VPN Connection unblocks filter
I recently installed OpenDNS. It seems to work fine for my Netgear network. All devices connected seem to be properly filtered. However, I just noticed that when I'm connected to my work VPN connection, the parental filter did not block previously blocked sites. Any idea on how to fix this?
-
Great! Then get these blacklists and simply submit them at
https://community.opendns.com/domaintagging/submit/
You can submit 1000 at a time, just by copying & pasting! Why don't you do it?If you want to speed it up, raise the same list from your submission as support ticket to OpenDNS. Then you can use the checkbox above very soon again!
-
@enegron68 Without a specific list of these VPN's it's impossible to say whethe or not OpenDNS could block them, or if they are already in the proper category.
OpenDNS is a DNS based system, meaning that if a VPN doesn't use a domain then OpenDNS won't even know about it, let alone have a way to block it. In order to block domains using categories someone will have had to start that process by submitting domain names to the system to be voted up.
If you have a particular list of VPN domains that is not categorized as such you are certainly welcome to submit them, and tet the whole process started.
-
Rotblitz... I've been following your comments and suggestions in this forum and it's starting to make sense. You did mention also blocking ports. I know this is not an openDNS issue, but are there vpn specific ports I should block on my router, you can suggest. I'm collecting data for my next move. I likewise have a tech saavy teenager. Thanks
-
Theoreticallly VPNs can use any port and any protocol. VPNs typically also use UDP, rarely TCP, and tend to use the following ports: 80, 443, 500, 4500, 5000, 5353. You have to find out for each different VPN program separately by searching the internet. So, if you block all ports (ranges) and protocols which are not being used otherwise, you catch most of the VPNs. In cases where you must block VPNs sharing port and protocol with other services, you still can block by IP addresses or IP address ranges instead of port and protocol.
Please sign in to leave a comment.
Comments
35 comments