict#safe=strict&q=sex+xxx&oq=sex+xxx

    OpenDNS simply can't do that, for technical reasons. Or better, they could do it, but then they would not be a DNS service, but a proxy. So let it happen with Googles own tool, SafeSearch. So easy and straight forward.

  • Avatar
    cindelicato

    OpenDNS does a fine job at what it does, as does Google.   And while there are configurations of OpenDNS that prevent certain sites from loading, Google has them as well.

     

    I'll second @rotblitz and advice @tuckson to do a little research on "Google SafeSearch."  It can be easily implemented on all of your desktop/laptops and ought to resolve most of your concerns.  Oh, and you'll need to block other search engines, too, if you want close off other avenues.

     

     

  • Avatar
    tuckson

    @rotblitz,

    You are right, My desires ran away with my thoughts.

     

    However I still support my topic albeit only for all domainnames with explicit terms in it.

    @cindelicato.

    Thnks for your advice as well, but this is not enough. Google is yous 1 searchengine.

    That's why it is better to be able to block as wel on stringpatterns. It would be nice if all domains with xxx or sex or whatever were blocked in advance. Yes... other domains still come through, but everything helps.

    And no... Not everyone is able to install een clientside solution on all devices. riends of mine have this caring farm, where every week 30 or 40 children from all ages come to stay, sleep and or play. They often bring their own devices. Sometimes known, sometimes hidden. These people want the same as i do. A neat serverside solution. And yes, if OpenDNS refuses to to this, another solution might be necessary. However, OpenDns would be the easy way.

     

     

  • Avatar
    cindelicato

    You're really standing your ground, aren't you?

    At the risk of starting an off-the-topic thread, lets take a look at the scenario you've painted:

    They often bring their own devices. Sometimes known, sometimes hidden. 

    Right there, you're done.  If those devices have 3G/4G, neither OpenDNS nor any client-side solution will work (unless you have physical access and ADMIN rights to the individual devices). 

    String patterns would be perfect in a perfect world, but no one lives in such a place. And as anyone who has studied how DNS works will tell you, the string you seek to have scanned is completely ignored by the DNS process.

    Make good with the tools available.  And if you find another solution that does OpenDNS better, please let us know.  We, like you, are interested in any viable solution.

  • Avatar
    rotblitz

    "Not everyone is able to install een clientside solution on all devices. Friends of mine have this caring farm, where every week 30 or 40 children from all ages come to stay, sleep and or play."

    These two harnless looking sentences don't go together, not at all. For such an environment an internal proxy server is a must! You can get this for minimal cost or nothing. Just take an old computer, and install a free proxy server distro on it. On a proxy server you can do everything except your garden work, even replace all occurrences of "house" on any webpage by "building". All traffic will go through it. It's the full wizard you ever dreamed about to control everything like a god...

  • Avatar
    tuckson

    Funny...

    2 of the 3 repondents of this thread that are harshly against this idea also seem to be at the other tread, https://support.opendns.com/entries/22063350-Blocking-sites-by-keyword .

    One would almost think.... Why would anyone object to such a harmless and optional setting at all???

     

  • Avatar
    tuckson

    @cindeliato...

    correct... only... First thing is... may of those children do NOT have 3G/4G but only wifi on their phones. Their parents are not crazy, you know. Neither have my kids. They can call and sms, but for internet they must use wifi.

     

    Secondly, as for that farm.... they have a name to held high... A name of deceny and trust. Part of their approach is thay don't wnat their network to be used for porn things and such... Hence the need foor that serverside/gateway solution... Did they not think of an extrra machine and such things? yes of course... However it was me who said...w ait a second, I know this wonderfuul DNS service.

    I like it, and so do they since it is easy. But the caveat is just that so many domains are not tagged yet.,

    For your info, recently I added the domains unerneath to the domaintagger.

    9maza.com
    allsexvideos.tumblr.com
    disneypornfakes.com
    freetamilsexvideos.net
    fuckbook.nl
    promeporn.com
    repo-nl.mobi.xtub.mobi 
    sexwap.ws
    xxxindiansex.net
    sexdatingzone.nl

    Well, not really... 2 of them already were there. Funny... check out the domain sexdatingzone.nl   Know what the domaintagger says? -->

    Pornography added on 2011-11-24 by teacookie      Awaiting votes

     

    ADDED in NOVEMBER 2011   That's nearly 2 years ago.

    Could you really not understand I would like to see an alternative to tagging alone?

     

    With just checking domainnames on keywords, from the above list, 8 out of 10 would have been blocked already..

    In terms of serverperformance and complexity, this is peanuts. it's not about the pages, just about the domainname.

     

    I really just cannot understand what anyone could have against it (except bussinessowners of such domains of course).

  • Avatar
    rotblitz

    "2 of the 3 repondents of this thread that are harshly against this idea"

    What an assumption!

