Parental controls allowing porn through
I use openDNS with my netgear parental controls, but even at the highest setting level, porn is still showing up. Can you please help? Also, is there a way to clear the cache so previously loaded porn sites won't reload? Thank you!
-
Block the domains or URLs by keyword where the objectionable content is hosted on.
http://kb.netgear.de/app/answers/detail/a_id/20483/Clearing the caches: https://support.opendns.com/entries/26336865
-
Btw...
"even at the highest setting level, porn is still showing up."
If you look closer, the category Pornography is already blocked with level "low", so increasing the level doesn't change anything regarding that matter, of course.
If you find domains still not being categorized as you want, feel free to submit them for categorization.
https://community.opendns.com/domaintagging/submit/ -
Hi,
I am also finding this. I googled the word porn,. Only two of the ten results on the front page were blocked. porn dot com, pornhub dot com, to name two, had no block whatsoever. That does seem odd to me ?
One had what appeared to be a partial block as the website displayed as a text only version.
Kind regards,
-
OpenDNS is not going to block *any* content on search results. OpenDNS (or any DNS service) knows nothing about content, websites, webpages, URL's or anything that is not a domain. If you have not blocked the search engine then OpenDNS will not filer any of the results on that page.
If you click on one of the results of your search then OpenDNS could block that if the domain belongs to a category that you are blocking. If it doesn't block a particular domain then you need to follow rotblitz' link to the community page to submit a domain for a particular category.
-
Are these porn sites that you say are still showing up categorized as porn? If they aren't categorized into one of the categories that are being blocked then they will not be blocked. If you want to check categorization read the beginning of this thread where it was discussed.
Also, do you also have a "normal" OpenDNS account and network set up? If so then you either delete that or stop using LPC since the two together are incompatible. You have to decide which one you want to use and stick with that one only.
-
Hi
I have been using OpenDNS only as Parental controls in Netgear Genie app have never worked. I would prefer to use Netgear genie so i have removed my network from the OpenDNS and I am trying to get Netgear genie parental controls to work. It states it is enabled and I have put the settings to moderate. When I search porn it allows me to open any porn site without a problem. no matter what I search it doesn't bring up the blocked page like it did when I only had OpenDNS doing the job. Please help :)
-
Are you running the latest firmware on your router, and the latest Genie software?
Have you also removed the DNS servers that you would have manually enabled to use OpenDNS before?
Are you certain that the domains you are testing with are actually categorized as porn? There's no point in doing or asking anything else if that's not the case.
-
Hi Mattwilson9090
Yes both my router firmware and Genie software are up to date. I'm not sure what you mean by removing the DNS servers?
And yep parental content filtering is not working at all :(
I am looking in my router options and am wondering whether I should be using a static IP address or a dynamic? would this even make a difference? Thanks for your help
-
Presumably when you setup a standard OpenDNS account you configured the OpenDNS DNS addresses on the router. You need to remove those as well.
You already said that filtering is not working for you. My question was if you've *verified* that whatever domains you are testing with are actually categorized as porn or whatever other categories you want to have blocked. Unless and until you actually confirm that there isn't any point in trying to do any more troubleshooting. Don't just assume that because you think a domain should be blocked that it's going to be.I have no idea where you are looking at the option for static and dynamic addresses, but I'll assume that you're looking at WAN settings. Those would be settings related to your ISP. They would have explicitly told you if you have a static address, along with the information you'd need to use it. If you don't know leave it at dynamic.
-
@sapphirestorm
It seems this needs a more systematical course of action. If you want to make use of LPC, then proceed like this:- Ensure that you have no network configured at https://dashboard.opendns.com/settings/ - if you have, delete it now.
Your dashboard is only at https://netgear.opendns.com/ - Ensure that you do not have the OpenDNS resolver addresses 208.67.22*.*** manually configured on your router, as Matt Wilson said.
- Enable LPC with the Genie program, and configure a content filtering level above "none".
