I blocked graph.facebook.com

Comments

8 comments

  • Avatar
    rotblitz (Edited )

    The alias (CNAME) graph.facebook.com has a real name star.c10r.facebook.com and another CNAME of api.facebook.com.  It could be that one of those is still being blocked, be it by your settings or by your local caches.

    First ensure that you flush your local caches:
    https://support.opendns.com/hc/en-us/articles/227988627

    If this does not help, ensure that the correct IP address is registered at https://dashboard.opendns.com/settings/

    Still problems, copy & paste the complete plain text output of the following diagnostic commands to here:

    nslookup -type=txt debug.opendns.com.
    nslookup whoami.akamai.net.
    nslookup graph.facebook.com.
    nslookup www.paypal.com.

     "This is a public library and patrons like to access Facebook from here."

    Institutions are not licensed to use OpenDNS which is solely for home use.  They had to subscribe to the Umbrella service anyway.

    0
    Comment actions Permalink
  • Avatar
    mwynn

    Temporary work around:

    Replaced OpenDNS DNS numbers with DNS numbers from my internet provider. So now I have no filters at all. I hope to hear from someone soon.

    Thanks

    0
    Comment actions Permalink
  • Avatar
    mwynn

    "Institutions are not licensed to use OpenDNS which is solely for home use.  They had to subscribe to the Umbrella service anyway."

    What does that mean?

    We are a very small rural library in a county that the largest town has less than 5K population. I haven't received any notification that I was doing something wrong.

    0
    Comment actions Permalink
  • Avatar
    mwynn

    The flush didn't work. I typed in each of the commands you gave into the Command Prompt. Here are screen shots of the results.







    0
    Comment actions Permalink
  • Avatar
    rotblitz (Edited )

    "What does that mean?"

    Not sure what is not clear here.  Do you want me to write it in French or German?  Again: Institutions are not licensed to use OpenDNS which is solely for home use.  And this has nothing to do with the population of your area.  Institutions are to subscribe to the Umbrella service.
    https://umbrella.cisco.com/products/packages

    0
    Comment actions Permalink
  • Avatar
    rotblitz (Edited )

    I would have preferred plain text, not screen shots.

    The DNS lookup for graph.facebook.com (and its aliases) returns its real addresses (IPv4 and IPv6), so OpenDNS doesn't block it for you.  If it is still blocked, then you are still served out of your caches, local resolver cache or browser cache.  You had to ensure that you really flushed all two caches, and the browser cache of each browser.

    The DNS lookup for www.paypal.com shows that this is blocked by your OpenDNS dashboard settings, especially by one of the categories you have selected: "Ecommerce/Shopping" and/or "Business Services".  Also, this subdomain has lots of aliases which also may cause that it is being blocked with your settings:
    e3694.a.akamaiedge.net
    geo.paypal.com.akadns.net
    hotspot-www.paypal.com.akadns.net
    wlb.paypal.com.akadns.net
    www.paypal.com.edgekey.net

    You may want to uncheck the category which blocks www.paypal.com, or add paypal.com to your "never block" list.

    0
    Comment actions Permalink
  • Avatar
    mwynn

    In lieu of the time, I am going to put the DNS back to my internet providers numbers. We are closed on the weekend, even though my wifi is still available. There are too many sites being blocked, paypal, fedex, ups, usps, nytimes, just to name a few. I changed the filter so that Social Networks is allowed. So Facebook and Twitter are available.

    Thank you so much for your time. I hope there is a solution. And I will look into why I've been a registered user since 2007 and no one from Open DNS let me know that wasn't supposed to be there. My registered name is Geneva Public Library with a matching email address. Maybe we are just too tiny to be noticed.

    I will try to tackle this on Monday. Thanks again for you help.

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "There are too many sites being blocked, paypal, fedex, ups, usps, nytimes, just to name a few."

    Your settings seem to be too restrictive or simply wrong.  You may want to post a screen shot from that dashboard page so that I can see the categories and individual domains you have blocked.  I guess you have something important blocked like a major CDN service, because the mentioned sites make strict use of CDN services.

    "Maybe we are just too tiny to be noticed."

    This could well be the case, or they silently tolerate you due to your low DNS traffic volume.  Don't worry too much!  If your DNS traffic volume looks like coming from a private household, they may still let you use it without ever coming back to you.

    0
    Comment actions Permalink

Please sign in to leave a comment.