site blocked but whitelisted
Hi,
I have a site whitelisted both the domain and sub domain pjh.schoolloop.com and schoolloop.com but its still being blocked. As soon as I set my router (netgear) to use dns from isp then all is good.
Advise?
Thanks
paul
-
What does "site blocked" mean? Can you post a screen shot here?
schoolloop.com and subdomains are not tagged in any category yet, so there is no reason for blocking unless you have blocked it otherwise.
http://domain.opendns.com/schoolloop.comEnsure that your IP address information is correctly registered with OpenDNS. https://dashboard.opendns.com/settings/
If this is the case, you may want to post the complete plain text output of the following commands, so that we see what it could be:
nslookup www.schoolloop.com.
nslookup pjh.schoolloop.com. -
"Ensure that your IP address information is correctly registered with OpenDNS. https://dashboard.opendns.com/settings/"
Just seeing you posted under "Netgear Live Parental Controls". If you use a Netgear router with LPC enabled, then you do not register your IP address information there. Your dashboard is at https://netgear.opendns.com/ then.
-
Skype makes use of CDN, e.g. subdomains of akadns.net. Ensure that you don't block these.
Further, check at https://dashboard.opendns.com/stats/all/blockeddomains what related domains may still be blocked to whitelist them or to change your category settings.
-
Thanks for your response!
akadns.net doesn't show up on the list of blocked domains.
However, all kinds of skype.com sub-domains do; and all are blocked - even though skype.com is white-listed since yesterday. :(
(Btw., thanks to you pointing me to that list, I realized that another site I needed was blocked and unblocked it.)
-
Is mtalk.google.com a skype domain too?
-
Found full list here: https://forums.opendns.com/comments.php?DiscussionID=17239
Not sure why searching DNS forums didn't direct me to this link.Found it via external web search.
Thanks again for help!
-
Hi
here is my Skype whitelist.
Remember SKYPE is part of MS hence the Live sites too.
This seems to work for me. There are still some issues if I look at the Skype web site, but the app works ok.
akadns.net akamaiedge.net c.msn.com.nsatc.net conn.skype.akadns.net dispatch.kahuna.glbdns.microsoft.com e4925.g.akamaiedge.net edgekey.net hotmail.co.uk hotmail.com live.com login.live.com mail.live.com msn.com nsatc.net skype.msnmessenger.msn.com.akadns.net skype.net skypeassets.com sn1.skype.msnmessenger.msn.com.akadns.net SN1MSG3020207.gateway.messenger.live.com ui.skype.akadns.net -
"However, all kinds of skype.com sub-domains do; and all are blocked - even though skype.com is white-listed since yesterday."
Subdomains of skype.com shouldn't be blocked with skype.com whitelisted unless you forgot to flush your caches after the settings change:
https://support.opendns.com/entries/26336865-Clearing-the-DNS-Cache-on-Computers-Servers-and-Web-Browsers"Is mtalk.google.com a skype domain too?"
Rather not as Skype is a Microsoft service, not a Google service...
-
If you have a Netgear router with LPC enabled, ensure you have registered your device correctly. https://netgear.opendns.com/
Else ensure you have registered the correct IP address at OpenDNS. https://dashboard.opendns.com/settings/
-
Just seeing that there was a problem which should be solved now.
"Earlier today, an update to the policy generation systems at OpenDNS resulted in policies for some users not linking with their Allow and Block lists. OpenDNS has resolved the issue and confirmed that policy generation is now working as expected"
(From https://support.opendns.com/entries/56939764-Why-is-linkedin-com-blocked ) -
Are you getting a message that actually says OpenDNS is blocking this domain? If so what does it say? Or just share a screenshot of the page.
Assuming OpenDNS is actually blocking this read through the troubleshooting steps in this thread already. Confirm at the dashboard that OpenDNS is correctly configured and that your IP address is properly registered for your network. Which OpenDNS product are you using? Free? FamilyShield? One of the pay ones? Check if you are already blocking one of the categories this domain belongs to.
-
@southlandmusicinc
As you post in the "Netgear Live Parental Controls" section of the forum, is this what you use? If not, you're wrong here, and mattwilson9090's dashboard hints will not work. Your dashboard is only at https://netgear.opendns.com/ then. -
Aw thanks, I usually check, but in this case I hadn't realized this was a Netgear Live Parental Controls.
Still it would be helpful to know what, if any error messages they are receiving. "Not working" or "not connecting" doesn't really convey much information, especially if it might be something totally unrelated to OpenDNS or Live Parental Controls
-
I have a similar problem with
It's a govt website for weather in Aus. But Mozilla comes up with server not found error?
I whitelisted the site, but still doesn't work?
MArk.
-
Are you using "Netgear Live Parental Controls" which is what this thread is about? Have you tried any of the troubleshooting or suggestions that are in this thread? Are you receiving some sort of message that OpenDNS is blocking this domain? If you aren't receiving that message why do you think that OpenDNS is causing this for you?
