Opendns over IPv6 not recognized.

Follow
Avatar
roughnecks

Hi there,

my home networking set up provide a Debian Server which is an IPv6 gateway through SiXXs.

My desktop computer has a static IPv6 address, dns servers set to Opendns ones and the gateway is the afore mentioned Debian server.

Problem is that, when i try to test my configuration with the Desktop PC i don't get the welcome screen by Opendns if i am browsing via IPv6; anyway clicking the test pages i see Opendns in action: i am warned of the (test) phishing site.

So, can i just leave it be this way or do i need to take some further actions? Thanks.

Best Regards,

Simone.

0

Comments

11 comments

Sort by Date Votes
  • Avatar
    rotblitz

    If you don't want to reliably use OpenDNS, you can leave it this way, else you want to disable IPv6.

    0
    Comment actions Permalink
  • Avatar
    roughnecks

    What kind of answer is that? Should we wait another 10 years for IPv6?

    0
    Comment actions Permalink
  • Avatar
    Kristy Patullo

    OpenDNS does have IPv6 resolvers but they can only be used for our recursive DNS service, content filtering is not yet supported with IPv6.  For more information please see: http://www.opendns.com/about/innovations/ipv6/

     

    Because DNS is a round robin if you have IPv6 DNS servers configured as rotblitz mentioned you will not be able to reliably use OpenDNS because your computer can use any one of the servers you have configured to use a DNS lookup.  In order to use OpenDNS's content filtering services reliably you can either disable IPv6 for the network you are using OpenDNS on or remove the IPv6 DNS servers from your network.  For more information regarding OpenDNS and IPv6 please see: https://support.opendns.com/entries/26056194-Does-OpenDNS-support-IPv6-

    0
    Comment actions Permalink
  • Avatar
    roughnecks

    I don't understand, i am using Opendns IPv6 dns servers already and, as i mentioned in my first post, web filtering is actually working (the phishing test page on the welcome opendns page is working). I don't have any IPv6 DNS server configured in my nework, all af the devices are manually set and configured to use opendns resolvers. Also i get 10/10 here: http://www.test-ipv6.com/

     

    The URL you tried to load:

    http://www.internetbadguys.com

    Phishing Site Blocked

    Phishing is a fraudulent attempt to get you to provide
    personal information under false pretenses.

    We prevented you from loading this page as part of our safer, faster, and smarter DNS service. Learn more about this free service...

     

    Thanks.

    0
    Comment actions Permalink
  • Avatar
    roughnecks

    C:\Users\roughnecks>nslookup google.it
    Server:  UnKnown
    Address:  2620:0:ccc::2

    Risposta da un server non autorevole:
    Nome:    google.it
    Addresses:  2a00:1450:4001:c02::5e
              173.194.70.94

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "What kind of answer is that? Should we wait another 10 years for IPv6?"

    The only possible answer I as a user can give you as a user...

    Well, you could use the IPv6 equivalent FamilyShield addresses or even the normal IPv6 equivalent OpenDNS resolver addresses, as you seem to do,
    see https://support.opendns.com/entries/21786344-IPv6-Web-Filtering 

    As mentioned in this thread, the only problem is that you can't register your IPv6 address yet at https://dashboard.opendns.com/settings/, just an IPv4 address, and therefore OpenDNS cannot associate your IPv6 DNS queries with your settings.

    "as i mentioned in my first post, web filtering is actually working (the phishing test page on the welcome opendns page is working)."

    Yes, but this is not your settings taking effect, but the OpenDNS default.

    1. " i am using Opendns IPv6 dns servers already"
    2. "I don't have any IPv6 DNS server configured in my nework"

    LOL:  How do these contradicting statements go to each other?  If you use something, you must have configured it.

    0
    Comment actions Permalink
  • Avatar
    roughnecks

    I am not running a *DNS server* on my network, i just have dns setup as a client.

    So, even if i cannot register my IPv6 address in the dashboard, web filtering is working anyway. Right?

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "So, even if i cannot register my IPv6 address in the dashboard, web filtering is working anyway. Right?"

    Yes and no.  Yes, as long as your DNS query is over IPv4, and no, as long as your DNS query is over IPv6.  Because you do not control where your DNS queries go out (IPv4 or IPv6), the usage of your settings is totally random.

    According to your "nslookup google.it", your OS preference seems to be via IPv6, so you will very rarely use OpenDNS content filtering if at all.

    0
    Comment actions Permalink
  • Avatar
    roughnecks

    Thanks for the clarification.

    0
    Comment actions Permalink
  • Avatar
    maintenance

    A small point:  "Should we wait another 10 years for IPv6?" 

    The answer to that is you will wait as long as it takes for the internet (networks that comprise the internet) and ISPs to go IPv6. Using IPv6 *in a tunnel* to the few sites whose servers have IPv6 addresses is *not* using IPv6.  There is nearly zero point in having IPv6 even turned on for a device unless it is in an enterprise-sized LAN or WAN that uses IPv6 natively. OpenDNS having IPv6 resolver addresses, and allowing IPv6 addresses to be registered, will change none of this until the internet largely changes to native IPv6.

    0
    Comment actions Permalink
  • Avatar
    roughnecks

    "OpenDNS having IPv6 resolver addresses, and allowing IPv6 addresses to be registered, will change none of this until the internet largely changes to native IPv6"

    It would be a step forward: if everyone sits and waits for the others to enable IPv6, the internet (networks that comprise the internet) will never make it.

    0
    Comment actions Permalink

Please sign in to leave a comment.

Didn't find what you were looking for?

New post