    Nobody has anything against this. Fact is that it's simply not there yet, and OpenDNS do not intend to implement it within a reasonable time frame (see the official answer in the first thread about this matter you linked to - "Not Planned"), so I have proposed valid alternatives. What's so bad about this? This is all I as user like you could do. Maybe you have better alternatives? We're waiting for them.

    And instead of posting such uncategorized domain names here to attract people's attention, you better had opened a support ticket to get them finally approved for a category you suggested. What you've done was the worst idea ever...

    "I really just cannot understand what anyone could have against it (except bussinessowners of such domains of course)."

    No worries, consumers of such content do either not use OpenDNS (only less than 5% of the internet community does use OpenDNS), or do not have blocked the related categories. This argument counts nothing. Stay with the facts. You're dreaming about a different reality.

  • Avatar
    cindelicato

    @tuckson: If you wish to discuss OpenDNS and related topics, I am game.  If you want to discuss family values, I am fine with that as well, although this is not the forum for it.  For the record, your suggestion that because I disagree with you I am some how colluding with the owners of 'such domains' is beneath reproach.

     

     

     

     

  • Avatar
    thanks_opendns

    Interesting and I feel the same on the desire to block or have it blocked. 

    But reality is that OpenDNS has their part and just cannot or does not have the resources to do these things.  They could take a lot of these ideas, start a new service and be a big help but that is their option as is mine. 

    I would do a white list but even the paid VIP has very limited (50) sites that can be blocked.  I thought, this is great but ran into this limit roadblock.  This still does not stop the search engines.  Even strict filtering by part of google does some but when you report gross stuff on strict filtering, I have been declined every time.  And somehow my filter keeps getting turned off. 

    I use a filter on Firefox to block everything and let them go through, with my password,  as they are blocked.  A pain but works. 

    I also use WOT but ..............   What I would like to see and tell me if it is already here to vote on, is something like this:  

    1.  A group domain block - or

    2.  a new catagory for webhosting freebies, ie carrying a web hosts name, ie xxx.tumblr.com  zzz.galeon etc   and better still

    3.  When a webhosting that carries the webhost name as mentioned in (2.)   zzz.tumblr.com be tagged until decided as the majority of the sites are tagged.  TUMBLR IS PORN SO WHY NOT LET THE VOTES CHANGE THE PARENT(MAJORITY OF THE TAGGED SITES TAGGING). 

    Eliminating sites such as tumblr, galeon, and many others would block  lots of the new sites being created every day that is one of the reasons many people use OPENDNS, WOT, etc AND IF YOU LIKE THEM THEN PUT THEM in your do not block list.

    If any of these have already been submitted then let me know

  • Avatar
    cervezafria

    What I would like to see and tell me if it is already here to vote on, is something like this:  

    1.  A group domain block - or


    These already exist... for example, Gambling, Pornography, Weapons... 

    2.  a new catagory for webhosting freebies, ie carrying a web hosts name, ie xxx.tumblr.com  zzz.galeon etc   and better still

    You need to take sub-domain naming up with the individual providers. OpenDNS does not control that. Where there is a "zzz.galeon.com", you can block at that level instead of "galeon.com".

    3.  When a webhosting that carries the webhost name as mentioned in (2.)   zzz.tumblr.com be tagged until decided as the majority of the sites are tagged.  TUMBLR IS PORN SO WHY NOT LET THE VOTES CHANGE THE PARENT(MAJORITY OF THE TAGGED SITES TAGGING). 

    You can individually blacklist sites.

    Eliminating sites such as tumblr, galeon, and many others would block  lots of the new sites being created every day that is one of the reasons many people use OPENDNS, WOT, etc AND IF YOU LIKE THEM THEN PUT THEM in your do not block list.

    Why should everyone have to whitelist these sites just because you have a problem with them. Again, enjoy your blacklist feature.

    If any of these have already been submitted then let me know

    There's a suggestion in the Idea Bank to enable blocking of unclassfied sites. I suggest you vote your choice there.

  • Avatar
    tuckson

     

    @tellydelly..

    Thnx for showing I am not the only one who likes to protect the young.

     

    Things like whitelisting and so will seriously limit itnernetfunctionality on a much higer level then I opted for.

     

    My idea is simple.

     

    The normal way an internet request is handled is like this:

    user submits url --> first the domeinname is given to the dns to get the corresponding ip-address -->  this is then used to find the correct server.  If domain not found, an error is given back.

     

    This is where I thought the feature would jump in. Before an ipnumber is searched in the dns, first a simple stringmatch could see if any of the given strings are found in the adress.. when found, return error. When nothing found, let the request be fullfilled the regular way. We are not talking about thousands of substrings here, an ordinarairy user would fill a dozen at most I guess.  heck... OpenDns could even definie a default set.

     

    @cervezafria.... 

    "Why should everyone have to whitelist these sites just because you have a problem with them. Again, enjoy your blacklist feature"

    If you don't get the point, why don't you stop the discussion?  You can only blacklist sites you KNOW about. That's the whole point.

    And HOW would ANYONE be forced because of an OPTIONAL feature? What is it with this crusade of you against preventive blocking?

