Web Filter - Block all of site builder(ie Tumblr.) that has more than 1000 porn or nudity sites tagged
Tumblr for one, galeon for another have many new porn sites daily appear to be tagged. Mark these sites that say - 1000 or more are tagged porn - and then add a web filtering option to block free web site builders who have 1000 or more porn sites tagged or just block free web site builders that carry the name of their company ie cdc.tumblr.com r7459.tumblr.com carries the name Tumblr. Many if not most are places for porn and nudity to multiply daily and there is no way to really block these. One site of these, have links to hundreds more. Tumblr has 10486 pages already as of today 2013/10/04 X 12 per page > 125,832 sites tagged or for tagging and a majority being Porn and or Nudity. GO LOOK FOR YOURSELF AT THE NUMBER IT IS NOW AND COUNT THE NUMBER OF NEW SITES ADDED. Let a person use the - WEB FILTER OPTION - to block the new tag /- 1000 or more already tagged porn and or nudity - and then the hundreds added every week plus the 1000"s or more waiting to be stopped by a parent etc who knows that Tumblr, Galeon and others are a nest of PORN and or Nudity sites. Those who love their Tumblr etc sites would not be affected.
-
This sorting is not possible yet. There's only filtering by category. http://community.opendns.com/domaintagging/
I would think that major website development efforts are required at OpenDNS to filter by domain name in the domain tagging system.
-
Thanks rotblitz, the block for tumblr.com does work for all their sites. I had a problem with my setup and this works now. FYI a random check of 60 different sites shows that around 61.66% of sites in tumblr.com are tagged porn or nudity. There are many undecided that lower that number. Thanks again. It would still be great to have a tag that labels blog development sites,( ie tumblr.com, galeon,com etc,) that include more than 50% of their sites already tagged Adult content, nudity, porn, have a new tag. You can block all with the tag "blog" but that blocks the developers sites that do not tolerate the trash. thanks again
-
Today is 12/28/2013. There 11503 pages at 12 domains a page to equal 138036 individual domains. You could block tumblr.com as a whole otherwise it is a matter of identifying the domains they are visiting and blocking them. Vote on any that you find. Hopefully, updates are forthcoming to reduce to glut of undecided domains. Some have multiple tags so the numbers the numbers are less daunting as they seem.
-
Hey tellycodelly and rotblitz... I tried to "always block" tumblr.com and i seem to still be able to get to tumblr sites. What am I doing wrong.
e.g., http://craftacular.tumblr.com/ works with no problem... and of course many other sites
-
"I tried to "always block" tumblr.com and i seem to still be able to get to tumblr sites. What am I doing wrong."
Forgot to flush your local caches?
https://support.opendns.com/entries/23281284-Clearing-the-DNS-Cache-on-Computers-and-Servers
https://support.opendns.com/entries/23739610-Clearing-the-DNS-Cache-on-BrowsersStill having problems? Post the complete plain text output of the following commands:
nslookup -type=txt debug.opendns.com.
nslookup tumblr.com. -
I tried flushing local caches as mentioned in each link, to no avail. Here's the plain text of the two commands:
Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
C:\Users\Micah>nslookup -type=txt debug.opendns.com
Server: resolver1.opendns.com
Address: 208.67.222.222
Non-authoritative answer:
debug.opendns.com text =
"server 9.dfw"
debug.opendns.com text =
"flags 20 0 2f4 800000000000000"
debug.opendns.com text =
"id 0"
debug.opendns.com text =
"source 70.185.222.159:59193"
C:\Users\Micah>and
Microsoft Windows [Version 6.0.6002]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
C:\Users\Micah>nslookup -type=txt debug.opendns.com
Server: resolver1.opendns.com
Address: 208.67.222.222
Non-authoritative answer:
debug.opendns.com text =
"server 9.dfw"
debug.opendns.com text =
"flags 20 0 2f4 800000000000000"
debug.opendns.com text =
"id 0"
debug.opendns.com text =
"source 70.185.222.159:59193"
C:\Users\Micah> -
You posted the same command twice. Why?
No matter, the problem is that your IP address 70.185.222.159 is not registered with your OpenDND network:
https://dashboard.opendns.com/settings/
Therefore your settings do not take effect.Sync your IP address information, and run an Updater further on.
-
If the amount of tumblr pages that have porn on them offends you then just block tumblr.com in your blacklist. You'll lose access to all the many other types of pages on tumblr, but you'll have prevented access to the tumblr porn.
Categorizing and blocking all of tumblr as porn would be highly inaccurate because that's only a fraction of the material that can be found there. This is one area where you'll have to take responsibility for things and manually block what you don't want.
-
Please note that (at least by my experience) you can have only 25 items in your blacklist. Due to sites that were not blocked that should have been and then with sites like tumblr you can easily fill the 25 slots. If this is going to become a solution for future then they need to come up with a way to handle these large repositories and not just blanket block everything. Either that or give us an unlimited blacklist. I am currently blocking tumblr.com but would like to free up that slot for other often more offensive sites that are still under review.
