site blocked but whitelisted

Comments

29 comments

  • Avatar
    rotblitz

    What does "site blocked" mean?  Can you post a screen shot here?

    schoolloop.com and subdomains are not tagged in any category yet, so there is no reason for blocking unless you have blocked it otherwise. 
    http://domain.opendns.com/schoolloop.com

    Ensure that your IP address information is correctly registered with OpenDNS.  https://dashboard.opendns.com/settings/

    If this is the case, you may want to post the complete plain text output of the following commands, so that we see what it could be: 

    nslookup www.schoolloop.com.
    nslookup pjh.schoolloop.com.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "Ensure that your IP address information is correctly registered with OpenDNS.  https://dashboard.opendns.com/settings/"

    Just seeing you posted under "Netgear Live Parental Controls".  If you use a Netgear router with LPC enabled, then you do not register your IP address information there.  Your dashboard is at https://netgear.opendns.com/ then.

    0
    Comment actions Permalink
  • Avatar
    Dominic Bannister

    Hi Paul,

     

    We are looking into the issue with schoolloop.com. It looks like they may be blocking some of our IP addresses. We have reached out to the owners of the domain. I will provide an update soon. 

    Thank you for using OpenDNS! 

     

    0
    Comment actions Permalink
  • Avatar
    Dominic Bannister

    Hi Paul,

     

    We have confirmation that the site (schoolloop.com) is now working cross all of our servers. The hosting company in charge of the domain has removed our IP addresses from their block list. If you continue to have issues with the site, please open a support ticket. 

    0
    Comment actions Permalink
  • Avatar
    proudmomoffour

    I wonder if a similar issue exists with Skype. I white listed it, but get msg that it's Blocked By DNS (skype.com); the Skype application itself tells me it can't connect.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Skype makes use of CDN, e.g. subdomains of akadns.net.  Ensure that you don't block these.

    Further, check at https://dashboard.opendns.com/stats/all/blockeddomains what related domains may still be blocked to whitelist them or to change your category settings.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Just seeing you posted under "Netgear Live Parental Controls".  If you use a Netgear router with LPC enabled, then there are no stats you could visit. :(

    0
    Comment actions Permalink
  • Avatar
    proudmomoffour

    Thanks for your response!

    akadns.net doesn't show up on the list of blocked domains.

    However, all kinds of skype.com sub-domains do; and all are blocked - even though skype.com is white-listed since yesterday. :(

    (Btw., thanks to you pointing me to that list, I realized that another site I needed was blocked and unblocked it.)

    0
    Comment actions Permalink
  • Avatar
    proudmomoffour

    P.S. I'm the same person, with a new screen name.

    0
    Comment actions Permalink
  • Avatar
    proudmomoffour

    Is mtalk.google.com a skype domain too?

    0
    Comment actions Permalink
  • Avatar
    proudmomoffour

    Found full list here: https://forums.opendns.com/comments.php?DiscussionID=17239
    Not sure why searching DNS forums didn't direct me to this link.

    Found it via external web search.

    Thanks again for help!

    0
    Comment actions Permalink
  • Avatar
    tklondon

    Hi

     

    here is my Skype whitelist.

    Remember SKYPE is part of MS hence the Live sites too.

    This seems to work for me. There are still some issues if I look at the Skype web site, but the app works ok.

     

    akadns.net
    akamaiedge.net
    c.msn.com.nsatc.net
    conn.skype.akadns.net
    dispatch.kahuna.glbdns.microsoft.com
    e4925.g.akamaiedge.net
    edgekey.net
    hotmail.co.uk
    hotmail.com
    live.com
    login.live.com
    mail.live.com
    msn.com
    nsatc.net
     
     
    skype.msnmessenger.msn.com.akadns.net
    skype.net
    skypeassets.com
    sn1.skype.msnmessenger.msn.com.akadns.net
    SN1MSG3020207.gateway.messenger.live.com
    ui.skype.akadns.net
    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "However, all kinds of skype.com sub-domains do; and all are blocked - even though skype.com is white-listed since yesterday."

