Multiple accounts behind one ip address

Comments

11 comments

  • Avatar
    rotblitz

    "multiple routers behind 1 ip address"

    How does one put multiple (parallel) routers behind one IP address, if this is possible at all?  I would say: this does not work!

    "For instance: My 15 year old son could be connected through router XYXYXY behind ip address xxx.xxx.xxx.xxx and my 9 year old daughter could be connected through router XXXXXX behind the same ip address."

    You just said you have one IP address, and now you say you have two?  No, you have one IP address only from your ISP!  Stay with it, and don't confuse me!

    "I think this could be done by MAC address id for the routers behind the ip address."

    Did you know that MAC addresses are never part of any DNS traffic?  Given this unchangeable fact, what's your suggestion how's this to work?

    If your goal is to "allow for different filtering levels", then this is not a problem and is already available since a longer time.  You'll want to use a Netgear router with LPC enabled, or you'll want to go for the OpenDNS Enterprise line of services.  You can be ensured that OpenDNS does not give paid features away to be used in the free service!

    "It would be a great service that parents (and businesses) would pay for."

    Yep, it indeed already is!  https://www.opendns.com/enterprise-security/threat-enforcement/packages/

    And the Netgear LPC solution is free (after you purchased the router): http://netgear.com/lpc
    This has default settings and allows for setting up bypass accounts with different content filtering.

    -2
    Comment actions Permalink
  • Avatar
    cptncrud

    Not sure your quite reading my question right.  Sounds a little angry as well.  Is this a real response from a representative of OpenDNS, or a smackdown advertisement for Netgear? ;-)

    Thanks anyway, I did learn on thing from the response none-the-less, even if rotblitz didn't quite understand what I was asking or how to set up multiple routers behind a gateway.

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Rotblitz is an employee of neither company, he is, just like most people on here, a user of OpenDNS. Although he can be somewhat snarky, and doesn't tolerate fools very well, I don't think that English is his native language, so sometimes his phrasing seems just a little unusual.

    Regardless of all of that, his reply is correct. DNS traffic does not pass Mac address information and so the method you suggested, even with a paid surface would not give you multiple configuration sets behind one IP address, whether you had a paid account or not. The way the free, and many of the paid services work, is to associate your public IP address with your account, and to treat all DNS traffic coming from that address (an OpenDNS "network") the same. There is no way to have multiple network  using the basic method.

    If you want to have devices on the same network using different sets of OpenDNS settings your options are as he said 1) get Netgear routers that support LPC, which since they do not use this method of identifying networks would allow each router to use it's own set of settings 2) get OpenDNS Enterprise, which through various methods, depending on what your internal LAN is like and how you deploy things, including use of an agent on devices that support  can allow you to configure multiple devices on the same OpenDNS with different sets of OpenDNS settings.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "rotblitz didn't quite understand what I was asking"

    I think I very well understood.  You asked for a paid service allowing multiple settings based on internal private IP addresses or internal MAC addresses, although I expected you to be well aware of this information fortunately not being available on the public internet and to services in the cloud like OpenDNS.

    "or how to set up multiple routers behind a gateway."

    With demonstrating that you thought your network internals being visible on the public internet, I was pretty confident that you didn't know.  You had to utilize an additional switch or hub, of course.  But this would come along with many troubles for people not experienced with network solutions of this kind.

    And I clearly pointed you to what you really asked for: "I would like a paid service...".  There are exactly two paid OpenDNS related services which may fit your needs, or better your idea.  Therefore raising the idea was useless.  Even more if your idea has been raised several times already here in the idea bank.  It was just another duplicate.

    And I don't understand why you came back to complain instead of simply saying "thanks".  Honestly, your attitude is inacceptable.
    No matter, thank you for your feedback.  I will try to remember if I ever stumble over another thread from you.

    0
    Comment actions Permalink
  • Avatar
    Daniel Cheung

    Hi cptncrud!

    That's an interesting way to set up filtering for your network(s) using OpenDNS - unfortunately, that won't be how our service works for the Basic package.

    Depending on how many devices you have, you could look into using our Umbrella Prosumer product. This allows you to put up to 5 devices with per-device filtering, therefore controlling what each device is filtered for. Anything beyond the 5 devices, you will be looking at our Professional package. 

    Our Professional package does include network level protection in addition to per-device filtering. This is possibly something you could look into as it sounds like you're looking to have more control over your children's internet traffic.

    Should you have any questions or want to get help setting this up, feel free to let us know on the forums or you an always start a support ticket with us.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Hi Daniel, sorry for intervening regarding Prosumer.

    "This allows you to put up to 5 devices...  Anything beyond the 5 devices..."

    I think this is not fully correct, as the Prosumer description is:

    Want a package for 1 to 5 Users?

    Umbrella Prosumer uses OpenDNS’s lightweight agents to protect up to three devices (per licensed user)...

    This would sum up in a maximum of 15 devices, depending on the number of registered users, right?

    And this brings me to a point to ask this question: Is the Prosumer content filtering settings based on the (1 to 5) users or (also or only) based on the single devices of each user?  I.e. can the settings be different for users only or also for each device?

    0
    Comment actions Permalink
  • Avatar
    Rob Gregg

    Hi Rotblitz,

    Thanks for asking! First of all, you are correct that each user can have up to three devices, meaning a maximum of fifteen devices registered per prosumer account. When it comes to filters, you are able to set up policies to filter individual devices, or groups of devices. Whether you decide to set up the same filters for all of a single users devices is entirely up to you.

    I should note that we are not able to give filtering on a per Windows user basis without the Active Directory integration only currently available through our enterprise products. More information on those products is available here.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Great, thanks!

    0
    Comment actions Permalink
  • Avatar
    theamigaone

    I have been looking at this concept of having to separate profiles for for internal routers, but yes as mentioned this wouldn't work due to DNS requests are not differentiated by MACs of the routers behind the ISP Router.

    One solution (probably not favored  on a openDNS forum) is to use another DNS provider for the second router thus allowing openDNS to control one router and another DNS provider for the second.

    OR this for the Idea bank

    OpenDNS provides two IP Addresses for the DNS servers. Why not have the ability to have 1 profile per DNS server. Ok this kills redundancy, but if openDNS could change their architecture to allow this or provide a secondary ip set, this would be a solution for those with two internal restriction levels.

     

     

     

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    OpenDNS already has 6 DNS server addresses available for use (8 if you count the IPv6 addresses). 4 of them are for "standard" OpenDNS, 2 for FamilyShield (which can be used in conjunction with "standard" OpenDNS), and the other 2 for IPv6 which cannot do domain filtering. Why would they reengineer the entire product line to allow (or require) each address to filter things differently, when there has been very little request for such a thing, and when it's already possible to, as has been already talked about in this thread, to filter things differently by using such things as more than one Netgear router with LPC, or one of the other paid products that allows for separate filtering profiles based on things like user or device. In fact one could even get a Netgear router with LPC, and using another router that subnet could be protected with OpenDNS Home

    OpenDNS is intended to be a free, BASIC, product for home users. It's not intended to address every scenario for home use, nor have every possible bells and whistles that people might want. For those additional things they are expected to use one of the paid services, and all businesses users have to use one of the paid services.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Something similar already exists.  Filtering behavior is different depending on if you use the normal OpenDNS resolver addresses or the FamilyShield ones.

    0
    Comment actions Permalink

Please sign in to leave a comment.