If OpenDNS wants to put themselves ahead of the game I would suggest they actually partner and work with these large repositories. Most of them have now implemented their own porn monitoring programs that could make this easily identifiable. Photo.net has good and bad and they now put a block on nudity and you have to actually click to see it. That means it is flagged and so is there something OpenDNS can do?
To simply say - block the main domain will work until you exceed 25 items. Then what is our solution?
-
"you can have only 25 items in your blacklist... Then what is our solution?"
OpenDNS Home VIP comes with 50 slots for blacklisting and 50 slots for whitelisting.
"Photo.net has good and bad and they now put a block on nudity"
That's their own system, same as Google SafeSearch, and not based on a DNS service like OpenDNS. This is totally different.
-
Good to know about the Home VIP. As far as the other, I was just mentioning that they (other sites) have tagged material and wondered if it would be available in the metadata or something to filter. Maybe it isn't. I was just suggesting that maybe there might be a possible solution. So is OpenDNS' stance then that sites like tumblr, flickr, etc are just a lost cause that it is an all or nothing and the person should just use the blacklist? It just seems like a huge source or porn that is left open.
-
Unless that tagged material or metadata is somehow available when a DNS lookup is performed OpenDNS and any other DNS service will never see it, let alone be able to take advantage. That is both the advantage and limitation of OpenDNS, it is a DNS service, and is very, very good at that. That does mean that it cannot filter URL's or domains since DNS knows nothing about that, including the content that is on subdomains of a given domain. It can however work with subdomains that are identified for it.
Sites like tumblr, flickr, etc are more than likely classified as photo sharing sites, which is the appropriate classification. Granted, some of the material is porn, but some are of the sites up there are of kittens, birds, wedding pictures, football tailgaters, and many other legitimate things. The brute force solution is to block the category those services belong to, or blacklist the domain name for a particular service.
Alternatively, you can yourself identify subsites that you think would be appropriately classified as porn, tasteless, or whatever and nominate those subdomains for the appropriate category. To do that go here https://community.opendns.com/domaintagging/ You can also blacklist those individual subdomains if you like.
If there's anything else that you think a DNS service can do, what is it?
-
"So is OpenDNS' stance then that sites like tumblr, flickr, etc are just a lost cause that it is an all or nothing and the person should just use the blacklist?"
There are no "sites" in DNS, just domain names and their subdomain names. And this is neither a lost cause nor 'all or nothing'.
Beside what mattwilson9090 said, here is an example for Tumblr.
"Always block" list: tumblr.com
"Never block" list: www.tumblr.com, assets.tumblr.com, media.tumblr.com, platform.tumblr.com, static.tumblr.com, anything.tumblr.com
where anything are subdomains you want access to.This blocks Tumblr with the exception of Tumblr's own content (website) and subdomains in place of anything.
-
Matt and Rotblitz - thank you for the review of the DNS capabilities. I get that. However, in their own product description they say:
-
Instantly blocks access to adult websites No complicated configuration
FamilyShield is pre-configured to block adult websites across your Internet connection. Just turn it on and go. The filter is always up-to-date, adding new sites 24/7.
So they are touting it as more than a DNS for many who do not understand what a DNS service is. I was simply pointing out that you are correct that sub-domains can be blocked - I have submitted many sub-domains from tumblr using that feature. However, I was just trying to say that why couldn't OpenDNS staff be a little pro-active and search those sites for porn the block those sub-domains? If you are going to say that you block porn as part of the product description that comes with a perceived benefit.
I apologize that I have ruffled so many feathers with trying to point out that just as I can submit sub-domains so can they. OpenDNS gives the impression in their description that they are working to update this constantly. I figured they might like to know that there are problems with some sites. They could have been a little pro-active for sites that so many have complained about and blocked many of the sub-domains. They ask for user input and help but then we get attacked for proposing different ideas.
I get that it is a DNS but they are advertising it as more. I get that tumblr, flickr, photo.net etc have great content that is not porn. That is not what I am trying to defend or prove. That is not the point. OpenDNS put out that they block and that they update their filters, etc. That implies to many that they are more than just a simple DNS. They want to be in the business of allowing user to block porn, guns, religion, etc. They market themselves as such. All I am saying and all I was asking is if they could mark the sub-domains appropriately - because even though the DNS does not understand the content - they are saying that they have filters. Who is updating those filters? Someone in their structure or community is responsible for identifying and determining the classification. I agree - tumblr as a whole is a photo sharing site. However, if you are going to promise blocking of porn then many believe that means you will also identify the sub-domains to help us protect that if we want. When I have seen so many complain about these sites and get shut down I had to say something. Either they want to be in that business or they don't. By their advertising and claims they want to be. So why is everyone so surprised when they get requests to help us block more of tumblr?
Great - so many use the wrong terms or syntax. Both of you identified what could have been done to help those who have complained! Instead of arguing that tumblr is not bad - why don't you help us get sub-domains classified if you knew that is what they were really asking about? I just don't get why that is such a difficult request.