See http://kb.netgear.com/app/answers/detail/a_id/25687/ - Test your settings:
Using OpenDNS at all? http://welcome.opendns.com/
Only if you're using OpenDNS, test adult site blocking: http://www.exampleadultsite.com/
If it doesn't work for whatever reason, copy & paste the complete plain text output of the following diagnostic commands, so that I may see what's up:
nslookup -type=txt debug.opendns.com.
nslookup www.exampleadultsite.com.
- Ensure that you have no network configured at https://dashboard.opendns.com/settings/ - if you have, delete it now.
-
Hi Rotblitz
I have removed my network from Opendns and I have removed the openDNS addresses from my router. I had already uninstalled netgear genie so at this point I reinstalled it and configured the filtering level to moderate.
When I press on http://welcome.opendns.com/
I get a tick saying i am using opendns
but when I press on the http://www.exampleadultsite.com/ link it is not blocking.
LPC says it is enabled. but when I search pornhub it does not block it. It does not block anything.
I do not know what you mean by copy & paste the complete plain text output of the following diagnostic commands, so that I may see what's up:
nslookup -type=txt debug.opendns.com.
nslookup www.exampleadultsite.com.
Thank you so much for your help thus far
-
We need the exact output from the commands in order to gain some insigt into what is going on. Paraphrasing the output is worthless for diagnostic purposes. That is why you need to copy and paste the entirety of the output, or less desirable but still usable, attach a screen shot.
And yes, you need to "remove the OpenDNS numbers all together from your router". Both rotblitz and I told you to do that, and your first reply from today seemed to say that you'd done that.
-
www.exampleadultsite.c
erver: UnKnown
ddress: 192.168.0.1
on-authoritative answer
ame: www.exampleadul
ddress: 67.215.92.210 -
I just added pornhub to the block list as an addendum to the Pornography category and its still showing up.
What I see is a single iFrame within the page with the OpenDNS content blocking message. This leads me to believe that the engineers at PornHub.com have figured out a way to do a DNS spoof or something where they are pushing the content through unblocked servers and filling the page with porn.
What is interesting is that Netgenie does block the entire domain but OpenDNS only blocks a single iFrame within the site. I was hoping to have a custom block message which is why I switched the blocking to OpenDNS but its looks like OpenDNS has been compromised.
-
What do you mean that you added pornhub as an addendum to the pornography category? There is no direct way for OpenDNS users to modify any domain's categorization, although they can suggest a categorization for any domain, and vote on existing ones. Note: Just because you suggest a categorization or vote on it does not mean that it will be treated that way for you unless or until that categorization is approved and made active for everyone.
I don't know what actual domain you are looking at, but by adding .com to pornhub, at https://community.opendns.com/domaintagging/ I received listing of Adult Themes, Lingerie/Bikini, Sexuality, Nudity, and Pornography. If you are using a blocking level that would block one of those categories, or custom blocking that would include one of those categories, then any visit to that domain should be blocked.
What do you mean that you were hoping to have a "custom block message"? Since we have no idea what you from to OpenDNS we can't comment on that. What do you mean that it looks like OpenDNS has been compromised?
Follow these direction that rotblitz posted earlier in this thread
- Ensure that you have no network configured at https://dashboard.opendns.com/settings/ - if you have, delete it now.
Your dashboard is only at https://netgear.opendns.com/ - Ensure that you do not have the OpenDNS resolver addresses 208.67.22*.*** manually configured on your router, as Matt Wilson said.
- Enable LPC with the Genie program, and configure a content filtering level above "none".
See http://kb.netgear.com/app/answers/detail/a_id/25687/ - Test your settings:
Using OpenDNS at all? http://welcome.opendns.com/
Only if you're using OpenDNS, test adult site blocking: http://www.exampleadultsite.com/
If it doesn't work for whatever reason, copy & paste the complete plain text output of the following diagnostic commands, so that I may see what's up:
nslookup -type=txt debug.opendns.com.
nslookup www.exampleadultsite.com.
- Ensure that you have no network configured at https://dashboard.opendns.com/settings/ - if you have, delete it now.
