I tried everthing, but OpenDNS still not working

Comments

23 comments

  • Avatar
    rotblitz

    You do not use OpenDNS at all for your DNS queries. I.e. your DNS queries are not sent to OpenDNS.

    It seems your DNS traffic is redirected by your ISP to their own DNS service.  So configuring the OpenDNS resolver addresses the normal way does not help.

    Try with the dnscrypt-proxy to see if you can use OpenDNS this way.   http://dnscrypt.org/

    0
    Comment actions Permalink
  • Avatar
    guslee

    Thanks a lot for the info rotblitz. It seems that using dnscrypt.org is too much technical for me, since I don't have an IT background. So I think I'll give up on OpenDNS for now. Thanks again.

    Gus.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    It's easy and doesn't require an IT background.

    You download the Windows package from http://download.dnscrypt.org/dnscrypt-proxy/ - currently dnscrypt-proxy-win32-1.3.3.zip.
    You extract its content to a directory/folder of your choice.
    You open a command prompt window, cd to this directory, and execute

    dnscrypt-proxy.exe --install


    Then you change the DNS server settings in your active internet connection to 127.0.0.1

    That's it!

    You can see if DNSCrypt is working with executing:
    nslookup -type=txt debug.opendns.com.

    0
    Comment actions Permalink
  • Avatar
    guslee

    Thanks a lot rotblitz for not giving up on me :-). I've downloaded dnscrypt-proxy and tried as you suggested, but when I executed "dnscrypt-proxy.exe -- install" from command prompt it says: "[ERROR] Unable to install the service".

    Am I missing something here?

    Gus.

     

    0
    Comment actions Permalink
  • Avatar
    guslee

    One more thing, I set the DNS on my router (Prolink  WNR1012) with the DNS for FamilyShield, and put the OpenDNS' DNS to my internet properties. To make things more clearly to you let me give the snapshot of my computer's & router config. My router attached to a separate fibre optic cablemodem (from the ISP, who also give cable TV service) through WAN port. I also registered the IP address showed on Dashboard to OpenDNS.

    I hope this info may helps you to have a broader look. Thanks again.

    Gus

     




    LAN Setup.jpg
    Internet Props.jpg
    WAN Setup.jpg
    My Dashboard.jpg
    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "when I executed "dnscrypt-proxy.exe -- install" from command prompt it says: "[ERROR] Unable to install the service"."

    There is a wrong space between "--" and "install" which must not be there.  Use: dnscrypt-proxy.exe --install

    If you still get this error, then try with: dnscrypt-proxy.exe --reinstall

    "put the OpenDNS' DNS to my internet properties."

    When you use the dnscrypt-proxy, you need to remove them and use 127.0.0.1 only, as I said above.  The router DNS settings will not take effect on this computer when using the dnscrpyt-proxy.

    0
    Comment actions Permalink
  • Avatar
    guslee

    Sorry for the mistype in my reply. I tried to run dnscrypt one more time, with --reinstall and then --install, but still not working. I attached the screenshot of my cmd windows. And when I put 127.0.0.1 on the DNS, I lost my internet connection.

    Gus




    Cmd screen.jpg
    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "still not working. I attached the screenshot of my cmd windows."

    You need to start an elevated command prompt window.  Right-click the related start menu item and "Run as administrator".  A regular command prompt doesn't have administrative rights and cannot install a service.

    "And when I put 127.0.0.1 on the DNS, I lost my internet connection."

    Sure, this is right only after the dnscrypt-proxy is installed and running, else you will lose DNS which looks like losing internet connection.

    0
    Comment actions Permalink
  • Avatar
    guslee

    OK, I managed to install dnscrypt via elevated command prompt window, and changed my DNS to 127.0.0.1.  I attached my cmd screen for nslookup -type=txt debug.opendns.com. But I can't browse anymore with that DNS. Anything else I should do?

    Gus.




    Cmd DebuOpenDNS.jpg
    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Your screen shot shows that you use DNSCrypt now.  You should be able to browse the web with this.  What exactly happens if you try doing so?  What browser are you using?

    Also, post the complete output of the commands:

    ipconfig /all

    tracert www.google.com

    0
    Comment actions Permalink
  • Avatar
    guslee

    I use google chrome. When I tried to browse it says "This web page is not available". I use only 127.0.0.1 for Preferred DNS server and left Alternate DNS server blank. If I put OpenDNS' DNS on the Alternate DNS Server then I can browse the web.

    About ipconfig & tracert, screenshot attached.

    Thanks a lot for your help.

    Gus




    Ipconfig-all cmd.jpg
    tracert google.jpg
    Internet Props 2.jpg
    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Your configuration looks fine.  And "nslookup -type=txt debug.opendns.com." still shows that you're still using DNSCrypt?  It rather looks as if the dnscrypt-proxy service is not running anymore.  Check it with services.msc.