-
-
-
Instantly blocks access to adult websites No complicated configuration
FamilyShield is pre-configured to block adult websites across your Internet connection. Just turn it on and go. The filter is always up-to-date, adding new sites 24/7.
These are advertising slogans and sales messages, as with most other companies...
Do you even listen to what they say? Me not!"why couldn't OpenDNS staff be a little pro-active and search those sites for porn the block those sub-domains?"
The domain tagging system is a community effort, not really an OpenDNS operated system. They just host and supervise it.
https://community.opendns.com/domaintagging/faq/"That implies to many that they are more than just a simple DNS."
But they are finally limited to what a DNS service is possible to do.
"All I am saying and all I was asking is if they could mark the sub-domains appropriately."
As I said, this is left with the community based Domain Tagging System. So even better, you submit those subdomains you want to have categorized accordingly.
"Who is updating those filters?"
That's you and everybody else participating. Beside submitting domains and subdomains, you could even apply as domain tagging moderator.
-
-
Advertising slogans? That is not a slogan - that is the product description on what it is suppose to do. Silly me - I thought that if you say something and about a service you offer (and even charge for it as a service to companies) you would mean what you say. If my computer company said something they didn't mean they can get sued - especially since we are a publicly traded company. I also find it interesting that in their configuration they call it "Web Content Filtering" - even though Matt explained clearly explains for us that a DNS server can't do that. I've been in the industry for a long time and I always get a kick out of everyone entering this "filtering" business and charging for services that they never really want to end up owning. They want to collect money from this market but get upset when users actually expect them to "content" filter.
Your everyday user is not going to understand the intricacies of a DNS server. They don't care. Someone created a solutions around OpenDNS touting that they do "Web Content Filtering" and someone is collecting money for that service. You say they host and supervise it - they also collect money for that service. I would think they would have some ownership of their claims.
"But they are finally limited to what a DNS service is possible to do."
Then stop advertising it as something more and profiting from that claim.
"The domain tagging system is a community effort, not really an OpenDNS operated system. They just host and supervise it.
https://community.opendns.com/domaintagging/faq/"Yet they don't have it under the community links but off their dashboard. They use phrases like "Check a domain to see if it's blocked by our Web Filtering feature." The configuration is off of the main dashboard, etc. Even I was mislead to believe they wanted to be more than a DNS server. Also, in that same FAQ it lists who the moderators are:
Who are the moderators?
Moderators are a mix of OpenDNS employees and trusted community members. Moderators are identified throughout the community by a badge
. Would you like to be a moderator? Tell us why -- we'd love the help.So there are some OpenDNS employees involved at some point of this process and it is not just a community.
-
In OpenDNS' Anti-Censorship Policy they say
"OpenDNS stands firm in the belief that control over what is accessible on the Internet should be managed exclusively at each network’s edge: in individual households, places of business and academic institutions."
That is all these users are simply trying to do. They don't know about DNS servers or its limitations. They see one thing - this could be a great tool for managing what my household sees!! That is it. OpenDNS has created an amazing system for many reasons. I like what I have seen so far from the product (have only looked at it for a few months) but I hate to see people express concerns and get shot down because they understood the documentation differently. Is this a community where we work to solve problems or just a location to be told go away and manage it yourself because we really didn't want help improving our filters?
Is anyone employed by OpenDNS monitoring this thread? I would be curious to hear your take on this discussion.
-
"I thought that if you say something and about a service you offer (and even charge for it as a service to companies) you would mean what you say."
There seems to be a big misunderstanding. I didn't say anything here about a service I offer. I'm just a user affiliated with OpenDNS in no way. And you don't even know what services I offer if at all.
"Your everyday user is not going to understand the intricacies of a DNS server. They don't care."
You hit the nail on the head with this. And this is the reason why they attempt to explain it more understandable with slogans you have quoted and you are concerned about. Whatever, the vast majority of users is happy about what is offered. I believe there are some 50 millions of users now.
"Someone created a solutions around OpenDNS touting that they do "Web Content Filtering" and someone is collecting money for that service."
Another big misunderstanding? What would these "solutions around OpenDNS" be? And who is collecting money for what service? OpenDNS is free for home use, and it filters web content in some way based on what domains host web content. This is what a recursive DNS service can do.
"Yet they don't have it under the community links but off their dashboard."
For me the Domain Tagging System is clearly found under the community link and not off my dashboard. Is it different for you?
"They use phrases like "Check a domain to see if it's blocked by our Web Filtering feature.""
This sentence is true. You can check domains to see how they are categorized. What are you concerned about?
"The configuration is off of the main dashboard, etc. "
Sure, your individual configuration is part of your account's dashboard, as should be. What else?
"So there are some OpenDNS employees involved at some point of this process and it is not just a community."
Yes, as I said, they supervise it and are the corrective level for some stupid decisions some moderators may have made.
"Is anyone employed by OpenDNS monitoring this thread?"
Most likely, this and every other thread. And they often jump in. You see it clearly declared below their profile pictures.
Please sign in to leave a comment.
Comments
41 comments