Parental controls allowing porn through

Comments

28 comments

  • Avatar
    rotblitz

    Block the domains or URLs by keyword where the objectionable content is hosted on.
    http://kb.netgear.de/app/answers/detail/a_id/20483/

    Clearing the caches: https://support.opendns.com/entries/26336865

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Btw...

    "even at the highest setting level, porn is still showing up."

    If you look closer, the category Pornography is already blocked with level "low", so increasing the level doesn't change anything regarding that matter, of course.

    If you find domains still not being categorized as you want, feel free to submit them for categorization.
    https://community.opendns.com/domaintagging/submit/

    0
    Comment actions Permalink
  • Avatar
    andrewgregory

    Hi,

     

    I am also finding this. I googled the word porn,. Only two of the ten results on the front page were blocked. porn dot com, pornhub dot com, to name two, had no block whatsoever. That does seem odd to me ?

     

    One had what appeared to be a partial block as the website displayed as a text only version.

     

    Kind regards,

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    OpenDNS is not going to block *any* content on search results. OpenDNS (or any DNS service) knows nothing about content, websites, webpages, URL's or anything that is not a domain. If you have not blocked the search engine then OpenDNS will not filer any of the results on that page.

    If you click on one of the results of your search then OpenDNS could block that if the domain belongs to a category that you are blocking. If it doesn't block a particular domain then you need to follow rotblitz' link to the community page to submit a domain for a particular category.

    0
    Comment actions Permalink
  • Avatar
    talex101

    I've tried and tried with Netgear Genie and Open DNS to get the 'low' setting in place. It says it's 'enabled' but the porn sites will still show up. I don't get it.

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Are these porn sites that you say are still showing up categorized as porn? If they aren't categorized into one of the categories that are being blocked then they will not be blocked. If you want to check categorization read the beginning of this thread where it was discussed.

    Also, do you also have a "normal" OpenDNS account and network set up? If so then you either delete that or stop using LPC since the two together are incompatible. You have to decide which one you want to use and stick with that one only.

    0
    Comment actions Permalink
  • Avatar
    sapphirestorm

    Hi

    I have been using OpenDNS only as Parental controls in Netgear Genie app have never worked. I would prefer to use Netgear genie so i have removed my network from the OpenDNS and I am trying to get Netgear genie parental controls to work. It states it is enabled and I have put the settings to moderate. When I search porn it allows me to open any porn site without a problem. no matter what I search it doesn't bring up the blocked page like it did when I only had OpenDNS doing the job. Please help :)

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Are you running the latest firmware on your router, and the latest Genie software?

    Have you also removed the DNS servers that you would have manually enabled to use OpenDNS before?

     

    Are you certain that the domains you are testing with are actually categorized as porn? There's no point in doing or asking anything else if that's not the case.

    0
    Comment actions Permalink
  • Avatar
    sapphirestorm

    Hi Mattwilson9090

    Yes both my router firmware and Genie software are up to date. I'm not sure what you mean by removing the DNS servers?

    And yep parental content filtering is not working at all :(

    I am looking in my router options and am wondering whether I should be using a static IP address or a dynamic? would this even make a difference? Thanks for your help

     

     

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    Presumably when you setup a standard OpenDNS account you configured the OpenDNS DNS addresses on the router. You need to remove those as well.

    You already said that filtering is not working for you. My question was if you've *verified* that whatever domains you are testing with are actually categorized as porn or whatever other categories you want to have blocked. Unless and until you actually confirm that there isn't any point in trying to do any more troubleshooting. Don't just assume that because you think a domain should be blocked that it's going to be.I have no idea where you are looking at the option for static and dynamic addresses, but I'll assume that you're looking at WAN settings. Those would be settings related to your ISP. They would have explicitly told you if you have a static address, along with the information you'd need to use it. If you don't know leave it at dynamic.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    @sapphirestorm
    It seems this needs a more systematical course of action.  If you want to make use of LPC, then proceed like this:

    If it doesn't work for whatever reason, copy & paste the complete plain text output of the following diagnostic commands, so that I may see what's up:

       nslookup -type=txt debug.opendns.com.

       nslookup www.exampleadultsite.com.

    0
    Comment actions Permalink
  • Avatar
    sapphirestorm

    Hi Rotblitz

    I have removed my network from Opendns and I have removed the openDNS addresses from my router. I had already uninstalled netgear genie so at this point I reinstalled it and configured the filtering level to moderate. 

