Full IPv6 support need
1) New IPv4 addresses are officially "used up", although they can still be gotten on the "second hand" market.
2) ISP's are increasingly providing IPv4 and IPv6 addresses to their customers, and some are only assigning IPv6 addresses. Many people don't even realize they are receiving IPv6 addresses and even worse, don't even realize that OpenDNS is no longer reliably or consistently protecting.
The OpenDNS community, whether free or paid desperately needs the same type of features support for IPv6 that we receive with IPv4, i.e. filtering by category, blacklisting, whitelisting, other features.
-
Other customers: Please show support for this feature request - https://support.opendns.com/forums/21322513-Feature-Requests/entries/search?utf8=%E2%9C%93&query=IPv6&for_search=1
Support:
The environment that I am responsible for is dual stack v4/v6. In the future I do not expect to ever operate in environment that is IPv4 only. IPv6 feature parity is essential to delivering the business value that we pay OpenDNS for. If a client, intentionally or not, can bypass the filtering and have its requests no longer logged simply by using v6 then the solution is not complete and I will need to implement other controls. If those controls provide the feature set of OpenDNS, then I don't need OpenDNS any longer.
Please implement full feature parity for IPv6. If support will be provided in stages, please communicate these to your customer base in the form of a road map.
If I had to vote for features in order I would say:
Full support for IPv6 forward and reverse resolution on virtual appliances
This allows disabling DNS traffic egress from our network.IPv6 reporting within Umbrella
IPv6 filtering
IPv6 user identity mapping
Thank you,Tom
-
-
Don't be fooled, OpenDNS still doesn't do content filtering or feature parity on IPv6. They know it's an issue.
Just ignore rotblitz, he loves to sow confusion on the matter and provides something :ffff that looks like an IPv6 address but is really just an IPv4 address in disguise.
-
Even if www.opendns.com just updated all laptop/desktop instructions to note that users should uncheck the ipv6 box when adding the DNS settings that would help tremendously.
After changing the settings on my laptop [since my comcast router is a POS], I thought this service didn't work until I saw a suggestion in the forum to uncheck the ipv6 box in the properties section. Many others probably attempt to use opendns on laptops/desktops and think it doesn't work because sites are still connecting through ipv6.
-
@verbatim9248 you're essentially saying disable IPv6? That's not a helpful option at this point.
-
IPv6 is the future and every one seems to avoid it like the PLAGUE BUT if you like the PLAGUE then the OpenDns addresses are 2620:0:ccc::2 and 2620:0:ccd::2 so you can have fun using IPv6 and OpenDns. By the way I use IPv6 and I love it and have had NO problems that I am aware of with connections or data flow. If you can not make it work there are some versions of Windows that they actually turned it off + a router that pass Ipv6 and your internet provider. I do not care about the other guy that is scared to try new things I thing it is fun and a challenge. HAVE FUN
-
This is pretty much off-topic, because 2620:0:ccc::2 and 2620:0:ccd::2 do not come with content filtering. DNS queries to these addresses never hit your dashboard settings, as clearly documented.
https://www.opendns.com/about/innovations/ipv6/
Please sign in to leave a comment.
Comments
10 comments