openDNS not working as expected

dfwjoe

January 03, 2014 17:55

Hi,

I configure openDNS with a 'moderate' filter which I expect will block porn and gambling sites but it does not work.
I have a verizon Westell 9100em router.
The http://welcome.opendns.com/ shows the expected "Welcome to OpenDNS" page. The test sites - http://www.exampleadultsite.com and http://www.internetbadguys.com are both blocked as expected but I can still load www.porn.com and other sites (xvideo.com).

I even have xvideo.com on my black list and it still loads.

I am using firefox and I cleared the cache and did ipconfig /flusdns several times.
Please help.

Some outputs you might require:
C:\>nslookup -type=txt debug.opendns.com
Server: myrouter.home
Address: 192.168.1.1

Non-authoritative answer:
debug.opendns.com       text =

        "server 14.dfw"
debug.opendns.com       text =

        "flags 20 0 2f6 d007f00502014c3"
debug.opendns.com       text =

        "id 19353014"
debug.opendns.com       text =

        "source 173.74.252.110:53"

C:\>nslookup www.porn.com
Server: myrouter.home
Address: 192.168.1.1

Non-authoritative answer:
Name:    porn.com
Address: 64.210.140.16
Aliases: www.porn.com

Comments

22 comments

rotblitz January 04, 2014 00:46

It seems your IP address 173.74.252.110 is not registered with your OpenDNS network, but with another one with ID 19353014.
See https://dashboard.opendns.com/settings/

0

Comment actions Permalink
dfwjoe January 04, 2014 03:16

Thanks your your prompt reply.

Please forgive my ignorance. I'm from a non-IT background.

I'm not sure what you mean by 'not registered with openDNS' or what I need to do to register it. I thought I followed the instructions to setup openDNS pretty closely.

Can you provide details of what I need to do to fix this issue? Thanks.

0

Comment actions Permalink
rotblitz January 04, 2014 13:17

"I'm from a non-IT background. "

Sure, pretty clear. People with IT background would not come to here to raise this. It's exactly for people like you.

"Can you provide details of what I need to do to fix this issue?"

Visit https://dashboard.opendns.com/settings/ to see if you already added a network. If not, add one. Ensure that your dashboard network is associated with your public IP address. Your IP address is found on top of the page. "Your current IP is .....".

In case your IP address is not accepted when adding or updating the network, you'll want to read:
http://www.opendns.com/support/article/83 "Network Already Exists / IP Address Taken by Another User / !Yours"

If everything went fine until now, draw attention to the last part on that page:

Keep your network's IP up-to-date with our free software.
Available for Windows and Mac OS X.

That's it!

If you have problems adding or updating your dashboard network, post a screen shot of https://dashboard.opendns.com/settings/

0

Comment actions Permalink
dfwjoe January 04, 2014 16:41

Everything appears to set up correctly. I did add my network. I've deleted it and re-added but still no good. Attached is

the screen cap you requested. Thanks,

screencap.docx

0

Comment actions Permalink
rotblitz January 04, 2014 18:29

The screen shot looks fine.

"but still no good."

What is not good? Can still access www.porn.com ? Then I need the output of these commands again:

nslookup -type=txt debug.opendns.com.
nslookup www.porn.com.

0

Comment actions Permalink
dfwjoe January 04, 2014 18:39

Yes, I can still access www.porn.com

C:\>nslookup -type=txt debug.opendns.com.
Server: myrouter.home
Address: 192.168.1.1

Non-authoritative answer:
debug.opendns.com       text =

        "server 14.dfw"
debug.opendns.com       text =

        "flags 20 0 2f6 c007f00500014c3"
debug.opendns.com       text =

        "id 19376128"
debug.opendns.com       text =

        "source 173.74.252.110:53"

C:\>
C:\>nslookup www.porn.com.
Server: myrouter.home
Address: 192.168.1.1

Non-authoritative answer:
Name:    porn.com
Address: 64.210.140.16
Aliases: www.porn.com
C:\>

0

Comment actions Permalink
rotblitz January 04, 2014 18:49

Do you have the "Pornography" category selected for blocking?

If yes, I don't understand why it is not blocked for you. Someone must check your account, so open a support ticket with a link to this thread. We users cannot check your account.