    When I press on http://welcome.opendns.com/

    I get a tick saying i am using opendns

    but when I press on the http://www.exampleadultsite.com/ link it is not blocking.

    LPC says it is enabled. but when I search pornhub it does not block it. It does not block anything.

    I do not know what you mean by copy & paste the complete plain text output of the following diagnostic commands, so that I may see what's up:

       nslookup -type=txt debug.opendns.com.

       nslookup www.exampleadultsite.com.

     

    Thank you so much for your help thus far

    0
    Comment actions Permalink
  • Avatar
    sapphirestorm

    Sshould I have the  Get Automatically from ISP for DNS address ticked. Should I remove the OpenDNS numbers all together from my router

    0
    Comment actions Permalink
  • Avatar
    sapphirestorm

    When I put debug.opendns.com into command prompt it say's server unkown and it gives an IP address then reads non-authoritative answer. name: debug.opendns.com and then it has a differnet IP address.

     

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    We need the exact output from the commands in order to gain some insigt into what is going on. Paraphrasing the output is worthless for diagnostic purposes. That is why you need to copy and paste the entirety of the output, or less desirable but still usable, attach a screen shot.

    And yes, you need to "remove the OpenDNS numbers all together from your router". Both rotblitz and I told you to do that, and your first reply from today seemed to say that you'd done that.

    0
    Comment actions Permalink
  • Avatar
    sapphirestorm

     txt debug.opendns.com
    erver:  debug.opendns.com
    ddress:  122.150.5.20

    NS request timed out.
       timeout was 2 seconds.
    NS request timed out.
       timeout was 2 seconds.
    ** Request to debug.opendns.com timed-out

    0
    Comment actions Permalink
  • Avatar
    sapphirestorm

     www.exampleadultsite.c
    erver:  UnKnown
    ddress:  192.168.0.1

    on-authoritative answer
    ame:    www.exampleadul
    ddress:  67.215.92.210

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    You must enter the commands exactly as I noted after having opened a command prompt window.  And you must copy & paste the whole content, also the first column.

    0
    Comment actions Permalink
  • Avatar
    admtutt

    I just added pornhub to the block list as an addendum to the Pornography category and its still showing up.

    What I see is a single iFrame within the page with the OpenDNS content blocking message. This leads me to believe that the engineers at PornHub.com have figured out a way to do a DNS spoof or something where they are pushing the content through unblocked servers and filling the page with porn.

    What is interesting is that Netgenie does block the entire domain but OpenDNS only blocks a single iFrame within the site. I was hoping to have a custom block message which is why I switched the blocking to OpenDNS but its looks like OpenDNS has been compromised.

     

     

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    What do you mean that you added pornhub as an addendum to the pornography category? There is no direct way for OpenDNS users to modify any domain's categorization, although they can suggest a categorization for any domain, and vote on existing ones. Note: Just because you suggest a categorization or vote on it does not mean that it will be treated that way for you unless or until that categorization is approved and made active for everyone.

    I don't know what actual domain you are looking at, but by adding .com to pornhub, at https://community.opendns.com/domaintagging/ I received listing of Adult Themes, Lingerie/Bikini, Sexuality, Nudity, and Pornography. If you are using a blocking level that would block one of those categories, or custom blocking that would include one of those categories, then any visit to that domain should be blocked.

    What do you mean that you were hoping to have a "custom block message"? Since we have no idea what you from to OpenDNS we can't comment on that. What do you mean that it looks like OpenDNS has been compromised?

    Follow these direction that rotblitz posted earlier in this thread

    If it doesn't work for whatever reason, copy & paste the complete plain text output of the following diagnostic commands, so that I may see what's up:

       nslookup -type=txt debug.opendns.com.

       nslookup www.exampleadultsite.com.

    0
    Comment actions Permalink
  • Avatar
    admtutt

    Not as a category, I added the pornhub.com URL/ Hostname to the block list via the manual add option. Yes, I know its redundant to the category, but the page was loading all the porn content until I added their CDN and 3rd party URLs that were not blocked by OpenDNS

    Before I added them only a single iFrame within the page was blocked allowing the rest of the content to load with porn. 