    I just don't get it why people like you are so opposive against an optional feature what would totally have no effect on your own surfing when left turned off...

  • Avatar
    cervezafria

    @tuckson... Obviously you failed to read my last sentence. Maybe English is not your native language. Google translate is there to help.

  • Avatar
    rotblitz

    I say it again (copying from above): Nobody has anything against this. Fact is that it's simply not there yet, and OpenDNS do not intend to implement it within a reasonable time frame (see the official answer in the first thread about this matter you linked to - "Not Planned").

    So, why do you discuss this with us other users? Should we organize a demonstration in front of OpenDNS' headquarter or what? ;-)

  • Avatar
    thanks_opendns

    Tuckson, keep trying to protect the young even though others do not care.  But they are right on the bottom line.  Open DNS is not about family values.  Just mark them as you see them.  And people like me.  I thought this was a discussion not an attack site.  My first time on a blog and I really love hearing about "people like me" and "Google translate is there to help".  I have nothing else to add on this and will not respond again or return to this blog.  At least tuckson, you are trying though you are beating a dead horse.  Look at another angle/idea and keep trying.

  • Avatar
    cervezafria

    tellydelly said "Open DNS is not about family values"

    What an inane statement. It belies your ignorance of DNS. Why don't you demand your ISP provide blocking service that you require. See how they respond to you, a "paying customer".

    Why is it that you feel it is OpenDNS' duty to you.

    And the last time I checked, OpensDNS offered FREE service to users, and still some complain about what they get at no cost.

  • Avatar
    pat-and-jan

    NETGEAR ProSECURE UTM5 Appliance with 1-Year Subscription Bundle (UTM5EW)

     

    You can get this on amazon.  it is a $300 solution.  Check back with me in a 2 weeks and I will let you know how well it works.  It is a sysAdmin approach, but I have the skills.

    Google serves up more Nudity than any other website and it is impossible to enforce.  

    An openDNS solution would be to block www.google.com and push users to bing.com, then the adult filters work very well, even if the safe search is turned off.  You can still use mail.google.com, drive.google.com, but there are some google apps you simply will not be able to use, like calender.

    I think the internet experience is muted a bit, but it is a good trade-off.  I do want my kids, (or me), to see mostly nude women in Bikinis, so I will spend the $$$ for the UTM.   I think Netgear still uses OpenDNS, so I will still be using this service.

     

    - Pat

  • Avatar
    geaf

    Tuckson, give it up mate...it only takes a read around this forum to discover what kind of help these 'enthusiasts' are likely to give.

    Heh.

  • Avatar
    dmadden51

    I like the idea of opting in to block all sites unless I unblock them by categories or by manually entering their domains to not be blocked.  I believe in an open and free internet but I also believe in letting the individual household be able to administrate its needs well.  Companies should also be able to do the same so that they can protect themselves from those that would abuse time and resources.

  • Avatar
    tuckson

    @Pat, How 's it going with the netgear?

    OpenDNS would nit have to block google.com. But If I have a blacklist with the pattern "fuck" in the list OpenDNS could block al domains with this string in the domainname.

     

    @geaf, I know, just had to give it a try.

     

    @dmadden51. 

    Opting in would cause you to block everything you don't  know of. That's too much for me and merely spoils the use of search egines like google.

     

    Cheers

  • Avatar
    gorastus

    Wow, I am surprised at some of the ignorance of DNS implementation. DNS is just that.... DOMAIN NAME SERVICE. It is all about the domains. I think this is an AMAZING service for free and I applaud OPENDNS for helping us family folks to help ensure the SAFETY of our kids. Is it perfect? NO! Is it foolproof? NO! 

    I am a network engineer (20 years) and I am amazed at how mature and incredible the interface is for this FREE product. Let me say thank you to OpenDNS for this wonderful offering. 

    Having said that, my kids are now grown and gone, and I am still using this. I used a SonicWall for years and this is better. And FREE. It is customizable, and provides exceptions for any domains (white or black) that you wish. RTFM!! This is the best I have seen, and folks, I have seen it all. Hardware, software, etc. This is top shelf.  

    Want secure protection - complete?  Do this:

    1. MAC filter.
    2. Set time frames.
    3. Set time frames on PC's ONLY on devices in public monitored area.
    4. Be SMART and use OpenDNS.
    5. Set Google and Yahoo Safe settings.
    6. Get your 'parent' on and watch.
    7. Relax and stop busting the chops of people providing a free service.
    8. Stop bashing people with children that don't have your flavor of disability.

     

    Anyone agree?  

    Signed, a thankful engineer.  

  • Avatar
    rotblitz

    "Anyone agree?"

    Yes, me.

  • Avatar
    pat-and-jan
    @tuckson The UTM is having a problem scanning URLs from google, because of the way google set up the SSL connection.....it is a bug, they are working on. The UTM works very well, I have been playing with the config for about a month now....I am almost there.

Please sign in to leave a comment.