0

Comment actions Permalink
dfwjoe January 04, 2014 23:59

Yes - I do, I selected the 'moderate' category which has pornography in it.

I will open a support ticket thanks.

0

Comment actions Permalink
rotblitz January 05, 2014 14:09

Did you flush your local caches?
https://support.opendns.com/entries/23281284-Clearing-the-DNS-Cache-on-Computers-and-Servers
https://support.opendns.com/entries/23739610-Clearing-the-DNS-Cache-on-Browsers

0

Comment actions Permalink
dfwjoe January 05, 2014 16:32

Yes I did, initially as I indicated in my original post and several time after that and then again after following your instructions.

Please take a look at the ipconfig /all output snippet- is the DNS server value correct?

-----------------------------------------------

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix . : home

   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv4 Address. . . . . . . . . . . : 192.168.1.9(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Sunday, January 05, 2014 9:57:24 AM
   Lease Expires . . . . . . . . . . : Monday, January 06, 2014 9:57:23 AM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DNS Servers . . . . . . . . . . . : 192.168.1.1
   NetBIOS over Tcpip. . . . . . . . : Enabled

0

Comment actions Permalink
rotblitz January 05, 2014 16:55

Yes, this looks fine. DNS points to your router. I've seen this already from your earlier outputs.

Server: myrouter.home
Address: 192.168.1.1

You are clearly using OpenDNS for your DNS queries. It's just that your settings do not seem to take effect.

0

Comment actions Permalink
iwantgeneration April 02, 2014 00:57

Hi :

I have the exact same problem . What was the resolution ?

thanks

mike

1

Comment actions Permalink
jewing April 26, 2014 03:39

I've had a similar problem as well. What was the solution? I have porn sites that are not blocked even when they are blacklisted.

1

Comment actions Permalink
dfwjoe April 26, 2014 03:50

Sorry about the late reply. Turns out that the IP settings on my router was incorrect.

-1

Comment actions Permalink
jewing April 26, 2014 04:25

What settings did you have to correct?

0

Comment actions Permalink
nb5691 January 25, 2017 06:55

@rotblitz, hi with filtering level as High, porn site blocking is unpredictable,

http://www.exampleadultsite.com and http://www.internetbadguys.com are both blocked,

whereas all links from http://toppornsites.com/ are going thru.

the output of nslookup -type=txt debug.opendns.com is as follows :

Server: 127.0.1.1
Address: 127.0.1.1#53

** server can't find debug.opendns.com: NXDOMAIN

pls help.

0

Comment actions Permalink
rotblitz January 25, 2017 07:22

This output indicates that you don't use OpenDNS at all.
Check at http://welcome.opendns.com/

Ensure that your internal DNS server at 127.0.1.1 forwards the DNS traffic to OpenDNS - always. I.e. no other DNS server addresses should come to play..

0

Comment actions Permalink
nb5691 January 25, 2017 07:31

Thank u, I clicked on http://welcome.opendns.com/

and got

Welcome to OpenDNS!

Your Internet is safer, faster, and smarter
because you’re using OpenDNS.

Thank you!

0

Comment actions Permalink
nb5691 January 25, 2017 07:59

It is a learning process for me, sorry for the inconvenience, i changed the network settings from Automatic (DHCP) to Automatic (DHCP) addresses only, all other settings remained the same including DNS servers pointing to opendns, now i got the output of

nslookup -type=txt debug.opendns.com

as follows :

Server:       127.0.1.1
Address:   127.0.1.1#53

Non-authoritative answer:
debug.opendns.com   text = "server m7.sin"
debug.opendns.com   text = "flags 20 0 50 3B500007E00400014C3"
debug.opendns.com   text = "originid 64503725"
debug.opendns.com   text = "actype 2"
debug.opendns.com   text = "bundle 9458061"
debug.opendns.com   text = "source 180.215.120.225:40560"

Authoritative answers can be found from:

0

Comment actions Permalink
rotblitz January 25, 2017 09:55

This looks all good now. You should be sorted!

0

Comment actions Permalink
nb5691 January 25, 2017 13:16

Thank you.

0

Comment actions Permalink
boxit January 20, 2019 09:16

I had the same problem on the website https://www.similarcams.com

0

Comment actions Permalink