Looking for a software like Open DNS

Hi,

I am looking for a software/application like open DNS implemented on the router directly. I had configured Open DNS on my friends router but for some reason his son is still able to access adult sites from his Laptop.

can someone please suggest a better paid software instead open DNS or is it that I should make to changes to Open DNS to block sites.

Comments

  • +2

    Depending on your router you could implement a rule to force all DNS traffic to your router (where OpenDNS should be defined) regardless of the client DNS settings. E.g, if you can run iptables then something like this would work (tailored to your network names, obviously):

    iptables -t nat -A PREROUTING -i br0 -p udp --dport 53 -j DNAT --to 192.168.1.1
    iptables -t nat -A PREROUTING -i br0 -p tcp --dport 53 -j DNAT --to 192.168.1.1
    

    With this in place anyone using the network will be forced to use OpenDNS (unless they use a VPN, SSH tunnel etc but you're never going to protect against this on a home router).

    • Doesn't work with proxy or VPN though where the DNS query will be performed from outside your network. The only sure way is to block all out-bound access with a permission based proxy in the middle where you can black list / white list sites.

  • but for some reason his son is still able to access adult sites from his Laptop.

    You haven't got a hope of defeating the early teens male libido. In particular bouncing off a VPN and encrypting the traffic. Give it up as a bad idea.

    • +1

      ^ this is good advice

      Especially since its for a friend. You don't want to be the one blamed for some icky stuff happening.

      • +1

        Best to have them talk to the son about it.
        He is already smart by changing his DNS. I think he have heard of VPN or proxy which he can easie bypass this

        • Yep, discuss it, don't block it.

          There is free 'filtering' software provided by the governmetn that will do about a 75% job of blocking it. Password protected and junk.

          But he'll find a way around. Physical access to a machine, with even a user login is enough to bypass things.

          Virtual Machine anyone?

Login or Join to leave a comment