Comments

21 comments

  • Avatar
    mattwilson9090

    How do you know that this is blocked by OpenDNS?

    Assuming that OpenDNS is actually blocking this domain it's blocked because your configured is blocking that domain. The most likely reasons are that news.google.com or google.com belongs to a category you have chosen to block, or because you have specifically blacklisted news.google.com or google.com

  • Avatar
    davidderryberry

    I have a netgear (Cisco) router which provides "Parental Controls" through its "Genie app. I used that to create an OpenDSN account and activated the account. I selected "moderate" filtering. Using my Amazon Fire tablet first and then my Samsung phone I tried to access https://news.google.com and it was completely blocked on both. I also tried to access BING news and while it accessed the aggregating page, it would not allow me to access most results on that page. I changed the filtering to "none" and rebooted the router and the devices. Same result as before. I then turned off parental controls via the genie app and was able to access https://news.google.com and the aggregated results shown there as well as the aggregated results shown at Bing News.

    So I do not know if it is the OpenDNS doing the blocking, but it seems like it to me.

  • Avatar
    rotblitz

    If you post the outputs of the following commands when LPC is enabled, I can see if and why it is blocked.

       nslookup -type=txt debug.opendns.com.

       nslookup news.google.com.

  • Avatar
    antron

    I am experiencing the exact same problem as David. Netgear c3700 with parental controls. If on at all it will block news sites even if filtering is set to none. I have confirmed that no individual devices have been set to override the none setting. Porn is sometimes included in the block as well. The porn block appears to be random each time you turn it off and on. Looks like corruption of the block list.

  • Avatar
    rotblitz

    Exact same problem?  Fine, then the exact same answers apply.  Your turn!

  • Avatar
    dbrady21

    @rotblitz: how and where do you input those commands? I have the same issues, even espn.com is blocked. I have put it on the white list and changed to no filter on router and through OpenDNS and both pages are still blocked.

  • Avatar
    mattwilson9090 (Edited )

    The commands are run from your operating systems command prompt. In Windows some people mistakenly call it a "DOS window"

  • Avatar
    davidderryberry

    So what if we are experiencing the problem on a mobile device, how do we input for that?

  • Avatar
    davidderryberry

    Also, I know nothing about computers except to be suspicious of information requests from persons unknown to me. Could someone use the results of the inquiry to hack my devices? Does OpenDNS have support through other than community?

  • Avatar
    rotblitz (Edited )

    "Also, I know nothing about computers"

    What did you think if you met someone driving a car on the road saying: "I know nothing about cars...".  Do you demand your children to play beside or on that road?

    "So what if we are experiencing the problem on a mobile device, how do we input for that?"

    You install an app like the following and enter the information (domain name and resource record type) there.
    http://dyn.com/apps/dig/
    Then you take a screen shot and post it here.  What else?

    "Could someone use the results of the inquiry to hack my devices?"

    Sure, everybody can hack your devices!  But this information does not really add risks.  If you're concerned, don't provide the information, and you do not get help here, so easy!

    "Does OpenDNS have support through other than community?"

    Yes, you can open a support ticket.  Link "submit a request" on top of this page.

  • Avatar
    mattwilson9090

    @davidderryberry No, this is not Hollywood "hacking" where all that is needed to destroy a person is knowing their IP address and 30 seconds later some wunderkind can do whatever they like. This is real life and revealing the information asked for to help resolve your issue will not open you up to any additional vulnerabilities.

    Also, we are not random strangers approaching you asking about your computers or network. You came onto this public forum asking for assistance with a technical matter. We responded in kind, in the public forum, asking for the technical information needed to try to help with your issue.

    If you don't want help from this public, users forum, you are always welcome to open a support ticket with OpenDNS support.

  • Avatar
    antron

    I'll dig an old laptop out and punch in the commands. I want to point out that just because it says that the router is purposely blocking these sites doesn't mean that we have inadvertently configured it to do so. I know I haven't. The Netgear router is probably improperly applying the settings we put in through the opendns webpage. By the way, using custom settings with nothing selected appears to effectively achieve a "none" level. But then you don't get to do a custom for any devices.

  • Avatar
    davidderryberry

    from laptop

  • Avatar
    antron

    Is Netgear LPC even DNS? Or just a block list provided by OpenDNS that prevents the request from ever leaving the house?

  • Avatar
    rotblitz

    @davidderryberry 
    You currently do not use OpenDNS (or Netgear LPC) at all, and a DNS lookup for news.google.com returns its real name and its real IPv4 and IPv6 addresses and shouldn't be blocked.  If it is blocked nevertheless, then it's not related to OpenDNS and LPC, but must be something else, not visible from your command outputs.

     

    @antron 
    Thanks for hi-jacking this thread.
    Netgear Live Parental Controls (powered by OpenDNS) work with DNS methods against the OpenDNS servers.  It uses the same blocking categories as any other OpenDNS service.  But it uses an enhanced DNS protocol where the device ID (MAC address?) is part of the message, so that - unlike OpenDNS Home - an IP address is not registered at OpenDNS, and an Updater is not needed.  LPC uses another dashboard, different from OpenDNS Home, which allows also bypass accounts and also special settings for particular end user devices for newer router models.  However, LPC does not come with stats and logs.

  • Avatar
    antron

    Thanks for the relevant answer to my relevant question. I'll get back with the output.

  • Avatar
    antron (Edited )

    So like david, my command output clearly shows that requests are not going through opendns,  Mine shows it's my isp, comcast.  

    However, I get this at certain pages: (the filter is NOT set to block it either)

     


    This is only with the parental controls turned on.  When on, the router DNS setting goes from "get from ISP", to 208.67.222.222 (an openDNS IP)

     

  • Avatar
    antron (Edited )

    OK, I've found that if I enter the filter settings, then hard reboot the router, it works as expected. (filter set to block porn).    But the nslookup command seems to show comcast is still in control.  Whatever

     

    146.112.61.106 is an openDNS IP

    everything else works

  • Avatar
    rotblitz

    "So like david, my command output clearly shows that requests are not going through opendns,  Mine shows it's my isp, comcast."

    No, not like David!  David's DNS queries go through his router at 192.168.1.1, and yours go directly to Comcast.

    Also, you forgot the trailing dot, so the DNS suffix has been added, and you didn't query www.accuwheather.com, but www.accuwheather.com.hsd1.ca.comcast.net.

    I suggest you check the network settings of your computer, if you have Comcast's resolver addresses configured there.  Change this settings to obtain the DNS server addresses automatically, or change it to the router's IP address.

  • Avatar
    antron (Edited )

    same result with dot on my working configuration. I never put ISP software on my computers. It's freshly rebuilt too. network settings all on auto.

  • Avatar
    rotblitz

    What exact Netgear router model do you have?

    Also, please post the complete outputs of:

    nslookup whoami.akamai.net.

    nslookup -type=txt debug.opendns.com. 208.67.220.220

    ipconfig /all

     

Please sign in to leave a comment.