Full IPv6 support need

Comments

10 comments

  • Avatar
    fadedtom

    Other customers:  Please show support for this feature request - https://support.opendns.com/forums/21322513-Feature-Requests/entries/search?utf8=%E2%9C%93&query=IPv6&for_search=1

     

    Support:

    The environment that I am responsible for is dual stack v4/v6. In the future I do not expect to ever operate in environment that is IPv4 only. IPv6 feature parity is essential to delivering the business value that we pay OpenDNS for. If a client, intentionally or not, can bypass the filtering and have its requests no longer logged simply by using v6 then the solution is not complete and I will need to implement other controls. If those controls provide the feature set of OpenDNS, then I don't need OpenDNS any longer.

    Please implement full feature parity for IPv6. If support will be provided in stages, please communicate these to your customer base in the form of a road map.


    If I had to vote for features in order I would say:


    Full support for IPv6 forward and reverse resolution on virtual appliances
    This allows disabling DNS traffic egress from our network.

    IPv6 reporting within Umbrella

    IPv6 filtering

    IPv6 user identity mapping


    Thank you,

    Tom

  • Avatar
    wcoile

    Don't be fooled, OpenDNS still doesn't do content filtering or feature parity on IPv6. They know it's an issue.

    Just ignore rotblitz, he loves to sow confusion on the matter and provides something :ffff that looks like an IPv6 address but is really just an IPv4 address in disguise.

     

  • Avatar
    thekcpiper

    Agreed.  IPv6 OpenDNS content filtering is needed with IPv6 addresses.  I can confirm it still does not work.  Ignore rotblitz.

  • Avatar
    rotblitz

    Yes, please ignore me if you don't want to use IPv6 with content filtering.  It works for me and many others.

  • Avatar
    verbatim9248 (Edited )

    Even if www.opendns.com just updated all laptop/desktop instructions to note that users should uncheck the ipv6 box when adding the DNS settings that would help tremendously. 

    After changing the settings on my laptop [since my comcast router is a POS], I thought this service didn't work until I saw a suggestion in the forum to uncheck the ipv6 box in the properties section.  Many others probably attempt to use opendns on laptops/desktops and think it doesn't work because sites are still connecting through ipv6.

     

  • Avatar
    wcoile

    @verbatim9248 you're essentially saying disable IPv6? That's not a helpful option at this point.

  • Avatar
    rotblitz

    The helpful option is to use from the following list of DNS resolver addresses to configure IPv6: 
    ::ffff:d043:dede   ::ffff:d043:dcdc   ::ffff:d043:dedc   ::ffff:d043:dcde

  • Avatar
    65.falcon

    IPv6 is the future and every one seems to avoid it like the PLAGUE BUT if you like the PLAGUE then the OpenDns addresses are  2620:0:ccc::2 and 2620:0:ccd::2  so you can have fun using IPv6 and OpenDns.  By the way I use IPv6 and I love it and have had NO problems that I am aware of with connections or data flow. If you can not make it work there are some versions of Windows that they actually turned it off + a router that pass Ipv6 and your internet provider. I do not care about the other guy that is scared to try new things I thing it is fun and a challenge.   HAVE FUN

     

  • Avatar
    rotblitz

    This is pretty much off-topic, because 2620:0:ccc::2 and 2620:0:ccd::2 do not come with content filtering.  DNS queries to these addresses never hit your dashboard settings, as clearly documented.
    https://www.opendns.com/about/innovations/ipv6/

Please sign in to leave a comment.