PDA

View Full Version : Opendns for better & safer I-Net connection



vDD+wR
17.10.08, 22:44
Hi SBI-comm!

Anon has just shown me that page about Opendns, so I applied its service and have to say there's really nothing to complain about.

It was easy to set up, and should be more secure than your isp's dns because of web content filters (like blocking known phishing, malware sites) that can be set up when you register at their homepage. (it isn't needed for it to work, but lets you customize things)

Another benefit you get is that your internet connection becomes faster and more reliable as opendns states:

We have a global network of servers with sophisticated software that make your DNS requests automatically go to the OpenDNS server that's physically closest to you. The result for you is an immediately-noticeable faster, more reliable Internet for everyone in your household.

The installation is supported with a step-by-step guide for both ppl with a direct connection to the internet (without routers) and ppl with routers! :top:

So I just recommend it to everyone who hasn't switched to opendns already, since it has no disadvantages and can be done in just two minutes. :wink:

home page: OpenDNS | Providing A Safer And Faster Internet (http://www.opendns.com/)
installation procedure: https://www.opendns.com/homenetwork/start/

greetz

Aurion
20.10.08, 02:41
Good thing to see fresh blood here :biggrin: Just wanted to say,that this technique is very good to keep a far distance from harmful malwares/ads or any suspicious contents while surfing the web...However,not every ISP supports such service knowing the fact that those ISP already setup special DNS addresses for their users by injecting those into a user's internal IP (so you don't have to set a DNS & just set it to Automatic detection)....

You might be wondering about this feedback,but from a long experience with DNS detection services due to my past experience with Online Games that require setting different multiple DNS to see what gets you the best stable connection with those games to avoid constant Disconnections...

Still,I would Recommend users to use such a technique if their ISP doesn't support certain DNS Ad/s as they will a bit difference while they surf around...

Good Job Buddy :top:

anon
20.10.08, 20:30
Aurion, vDD has been around for quite a while :wink:

And yes, it's possible that your ISP straight blocks these servers. For example, if you're forced to browse behind a transparent HTTP proxy, by design you'd be using their DNS servers regardless of the "network connections" settings.

There's a simple method to check this:

Go to Start -> Run -> type cmd and press ENTER.
Type:

telnet 1.1.1.1 80
and press ENTER:


if telnet freezes at "connecting to 1.1.1.1"... you're not behind a transparent proxy.
if you see a black screen for like 20 seconds, and then something about having disconnected from the host, then you are behind a transparent proxy.



For the latter case, this happens because the proxy catches all connections going to port 80 somewhere (you -> proxy -> host), and then checks if the actual IP you're connecting to is valid or not.

I have once been behind one such proxy. It was frustrating, since my idiotic ISP had set it to cache everything to save bandwidth and avoid buying new equipment. I could solve this by using my scripts to find and reclaim IPs that weren't affected.

Aurion
21.10.08, 01:03
Aurion, vDD has been around for quite a while :wink:

W** :shockkk!: I can't believe ya dude...I know about him being for a quite while here,I'm watching all members btw...I meant by fresh blood the new good work he's doing by offering good tuts :tongue:


And yes, it's possible that your ISP straight blocks these servers. For example, if you're forced to browse behind a transparent HTTP proxy, by design you'd be using their DNS servers regardless of the "network connections" settings.

There's a simple method to check this:

Go to Start -> Run -> type cmd and press ENTER.
Type:

telnet 1.1.1.1 80
and press ENTER:


if telnet freezes at "connecting to 1.1.1.1"... you're not behind a transparent proxy.
if you see a black screen for like 20 seconds, and then something about having disconnected from the host, then you are behind a transparent proxy.



For the latter case, this happens because the proxy catches all connections going to port 80 somewhere (you -> proxy -> host), and then checks if the actual IP you're connecting to is valid or not.

I have once been behind one such proxy. It was frustrating, since my idiotic ISP had set it to cache everything to save bandwidth and avoid buying new equipment. I could solve this by using my scripts to find and reclaim IPs that weren't affected.

Maybe I can test that....I will check once I get home (I'm still @ work)....still I don't think it has something to do with being behind a Transparent Proxy or not,since it's set already on "Automatic Detect" for both DNS servers & IP despite being behind a router...

anon
21.10.08, 01:07
W** :shockkk!: I can't believe ya dude...I know about him being for a quite while here,I'm watching all members btw...I meant by fresh blood the new good work he's doing by offering good tuts :tongue:

Oh, I see :biggrin:


Maybe I can test that....I will check once I get home (I'm still @ work)....still I don't think it has something to do with being behind a Transparent Proxy or not,since it's set already on "Automatic Detect" for both DNS servers & IP despite being behind a router...

In my case it didn't matter what you set "network connection" settings to, requests would always go through my provider's proxy. It would be the one to resolve hostnames instead of whatever server(s) I set - proven by OpenDNS' welcome page (http://welcome.opendns.com/). :redface:

If you want to be sure, do the test, it only takes a minute :top:

Aurion
21.10.08, 02:35
In my case it didn't matter what you set "network connection" settings to, requests would always go through my provider's proxy. It would be the one to resolve hostnames instead of whatever server(s) I set - proven by OpenDNS' welcome page (http://welcome.opendns.com/). :redface:

If you want to be sure, do the test, it only takes a minute :top:

Even,if it's proven by them,this doesn't have to be working for everyone...I mean some users already can't set fixed DNS servers as their ISP won't let them,or it sets certain narrow DNS ranges that proven to work for this specific country....Anyway,I will do that test for sure once I get home...:top:

vDD+wR
21.10.08, 17:41
W** I can't believe ya dude...I know about him being for a quite while here,I'm watching all members btw...I meant by fresh blood the new good work he's doing by offering good tuts

no offense, but i had the same in mind as anon *lol*, i assumed really that you thought i'm kind of a freshman :wink:

greetz

anon
21.10.08, 18:56
Even,if it's proven by them,this doesn't have to be working for everyone...