-
I log into the router and then click Parental controls, so yes, must be, says 'live parenting controls'.
However, the site doesn't open with any browser using a multiple of devices. It seems to be getting blocked by the Router, but doesn't come up with a Open DNS message, but only can't connect default browser error message.
I have only just started using Parental Control and never had a problem logging into this site before. Should I try pinging the site IP?
-
Server not found
Firefox can't find the server at www.bom.gov.au.
Check the address for typing errors such as ww.example.com instead of www.example.com
If you are unable to load any pages, check your computer's network connection.
If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web. -
I don't have any problem with visiting www.bom.gov.au.
"Should I try pinging the site IP?"
Sure, if you want to waste time. Ping is useful for - nothing! The only tools useful to troubleshoot DNS are dig, host, nslookup and the likes.
nslookup www.bom.gov.au.
Server: dns1.local.prv
Address: 10.165.161.12
Non-authoritative answer:
Name: www.bom.gov.au
Address: 210.8.186.60And a useful tool to check website availability (port 80) can be telnet: telnet www.bom.gov.au 80
No matter, something is wrong with the name resolution at some OpenDNS locations if CacheCheck is being used...
And also 3rd party tools report errors for the DNS configuration of this site: http://dnscheck.pingdom.com/?domain=www.bom.gov.au
These errors cannot be compensated by a recursive DNS service like OpenDNS but must be repaired at the authoritative DNS service. -
Thanks, I don't have a prob with BOM on my phone using 4G.
But can't get it through the router on any device.
I tried your rec using http://dnscheck.pingdom.com/?domain=www.bom.gov.au
and got errors.
Permalink:
Begin testing zone www.bom.gov.au with version 1.3.0.
Delegation
Begin testing delegation for www.bom.gov.au.
Name servers listed at parent: bom-aapt-pcss.BoM.GOV.AU,bom-aapt-sgss.BoM.GOV.AU
Failed to find name servers of www.bom.gov.au/IN.
No name servers found at child.
Not enough nameserver information was found to test the zone www.bom.gov.au, but an IP address lookup succeeded in spite of that.
Nameserver
Done testing delegation for www.bom.gov.au.
Fatal error in delegation for zone www.bom.gov.au.
Test completed for zone www.bom.gov.au.
Haven't a clue what all this stuff means by the way!
-
"I don't have a prob with BOM on my phone using 4G.
But can't get it through the router on any device."
Websites usually host content for smart devices on different domains than for other devices. That's why it may work with one method, but not with the other. Also, DNS may catch sometimes one aspect of their conflicting configuration, sometimes another.
"Haven't a clue what all this stuff means by the way!"
dig +noall +answer www.bom.gov.au any
www.bom.gov.au. 19 IN A 210.8.186.60
www.bom.gov.au. 0 IN NS bom-aapt-pcss.bom.gov.au.
www.bom.gov.au. 0 IN NS bom-aapt-sgss.bom.gov.au.As can be seen, this domain has an A record and two NS records which should never happen. It must have either A or NS, never both. This is the delegation problem. And because this domain has NS records, it must have also an SOA record which doesn't exist.
And here three probes with an interval of about 15 seconds. Each time a different result:
dig +noall +answer www.bom.gov.au any
www.bom.gov.au. 19 IN A 210.8.119.235
www.bom.gov.au. 0 IN NS bom-aapt-pcss.bom.gov.au.
www.bom.gov.au. 0 IN NS bom-aapt-sgss.bom.gov.au.
dig +noall +answer www.bom.gov.au any
www.bom.gov.au. 14 IN A 210.8.119.235
dig +noall +answer www.bom.gov.au any
www.bom.gov.au. 19 IN A 210.8.186.60
www.bom.gov.au. 0 IN NS bom-aapt-sgss.bom.gov.au.
www.bom.gov.au. 0 IN NS bom-aapt-pcss.bom.gov.au.
If you want a temporary workaround, you can edit your local hosts file, or add entries to your local DNS server if you operate one:210.8.186.60 www.bom.gov.au
- or -
210.8.119.235 www.bom.gov.au
-
I have b3ta.com and www.b3ta.com whitelisted, but when I try to reach the site, I get the message, "This domain is blocked due to content filtering." What's the problem here?
-
"I have b3ta.com and www.b3ta.com whitelisted"
Were exactly did you make this whitelisting? Was it on the router as described here?
http://kb.netgear.com/app/answers/detail/a_id/20483/If yes, this keyword feature is not an OpenDNS function, but a Netgear router function, so you're in the wrong forum here. You'll want to visit a Netgear support forum.
If no, were did you enter this b3ta.com and www.b3ta.com? You may want to post a screen shot.
"I get the message, "This domain is blocked due to content filtering." What's the problem here?"
Such a message is not known to be raised by OpenDNS. Their block message looks differently. Did this block page say that it was raised by OpenDNS? You seem to have another kind of content filtering in place such like the Netgear keyword filtering I mentioned above.
Please sign in to leave a comment.
Comments
29 comments