     

     

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    OpenDNS cannot block URL's, because being a DNS based service it only deals with domains, not URL's, web sites, web pages, content, or anything else that is not only a domain.

    That said, it sounds like you've found the solution to your problem. It's not a problem with OpenDNS, it's doing precisely what it's supposed to be doing, blocking the pornhub domain as defined by category and your blacklist. They either are using ways to speed up and improve the serving of their webpages via a mix of CDN's and forwarded domains. OpenDNS can block those as well, but someone will needed to tag those specific domains for categorization. It's entirely possible that the CDN's will never be categorized as porn since most CDN's server a variety of different websites so can't be easily classified as something like that.

    Basically that means that since porn hub chooses not to host some or even most of their webpage and content at their domain you will need to individually blacklist all domains that it uses, or tag them for categorization so that a manual blacklist won't be able to block it any longer.

    Unfortunately since you didn't respond to anything else in my message I can't respond any further, but I can say that OpenDNS was in no way compromised and is functioning as it was intended to function.

    0
    Comment actions Permalink
  • Avatar
    cobalt-phoenix

    @admtutt
    You do not need to add anything if you have the category Pornography blocked.  But you must flush your caches after any settings changes for them to take effect immediately.  You certainly forgot to do this...

    0
    Comment actions Permalink
  • Avatar
    admtutt

    Flushed them, used multiple devices, same results until I specifically added a few of the CDN and ad server URLs to my custom block list.

    Which is why people in this thread had similar issues. I get it. The categories cannot and do not match every potential porn host, especially a CDN or ad server... I solved my problem. Thanks for your note.

     

     

    0
    Comment actions Permalink
  • Avatar
    cobalt-phoenix

    Here are the domains being used on their start page: http://www.webpagetest.org/domains.php?test=160522_WS_PV6&run=1&cached=0

    There's only media.adstatic.com not being categorized.  The phncdn.com subdomains are.

    0
    Comment actions Permalink
  • Avatar
    mattwilson9090

    It looks like pornhub.phncdn.com could be categorized as pornography, based upon the number of requests made to that domain, as well as the amount of data it pulls in. The rest look like google analytics and ads, though I can't tell whether from this listing whether the ads are "mundane" or adult in nature.

    I suspect that adding that one domain to your blacklist would cripple this website and prevent it from loading. At least until the parent company changes their CDN provider.

    0
    Comment actions Permalink
  • Avatar
    aordway

    Here are my results from the nslookups. 

    pornhub.com is still coming up in my browser. I flushed the cache and tried a different browser. Maybe it is cached on the router somehow??

    nslookup -type=txt debug.opendns.com

    Server: 192.168.1.1

    Address: 192.168.1.1#53

     

    Non-authoritative answer:

    debug.opendns.com text = "server m3.mia"

    debug.opendns.com text = "device 00003BC2B3BCC967"

    debug.opendns.com text = "flags 422 0 8010 39400007E00400014C3"

    debug.opendns.com text = "originid 90876550"

    debug.opendns.com text = "actype 1"

    debug.opendns.com text = "bundle 90876550"

    debug.opendns.com text = "source 104.137.98.195:46733"

     

    Authoritative answers can be found from:

     

    nslookup www.exampleadultsite.com

    Server: 192.168.1.1

    Address: 192.168.1.1#53

     

    Non-authoritative answer:

    Name: www.exampleadultsite.com

    Address: 146.112.61.106

     

    nslookup pornhub.com

    Server: 192.168.1.1

    Address: 192.168.1.1#53

     

    Non-authoritative answer:

    Name: pornhub.com

    Address: 146.112.61.106

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    Address: 146.112.61.106

    This is an OpenDNS address (hit-adult.opendns.com), so the domains should be blocked by category blocking.  If you still can access them, then your browser circumvents your settings with proxy or VPN technology, e.g. the Data Saver mode in Chrome, or add-ons being used.

    debug.opendns.com text = "originid 90876550"
    debug.opendns.com text = "source 104.137.98.195:46733"

    Your IP address 104.137.98.195 is registered with OpenDNS network ID 90876550, and you may be using the settings of this dashboard network.  Ensure that you do not have a network configured at https://dashboard.opendns.com/settings/
    If you have, delete it!  Your LPC dashboard is only at https://netgear.opendns.com/

    0
    Comment actions Permalink

Please sign in to leave a comment.