    0
    Comment actions Permalink
  • Avatar
    timepass26

    after so much time finally  OPEN DNS has worked for me but the problem is that it happend only for one day after that it is not blocking any porn websites.....either i have blocked them from setting option but no result.....

    0
    Comment actions Permalink
  • Avatar
    Alexander Harrison

    It sounds like your IP address is now outdated. I'd suggest installing the Updater client to keep this up to date from https://support.opendns.com/entries/23282614. Ensure that the "send updates to DNS-O-Matic" checkbox is NOT checked in the settings. 

    0
    Comment actions Permalink
  • Avatar
    timepass26

    thanks Alexander for your prompt reply. i'll do as you said..... :)

    0
    Comment actions Permalink
  • Avatar
    ym25

    I've set up dnscrypt and opendns to work with my PC. It works well on my PC when I set web content filter. However other devices that connect to the same network are not filtered. I've set my PC DNS to 127.0.0.1 to work with dnscrypt. But I can't set 127.0.0.1 as my router DNS, it says "IP is invalid". How do I solve this issue? Thank you

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    This is not an issue but the expected behavior.  The dnscrypt-proxy works wherever you install and run it, in your case on your PC.  If you want DNSCrypt to work everywhere, you have the following options:

    • Either install and run the dnscrypt-proxy on your router.
    • Or install and run the dnscrypt-proxy on each single device.
    • Or configure your devices to use your PC as DNS server.  You'll have to start the dnscrypt-proxy then with the local address of your PC.  No need to mention that your PC must be switched on all the time in this case.
    • Or do not use DNSCrypt on the other devices but plain OpenDNS only.
    0
    Comment actions Permalink
  • Avatar
    ym25

    Hi rotblitz,

    Thank you for the prompt answer. When I use plain OpenDNS on my router, sometimes it doesn't work because of HTTP mismatch, but sometimes it works too. I guess it's my ISP problem. After googling for a while, installing DNSCrypt on router needs installing openwrt firmware on my router which is not supported by openwrt.

    Thank you again.

    0
    Comment actions Permalink
  • Avatar
    zohirulalam

    First of all, Thank you rotblitz for your solutions. Almost every single problems I looked into for my issues, I found rotblitz's suggestion knowledgeable and helpful.

    I was using OpenDNS with an ISP where the IP is shared with many users (the internet connection is shared to multiple users in the neighborhood). After installing OpenDNS and blocking unwanted sites for my home for internet safety, it worked well untill bunch of other users, whose DNS look up was probably set to OpenDNS for whatever reason, wasn't able to browse their desired content. I used to get emails from the users on that same IP asking to unblock sites.

    I felt somewhat bad, but couldn't directly contact them with support.

    I guess, right now, the ISP started bypassing the DNS look up (probably the ISP got complaints from them) at their root and I can't use OpenDNS and my families were able to visit any unsafe sites. 

    After reading thru some solutions, I got the idea of installing dnscrypt on my router (since installing it on the PC wouldn't solve the entire issue). 

    Any one can please post a link of a tutorial about how to install the dnscrypt on a router with dd-wrt?

    Thanks for reading this long issue. Thanks in advance for a solution.

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Sorry, you'll need to go to the DD-WRT support site or www.dnscrypt.org to find out if that's even possible, let alone how to do it.

    Although OpenDNS had a hand in creating dnscrypt it is not their product and they don't actually support it. I think you'll have better luck looking at one of those two sites for someone who has integrated DD-WRT and DNSCrypt rather than limiting your field to someone who has done that who is also an OpenDNS user.

    0
    Comment actions Permalink
  • 0
    Comment actions Permalink
  • Avatar
    helalfy

    I tried everything posted here and none worked.

    I tried dnscrypt, IP updater, everything, but none is working. The setup guide page always gets me the same message: "Oops! You're not using OpenDNS yet". I am setting up my home PC, not even a router. I even could not open the dnscrypt-proxy page from home to download the package. It's blocked by my ISP, it seems. I had to download it at work and bring it home on a flash. Alas, one week of trials in vain.

    It seems my ISP is very powerful bypassing any settings I try. I was able to test the setup on my PC at work very easily (just by changing the DNS of the primary connection). I had it also setup on my home router for the past 2 years with my former ISP. So I'm sure I understand how to do it.

    I can see this post was not update for almost a year now, so if any new methods came up during that year, please let me know.

    - Thanks

    0
    Comment actions Permalink
  • Avatar
    rotblitz (Edited )

    The method is to call your ISP to get you out of DNS traffic redirection.  If they don't agree, you move to another ISP.  You are the one who pays, and they have to jump according to your wishes.  They are not to govern you, but you them.

    0
    Comment actions Permalink

Please sign in to leave a comment.