OpenDNS: DNS is quick and useful

December 2016

A website name is converted to IP addresses by the computer with the help of DNS servers. When surfing the internet, the DNS server of the Internet Service Provider is generally used to resolve the IP addresses. Other DNS servers such as OpenDNS can be used instead of the DNS server of the ISP. The OpenDNS server is fast and provides protection against phishing and other problems often encountered when surfing the internet. OpenDNS is available for Windows XP, Windows Vista and Ubuntu Linux operating systems. OpenDNS is a free software available for download from the internet.

OpenDNS: DNS is quick and useful



DNS


Each time you type a site name (www.commentcamarche.net), your computer will convert it to IP address (194,169,240,130) by querying DNS servers. Typically, you use the DNS servers of your ISP.
But you can use other DNS servers.

Propose to use OpenDNS (free) DNS servers in place of those of your ISP.

Why OpenDNS?


Why OpenDNS?
Because it is faster and has the functions of protection (anti-phishing and others).

Features:
  • Generally faster than your ISP (they have several large servers with a DNS cache important)
  • More reliable (OpenDNS is well established on the Internet, and their servers have 100% availability)
  • Provides access to a site even when the DNS servers of this site are dead (SmartCache option enabled by default)
  • Auto-correction of small errors of typing (google.cmo â+' google.com)
  • Automatic proposals (search engine) if the domain does not exist
  • Safer:
    • Anti-phishing (OpenDNS is linked directly to PhishTank.com)
    • Protection against various attacks (DNS DNS rebinding, Kaminsky flaw lock fields used by viruses to update
    • The service is free
    • No software to install (just the address to configure DNS)
    • You can always stop using OpenDNS


Most users of OpenDNS saw a good improvement in performance, especially in browsers.

Example of blocking a phishing site by OpenDNS: Instead of the fraudulent site, a warning page is displayed:


How to proceed?


Simply use these DNS servers:

208.67.222.222         
208.67.220.220


Detailed instructions for your operating system are available at:
https://www.opendns.com/start

To verify if you are really using OpenDNS, go to this page: http://welcome.opendns.com/

Free


In fact, OpenDNS makes money through ads displayed on search pages when you enter an area that does not exist.

Disadvantages

  • OpenDNS will know which sites you visit, as all your DNS requests will go to their servers. It is a question of trust. Do you trust your ISP? The choice is yours. OpenDNS leaders seem open and transparent, and the company was ruined when it lost the confidence of its users (non-captive market). They are therefore a priori no interest in violating your privacy.
  • Note that OpenDNS areas (www.commentcamarche.net), but not URLs.
  • Software that resolve machine names no longer have the error "domain not found", but a redirection. It is possible that it disrupts the functioning of some software. However, in most cases this poses no problem. This function can be deactivated.
  • Retention of logs:
    • 1. Using OpenDNS without registration: The logs are purged after 2 days.
    • 2. Using OpenDNS with inscription: Logs are kept if you wish, and can be purged on demand. You can also request that OpenDNS not keep any log.

OpenDNS isn't here as

  • OpenDNS is not a web filter: It does not filter the content web pages.
  • OpenDNS is not a URL filter: It does not filter the URL, it blocks only the domains and sub-domains and does not block the rest of the URL.
  • OpenDNS is not an antivirus / antimalware: It would not block the download of viruses and Trojan horses.
  • OpenDNS does not improve the speed of your connection: It only accelerates the DNS queries.
  • OpenDNS does not improve your ping: It accelerates only DNS queries.

Functionality

  • Additional features are available free if you register on their site (registration is free)
  • Activating / deactivating the automatic correction of addresses
  • Filtering adult sites (several categories)
  • Web-filtering proxy
  • Locking / unlocking easy domains or subdomains (blacklist / whitelist)
  • Statistics (graphs, tables, downloadable in CSV)
  • Choice of conservation of logs (not possible to keep any log)
  • Customization of error pages (logos, messages)
  • Creation of shortcuts (â+' http://ccm.net/ ccm)
  • Applicable on an IP or IP
  • Works with static and dynamic IP
  • Registration is not required if you do not want to use these advanced features

Details of functionality


To access the features, it is necessary to register on the site of OpenDNS:
https://www.opendns.com/dashboard/create/

Registration and use of all features are free.

Getting started


After registration, connect to https://www.opendns.com/dashboard/signin/ and enter your username and password.


