OpenDNS setup correctly but teen gets access to porn anyway

Comments

4 comments

  • Avatar
    simba12

    Prizepatrol I noticed your post is somewhat old, but I wanted to help anybody else who may stumble on the same problem with their teens. I hope you found a way to block your son from accessing those sites like I did. Although my son is not accessing porn sites anymore I found that before stopping, he had started watching porn while tethering with his cellphone. Basically connecting to his phone's internet with his computer thus avoiding the home internet on the router with opendns altogether. So check that too. 

  • Avatar
    rotblitz

    You got these instructions from http://www.dd-wrt.com/wiki/index.php/OpenDNS#Intercept_DNS_Port - right?

    Ok, it should not be possible anymore to access another DNS service while reconfiguring the end device. Prove if this is indeed not possible:

    nslookup -type=txt which.opendns.com.  8.8.8.8

    Now, he may still be able to use web proxies to circumvent OpenDNS if you don't block the Proxy/Anonymizer category.  Did you?

    Also tools like UltraSurf, SecurityKISS CyberGhost VPN and the likes could be used to circumvent OpenDNS.  Not sure if those are available for Mac OSX, or if there are others available for this OS.  Depending on how they work, you are able to block IP addresses and/or ports in DD-WRT.

    Other options of circumvention include bootable DVDs with e.g. Ubuntu, but this won't help your teen a lot.

    Whatever, it's quite hard to enforce policies if one has admin rights on a computer, generally.

    "is there a way of seeing from the router what sites he is actually accessing. Since he is bypassing OpenDNS, the stats there would not apply for him, I think."

    You're right, the OpenDNS stats don't help in this case.  You'll want to use DD-WRT's logging features instead.
    http://www.dd-wrt.com/wiki/index.php/Logging_with_DD-WRT

  • Avatar
    prizepatrol

    Thanks for the info. This is helpful to know. All of the VPNs you list above have MAC versions, so likely that is what he is using. But once I check the logging, I hope to be able to tell and to block the IPs he is using to connect.

  • Avatar
    hung2b

    It's almost as if you have been duped to believe he has a right to use your internet.

    DNS filters will only work if he is trying to resolve a host name ;)

Please sign in to leave a comment.