(OpenDNS Updater) not filtering until minutes after router reset
Hi, I'm a new user of OpenDNS, someone trying to filter 'themselves' on a single computer, which I've managed to set up and it all was working fine until I reset my modem/router and my ip changed. so I looked into it and found that I needed to download the OpenDNS Updater software to automatically pass my filters on to my new ip everytime it resets. I set that up and it works...
BUT when I reset the router to test it, it takes minutes until it starts filtering sites again after the internet comes online.. meaning I can visit all filtered sites for around 3 minutes or so until it comes up with the OpenDNS block page, which is not okay for me as it means I can reset the router/modem whenever and access something I want blocked.
Id be very surprised if this is just how it is because that would be a pretty big flaw, so I'm hoping someone can shed some light on this and help me out.
my OpenDNS Updater settings are:
[no] Send Dns-O-Matic updates
[yes] Run hidden
[no] Don't notify me about errors
[no] Disable sending IP updates
I don't know if that helps. I'm not a massive tech guy so any help greatly appreciated if you could explain fairly simply how I can solve this issue and have my filters up absolutely all the time
Cheers!
-
The OpenDNS Updater does not filter. Its only purpose is to keep your IP address information updated at https://dashboard.opendns.com/settings/ so that OpenDNS can associate your DNS queries with your dashboard settings.
And yes, it takes up to a minute for the Updater to detect an IP address change and another 3 minutes to propagate IP address changes across the OpenDNS system. This is normal from a technical perspective. I use the DDNS function of my router as update client which is more real-time than a software client on a computer..
"that would be a pretty big flaw"
Definitely not. What person would sit beside the router to reset it again and again? That is not normal behavior. And is it true that everybody can easily access your router to reset it?
-
Thanks for the reply.
At the start of my post I stated this was me trying to filter ''themselves''. The router in my house is right by my computer and cannot be moved because apparently thats the only place they could install it. I read enough posts here to have recognised your name, so I'd have thought you'd be aware that a lot of people these days are in fact trying to filter their own internet access for various reasons.
I'm aware of the fact that for the large majority of users, they are trying to filter their children or family (others) so this 3 minutes of no filter might not be as much of an issue because the OpenDNS user can reset the router at night or when nobody is home.
For self-filterers this is a pretty big flaw though and one that could be a deal breaker. I know its not normal behavior to reset the router like that.. but I don't feel thats relevant when the software is supposed to filter internet with no way of gettting past the blocks.
However I found half a solution from a post I read eariler from someone in a similar scenario.
You replied ''You could use the OpenDNS FamilyShield addresses 208.67.222.123 and 208.67.220.123 instead of the normal OpenDNS resolver addresses. These generally block adult and the Proxy/Anonymizer domains.'' So I tried this and it works although it doesn't block all of the sites I need blocked, its a good start.
So my question is Is there an opendns resolver address that by default blocks ALL of the internet? Then 3 minutes later my filters would come back online and unblock what I need. If there isn't one, I'd like to make a suggestion that that could be a possible way of fixing this flaw in the system. For self-filterers (a growing phenomenon) its a flaw that could actually be the difference of them continuing to use OpenDNS or trying somewhere else. Once a site is accessed in these 3 minutes it remains accessible on cache until they choose to restart the browser. Thats a big problem for people with self control issues, no one should judge, OpenDNS is for filtering the internet, so it should do that with no flaws.
Cheers.
-
Well, I'm also kind of a "self-filterer". I do not have minors in the household anymore. Just my wife who I do not want to restrict, just to protect. That may be the reasons why I do not care about your concerns.
And yes, the FamilyShield addresses may be some kind of solution for you.
"Is there an opendns resolver address that by default blocks ALL of the internet?"
No, this does not make sense. You could switch off your router or disconnect your end user device instead. Then you are definitely blocked from accessing anything.
"a possible way of fixing this flaw in the system"
As I said, this is not a flaw, but this is how this technology can only work under the given conditions. OpenDNS apparently didn't target self-filterers like you with this kind of service. There are too many ways to circumvent it, especially because the self-filterer still holds the full controls over everything and can undo what (s)he did at any time.
What you're looking for cannot be covered by a service in the cloud like OpenDNS and with internet users with dynamic IP addresses. It would have to be covered by a clever firmware of your router or a feature of your computer. Or maybe, to "fix" this specific problem with the changing dynamic IP address, obtain a static IP address from your ISP. This is usually been offered to businesses but is also available for private purposes. It would resolve "this flaw". So easy!
-
Or maybe, to"fix" this specific problem with the changing dynamic IP address, obtain a static IP address from your ISP. This is usually been offered to businesses but is also available for private purposes. It would resolve "this flaw". So easy!
This is interesting.. ill have to look into this, thanks.
also.. for anyone wondering..
"There are too many ways to circumvent it, especially because the self-filterer still holds the full controls over everything and can undo what (s)he did at any time."
I have various other things set up which would stop me being able to do that, the first being that I planned to give my login information to a friend and have them change it etc. Another is having a password-protected admin account on my pc that is the only one able to change internet settings so I couldn't remove the OpenDNS resolver addresses back to default.. things like that, its not been easy to fill all the gaps however.
Please sign in to leave a comment.
Comments
4 comments