    Subdomains of skype.com shouldn't be blocked with skype.com whitelisted unless you forgot to flush your caches after the settings change: 
    https://support.opendns.com/entries/26336865-Clearing-the-DNS-Cache-on-Computers-Servers-and-Web-Browsers 

    "Is mtalk.google.com a skype domain too?"

    Rather not as Skype is a Microsoft service, not a Google service...

    0
    Comment actions Permalink
  • Avatar
    thaughbaer

    Whitelisting seems completely broken today. My whitelisting setup which has been working for months/years is broken today. Everything in a blocked category redirects to the block page whether it's whitelisted or not.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    If you have a Netgear router with LPC enabled, ensure you have registered your device correctly. https://netgear.opendns.com/

    Else ensure you have registered the correct IP address at OpenDNS.  https://dashboard.opendns.com/settings/

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Just seeing that there was a problem which should be solved now.

    "Earlier today, an update to the policy generation systems at OpenDNS resulted in policies for some users not linking with their Allow and Block lists. OpenDNS has resolved the issue and confirmed that policy generation is now working as expected"
    (From https://support.opendns.com/entries/56939764-Why-is-linkedin-com-blocked )

    0
    Comment actions Permalink
  • Avatar
    southlandmusicinc

    i cannot get posterrevolution.com to connect after adding to whitelist.  any ideas.  this is a poster wholesale website

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Are you getting a message that actually says OpenDNS is blocking this domain? If so what does it say? Or just share a screenshot of the page.

    Assuming OpenDNS is actually blocking this read through the troubleshooting steps in this thread already. Confirm at the dashboard that OpenDNS is correctly configured and that your IP address is properly registered for your network. Which OpenDNS product are you using? Free? FamilyShield? One of the pay ones? Check if you are already blocking one of the categories this domain belongs to.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    @southlandmusicinc
    As you post in the "Netgear Live Parental Controls" section of the forum, is this what you use?  If not, you're wrong here, and mattwilson9090's dashboard hints will not work.  Your dashboard is only at https://netgear.opendns.com/ then.

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Aw thanks, I usually check, but in this case I hadn't realized this was a Netgear Live Parental Controls.

    Still it would be helpful to know what, if any error messages they are receiving. "Not working" or "not connecting" doesn't really convey much information, especially if it might be something totally unrelated to OpenDNS or Live Parental Controls

    0
    Comment actions Permalink
  • Avatar
    mark4build

    I have a similar problem with

    www.bom.gov.au

    It's a govt website for weather in Aus. But Mozilla comes up with server not found error?

    I whitelisted the site, but still doesn't work?

    MArk.

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Are you using "Netgear Live Parental Controls" which is what this thread is about? Have you tried any of the troubleshooting or suggestions that are in this thread? Are you receiving some sort of message that OpenDNS is blocking this domain? If you aren't receiving that message why do you think that OpenDNS is causing this for you?

    0
    Comment actions Permalink
  • Avatar
    mark4build

    I log into the router and then click Parental controls, so yes, must be, says 'live parenting controls'. 

    However, the site doesn't open with any browser using a multiple of devices. It seems to be getting blocked by the Router, but doesn't come up with a Open DNS message, but only can't connect default browser error message.

    I have only just started using Parental Control and never had a problem logging into this site before. Should I try pinging the site IP?

     

     

    0
    Comment actions Permalink
  • Avatar
    mark4build

    Server not found

    Firefox can't find the server at www.bom.gov.au.

        Check the address for typing errors such as ww.example.com instead of www.example.com
        If you are unable to load any pages, check your computer's network connection.
        If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    I don't have any problem with visiting www.bom.gov.au.

    "Should I try pinging the site IP?"

    Sure, if you want to waste time.  Ping is useful for - nothing!  The only tools useful to troubleshoot DNS are dig, host, nslookup and the likes.

    nslookup www.bom.gov.au.
    Server:  dns1.local.prv
    Address:  10.165.161.12

    Non-authoritative answer:
    Name:    www.bom.gov.au
    Address:  210.8.186.60

    And a useful tool to check website availability (port 80) can be telnet:   telnet www.bom.gov.au 80

    No matter, something is wrong with the name resolution at some OpenDNS locations if CacheCheck is being used...