Adding your IP


So that filtering is active, add your IP address.
  • Click on the "Network": The IP address is automatically pre-filled (you can edit if you wish).
  • Choose a name (eg Home) and click on "Add this network".



Changing your IP address


If OpenDNS filtering does not act as you have set (eg filtering adult), it probably means that your IP address has changed.
  • If your IP address has changed, you will see this little button in the "Networks".


  • Just click above to update your IP address.


Note: To avoid having to update your IP address manually, you can install a compatible client dyndns and update your profile on http://www.dnsomatic.com/, which will automatically update your IP address. See the site from DNS-O-Matic for instructions.
  • Remember to activate the option in OpenDNS (Settings> Set Up a Dynamic IP).

See the statistics


The statistics are accessible by clicking on the "Stats" for your IP in the "Networks":



  • By clicking on "Action", you can easily block a domain.




  • (The presence of aaa.bbb.ccc.ddd.in-addr.arpa is normal and corresponds to reverse-dns query (IP -> name) that your computer has made. Some programs need this function - like firewalls).

Filtering adult sites


For the filtering of adult sites, OpenDNS is probably one of the best filtering services available:
  • 1. It is completely free
  • 2. It does not require installing any software (it is impossible to bypass the filter by turning off the filtering software)
  • 3. It works regardless of the software, even if the user installs a new browser without filtering
  • 4. It enables filtering on all computers in the house (or network) at once
  • 5. The filter remains active even if a new computer is connected to the network
  • 6. The blocked sites are reviewed by humans, which ensures that it will not block anything
  • 7. The list of blocked sites is updated continuously


Note that this does not guarantee that inappropriate images will be filtered with an 100% guarantee, but OpenDNS already provides excellent protection.

To enable / disable filtering adult, go to your settings (Settings), click "Content filtering", click on "Low" and then click the button "Apply".
This will filter out adult sites (in addition to phishing sites).
It will take a few minutes so that your settings are taken into account.

  • That's all. Setting "Low" will block adult sites.
  • You can choose precisely the categories of sites to filter by clicking on "Custom":


  • This allows you to set up a more or less restrictive filter.
  • In order to protect children and adolescents, it is not recommended to block the category "Adult Themes", since it may also block sites for information or sex education.
  • To block pornographic sites, check "Pornography," "Sexuality" and "Tasteless" (which corresponds to the setting "Low" to OpenDNS).


Note that the blocking option allows you to block many other categories of sites (P2P, chat, online gambling, video sharing (YouTube, etc..), Dating sites...)

Blocking domains (blacklist)



Enter the domain (or subdomain) to block and click on "Add domain".



Note that you can block a whole domain or just a sub-domain.
For example:
  • If you enter yahoo.com, it will block the Yahoo site.
  • If you enter mail.yahoo.com, it will block access to yahoo mail, but leave open the rest of the Yahoo site.


Blocked any site will display a message:



The blocking of domains is useful to limit the use of some sites (chat, etc.), Or to block sites that generate too much traffic on your network (advertising, YouTube etc.).

You can unlock a domain in checking the list and clicking "Delete."

The white list

  • The white list allows you to authorise access to certain sites regardless of other settings (blocking areas, blocking adult etc.).
  • This is in Settings> Content Filtering> Manage individual domains> enter a field, select "Never block" in the dropdown and click on "Add domain"



Home or business Use?


All of OpenDNS features are free, even if you are a business.

This means that you can use OpenDNS for your company to filter inappropriate content and block access to certain sites easily (and increase performance).
This saves you from having to implement a proxy filter, with all that it implies (installation, configuration, updating filters, review of logs etc.).
  • It also allows you to manage multiple networks in the same interface and see at a glance the areas that generate the most traffic.
  • It is also possible to establish different rules for the network.
  • The personalization of logos and messages blocking allows you to give your users a link or an email address to use to contact you

GoogleDNS or OpenDNS?


GoogleDNS also offers a free use of its DNS (8.8.8.8 and 8.8.4.4), but allows no configuration (blacklist / whitelist, block, etc.), And you should also forget about the statistics, this feature is not included.

Related :

This document entitled « OpenDNS: DNS is quick and useful » from CCM (ccm.net) is made available under the Creative Commons license. You can copy, modify copies of this page, under the conditions stipulated by the license, as this note appears clearly.