It should, since OpenDNS' servers are the only ones that'll resolve the hostname for the welcome page correctly.


I mean some users already can't set fixed DNS servers as their ISP won't let them,or it sets certain narrow DNS ranges that proven to work for this specific country....

That's true, because sometimes you can even get through basic traffic shaping (http://filesharefreak.com/2008/09/23/elude-bittorrent-throttling-isps-with-free-opendns/) doing so. :top:

Aurion
22.10.08, 02:10
So afterall,still I'm convinced that not all Inet users can benifit from such technique as I mentioned earlier that most of those DNS servers they provide might be kinda Blocked or over-riden by ISPs as they have their own servers to set...Eventually I don't care honestly if I use them or not as long as I'm Cool :biggrin:

anon
22.10.08, 19:21
as I mentioned earlier that most of those DNS servers they provide might be kinda Blocked or over-riden by ISPs

Mmm, now I think about it, I really don't know why those that specifically (not as a side effect of another limitation) block other DNS servers do it - if suscribers use these custom ones, they take load off the ISP's by not using them, which is good!

It's also possible (as shown by the link I've posted before) for custom DNSs to bypass BitTorrent shaping - but if your provider's shaper equipment is as stupid as to easily be bypassed with that measure, it deserves it :biggrin: Wish my provider's was :biggrin:

Aurion
22.10.08, 21:31
LOL Yeah but you know still I don't see the idea behind just blocking certain DNS servers and using custome made ones for every specific country ? Despite that I don't use my own DNS servers I receive upon registering with my ISP...I just leave it set on "Automatic Detection" for both DNS & IP,however,being on a router...So Yeah,it's kinda LAME ! :biggrin:

rebrov
18.05.09, 12:57
thanks Man but i think u could either check them with ExtraDns it have multi function with using them as extra DNS servers rather than ur ISP and testing every each DNS u use inside the software :)

if someone know better software than extraDNS plz i need to know :)

SealLion
18.05.09, 13:59
I have to agree that OpenDNS is a service that is well worth the effort to easily set up on your computer.

One can set up what the user wants to prevent his browser from visiting such as some adware or even sites that are not operational anymore. You know,...the sites that state that this domain is not available anylonger, or dating sites or porn-related sites...etc...etc...its quite good actually.

So I also recdommed the service. :smile:

anon
18.05.09, 17:06
thanks Man but i think u could either check them with ExtraDns

Isn't ExtraDNS just a caching program?

Wolfman86
10.07.11, 21:27
Been using OpenDNS on all my computers for a long time now. I don't go on the internet without it! OpenDNS is so fast and reliable it beats the hell out of my ISPs DNS servers.

SomeGuy
11.07.11, 11:08
The sad thing is I tried GRC's | DNS Nameserver Performance Benchmark (http://www.grc.com/dns/benchmark.htm)
And OpenDNS is much slower than my native ISP DNS. That is why I keep it au natural :D

fuzzy
23.07.11, 14:49
I can vouch for GRC, and yes some dns might be slower, but there is slower and than it's noticeably slow.
I usually use Google's DNS as it is quite fast and easy to remember:
8.8.8.8 and 8.8.4.4
and for ipv6
2001:4860:4860::8888 and 2001:4860:4860::8844

anon
02.01.12, 18:41
I feel a little bad about this, but after almost 5 years of using OpenDNS, I think I might switch to this (http://dnsresolvers.com/) on my upcoming Windows reinstalls. I never liked the redirects to search pages and stuff when you try to load a non-existent domain. A good server should tell you there's no such name in those cases. You can turn it off with an account, but that's for a single IP only (ownership of which can be readily verified, logically) before there were some drawbacks.

rebrov
04.08.12, 05:22
you can try out a squid linux server for filtering URL ..and working as a firewall ...and if u want a speed u can make it a DNS Cache only server ...im using it my self and it working so great ..with high speed and very secure :)

Renk
05.08.12, 18:49
I can vouch for GRC, and yes some dns might be slower, but there is slower and than it's noticeably slow.
I usually use Google's DNS as it is quite fast and easy to remember:
8.8.8.8 and 8.8.4.4
and for ipv6
2001:4860:4860::8888 and 2001:4860:4860::8844

Thanks for the ipv6 addresses I didn't know. But I think that in the choice of a DNS resolver, the speed is not the only criteria to take in consideration. In particular, Google has already too much info about us (Gmail, Google search engine, Chrome...), Moreover, Google is an US enterprise, and US law being what they are, I find no necessity to give in addition to Google the identity of each site we visit.

byondemand
22.11.12, 14:32
i used it for nearly 6 months and it worked fairly........................just the point of problem is that a client can overcome the blocking but inserting its own DNS servers available free over the internet.

5ied22
15.02.18, 19:55
i used it for nearly 6 months and it worked fairly........................just the point of problem is that a client can overcome the blocking but inserting its own DNS servers available free over the internet.

same issue am experiencing bro still fining a fix

anon
17.02.18, 03:43
I was a big fan of OpenDNS when this thread was created, but unless your provider's name servers block sites or routinely fail to the point of unusability, I cannot no longer recommend the usage of any third-party ones.

28759