    And also 3rd party tools report errors for the DNS configuration of this site: http://dnscheck.pingdom.com/?domain=www.bom.gov.au
    These errors cannot be compensated by a recursive DNS service like OpenDNS but must be repaired at the authoritative DNS service.

    0
    Comment actions Permalink
  • Avatar
    mark4build

    Thanks, I don't have a prob with BOM on my phone using 4G.

    But can't get it through the router on any device.

    I tried your rec using http://dnscheck.pingdom.com/?domain=www.bom.gov.au

    and got errors.

     

     

    Begin testing zone www.bom.gov.au with version 1.3.0.

    Delegation

    Begin testing delegation for www.bom.gov.au.

    Name servers listed at parent: bom-aapt-pcss.BoM.GOV.AU,bom-aapt-sgss.BoM.GOV.AU

    Failed to find name servers of www.bom.gov.au/IN.

    No name servers found at child.

    Not enough nameserver information was found to test the zone www.bom.gov.au, but an IP address lookup succeeded in spite of that.

    Nameserver

    Done testing delegation for www.bom.gov.au.

    Fatal error in delegation for zone www.bom.gov.au.

    Test completed for zone www.bom.gov.au.

     

     

    Haven't a clue what all this stuff means by the way!

     

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "I don't have a prob with BOM on my phone using 4G.

      But can't get it through the router on any device."

    Websites usually host content for smart devices on different domains than for other devices.  That's why it may work with one method, but not with the other.  Also, DNS may catch sometimes one aspect of their conflicting configuration, sometimes another.

    "Haven't a clue what all this stuff means by the way!"

    dig +noall +answer www.bom.gov.au any

    www.bom.gov.au.         19      IN      A       210.8.186.60
    www.bom.gov.au.         0       IN      NS      bom-aapt-pcss.bom.gov.au.
    www.bom.gov.au.         0       IN      NS      bom-aapt-sgss.bom.gov.au.

    As can be seen, this domain has an A record and two NS records which should never happen.  It must have either A or NS, never both.  This is the delegation problem.  And because this domain has NS records, it must have also an SOA record which doesn't exist.

    And here three probes with an interval of about 15 seconds.  Each time a different result:

    dig +noall +answer www.bom.gov.au any
    www.bom.gov.au.         19      IN      A       210.8.119.235
    www.bom.gov.au.         0       IN      NS      bom-aapt-pcss.bom.gov.au.
    www.bom.gov.au.         0       IN      NS      bom-aapt-sgss.bom.gov.au.

    dig +noall +answer www.bom.gov.au any
    www.bom.gov.au.         14      IN      A       210.8.119.235

    dig +noall +answer www.bom.gov.au any
    www.bom.gov.au.         19      IN      A       210.8.186.60
    www.bom.gov.au.         0       IN      NS      bom-aapt-sgss.bom.gov.au.
    www.bom.gov.au.         0       IN      NS      bom-aapt-pcss.bom.gov.au.


    If you want a temporary workaround, you can edit your local hosts file, or add entries to your local DNS server if you operate one:

       210.8.186.60  www.bom.gov.au

    - or -

       210.8.119.235  www.bom.gov.au

    0
    Comment actions Permalink
  • Avatar
    jthelwell

    I have b3ta.com and www.b3ta.com whitelisted, but when I try to reach the site, I get the message, "This domain is blocked due to content filtering."  What's the problem here?

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "I have b3ta.com and www.b3ta.com whitelisted"

    Were exactly did you make this whitelisting?  Was it on the router as described here?
    http://kb.netgear.com/app/answers/detail/a_id/20483/

    If yes, this keyword feature is not an OpenDNS function, but a Netgear router function, so you're in the wrong forum here.  You'll want to visit a Netgear support forum.

    If no, were did you enter this b3ta.com and www.b3ta.com?  You may want to post a screen shot.

    "I get the message, "This domain is blocked due to content filtering."  What's the problem here?"

    Such a message is not known to be raised by OpenDNS.  Their block message looks differently.  Did this block page say that it was raised by OpenDNS?  You seem to have another kind of content filtering in place such like the Netgear keyword filtering I mentioned above.

    0
    Comment actions Permalink

Please sign in to leave a comment.