-
Not as a category, I added the pornhub.com URL/ Hostname to the block list via the manual add option. Yes, I know its redundant to the category, but the page was loading all the porn content until I added their CDN and 3rd party URLs that were not blocked by OpenDNS
Before I added them only a single iFrame within the page was blocked allowing the rest of the content to load with porn.
-
OpenDNS cannot block URL's, because being a DNS based service it only deals with domains, not URL's, web sites, web pages, content, or anything else that is not only a domain.
That said, it sounds like you've found the solution to your problem. It's not a problem with OpenDNS, it's doing precisely what it's supposed to be doing, blocking the pornhub domain as defined by category and your blacklist. They either are using ways to speed up and improve the serving of their webpages via a mix of CDN's and forwarded domains. OpenDNS can block those as well, but someone will needed to tag those specific domains for categorization. It's entirely possible that the CDN's will never be categorized as porn since most CDN's server a variety of different websites so can't be easily classified as something like that.
Basically that means that since porn hub chooses not to host some or even most of their webpage and content at their domain you will need to individually blacklist all domains that it uses, or tag them for categorization so that a manual blacklist won't be able to block it any longer.
Unfortunately since you didn't respond to anything else in my message I can't respond any further, but I can say that OpenDNS was in no way compromised and is functioning as it was intended to function.
-
Flushed them, used multiple devices, same results until I specifically added a few of the CDN and ad server URLs to my custom block list.
Which is why people in this thread had similar issues. I get it. The categories cannot and do not match every potential porn host, especially a CDN or ad server... I solved my problem. Thanks for your note.
-
Here are the domains being used on their start page: http://www.webpagetest.org/domains.php?test=160522_WS_PV6&run=1&cached=0
There's only media.adstatic.com not being categorized. The phncdn.com subdomains are.
-
It looks like pornhub.phncdn.com could be categorized as pornography, based upon the number of requests made to that domain, as well as the amount of data it pulls in. The rest look like google analytics and ads, though I can't tell whether from this listing whether the ads are "mundane" or adult in nature.
I suspect that adding that one domain to your blacklist would cripple this website and prevent it from loading. At least until the parent company changes their CDN provider.
-
Here are my results from the nslookups.
pornhub.com is still coming up in my browser. I flushed the cache and tried a different browser. Maybe it is cached on the router somehow??
nslookup -type=txt debug.opendns.com
Server: 192.168.1.1
Address: 192.168.1.1#53
Non-authoritative answer:
debug.opendns.com text = "server m3.mia"
debug.opendns.com text = "device 00003BC2B3BCC967"
debug.opendns.com text = "flags 422 0 8010 39400007E00400014C3"
debug.opendns.com text = "originid 90876550"
debug.opendns.com text = "actype 1"
debug.opendns.com text = "bundle 90876550"
debug.opendns.com text = "source 104.137.98.195:46733"
Authoritative answers can be found from:
nslookup www.exampleadultsite.com
Server: 192.168.1.1
Address: 192.168.1.1#53
Non-authoritative answer:
Name: www.exampleadultsite.com
Address: 146.112.61.106
nslookup pornhub.com
Server: 192.168.1.1
Address: 192.168.1.1#53
Non-authoritative answer:
Name: pornhub.com
Address: 146.112.61.106
-
Address: 146.112.61.106
This is an OpenDNS address (hit-adult.opendns.com), so the domains should be blocked by category blocking. If you still can access them, then your browser circumvents your settings with proxy or VPN technology, e.g. the Data Saver mode in Chrome, or add-ons being used.
debug.opendns.com text = "originid 90876550"
debug.opendns.com text = "source 104.137.98.195:46733"Your IP address 104.137.98.195 is registered with OpenDNS network ID 90876550, and you may be using the settings of this dashboard network. Ensure that you do not have a network configured at https://dashboard.opendns.com/settings/
If you have, delete it! Your LPC dashboard is only at https://netgear.opendns.com/
Please sign in to leave a comment.
Comments
28 comments