Comments on: OpenDNS Works As A Great Free Web Content Filtering Solution

By: doorknob60

doorknob60 — Mon, 14 Dec 2009 23:49:25 +0000

THis post is a year old, don’t care thouygh, wanna defend myself. I had heard in the past and still hear good things about the iBoss. I just think ours was defective. Wireless didn’t work that great sometimes, and our internet speed only got up to like 2-3 megs, we have 8 megs with our Netgear router. I never needed to do any bypassing back then or now, I just wanted faster internet Also I think the OpenDNS interface is better than the iBoss interface.

By: Speed up Windows

Speed up Windows — Fri, 31 Oct 2008 16:08:10 +0000

Is OpenDNS anything like ODS.org?

By: TheOzz

TheOzz — Thu, 30 Oct 2008 12:09:24 +0000

David,
I don’t think you have a true grasp of what people are capable of. I once had a HR manager who used IPs to visit porn sites from his company issued laptop. And kids are way more creative on the Internet than most adults can begin to comprehend.

I spent many years as a sysadmin and you don’t always have the freedom to just lock down desktop functionality due to organization leadership wishes. Sometimes on a strapped budget you have to start logging traffic and knocking down the bad site by IP with ACLs or filters. most companies want to do this (in the US). I had a different set of rules to follow in Quebec. By the way, a Linux based router/firewall built on an old PC chassis with two NICs is the best low cost solution for traffic control on a tight budget, even at home.

By: shoeyhobit

shoeyhobit — Thu, 30 Oct 2008 05:35:58 +0000

I also use the iBoss. No loss of speed. In fact, the iboss seems to be the best parental control out there. I have a mac, linux and windows machine on my network. Its so simple to install and have not seen my kids get passed it. Filters chat, torrents, proxies, with no problem. Paid about $79 for the hardware and $50/year but thats what it would cost to convert hardware to openDNS anyhow. No speed loss here either. Its really one of the best. I went from my netopia which I liked but they discontinued it to the iBoss. Glad I did. No question the best I have seen yet. I can set different filtering rules on the same computer so my 6 year old and my teenager can surf on the same computer yet with different rules. Also, I can cut off internet on Sun. for the sabbath but allow my Tivo to run. Things like that are just worth the money for piece of mind and simplicity. Hey in life, you get what you pay for

By: TRBC

TRBC — Thu, 30 Oct 2008 00:00:08 +0000

I agree with TheOzz, teens do navigate by IP. I have personally seen it. If I am a teen, and need to get to myspace, I most defiantely will figure out the IP and keep it on a list. Its not that they navigate, just keep a list of the common sites they visit and blocked. Most teens visit the same sites all the time, myspace, facebook, porn. They know the IP to get around OpenDNS. Just type it in. Not difficult at all. What about applications, what do we do with those. Also, what about proxies? What about proxy sites that do the work for you allowing you to enter the website you need to get to? No need to worry about IP. They handle it for you. Its ignorant to think that teens and kids will not sit there to figure out how to bypass any filter. They will spend day night and speak to friends to do this. I googled bypass OpenDNS and here you go:

http://saritem.wordpress.com/2008/04/10/how-to-bypass-opendns/

this is the tip of the iceberg. I found that while I can sit there and spend time setting up the OpenDNS and buying the WRT which is about 50-80 dollars. Just easier to by netnanny or something similar and have them do the work. About $39/yr but they have tech support. Also, K9 is free so thats just even simpler.

By: scotty1

scotty1 — Wed, 29 Oct 2008 23:44:09 +0000

gotta say, we are using the iBoss and it is a awesome device. I converted to openDNS for a while until I found out that it was SUPER easy to bypass. OpenDNS can not filter proxies, AOL trident chat, torrents, etc. It is good for a basic filter for a child below 8 years old but when you get older kids or teens, forget about it. Go to http://www.proxify.com and have at it. By pass OpenDNS all day and all night. It cant do anything. You can add proxify.com to the list but good luck since they add direct IP address all the time for example 66.98.179.210. So you are playing cat and mouse. The iBoss was fantastic. Filtering the web is not about just some websites but the more robust. Also, my first concerns were with speed slowdown. I tested the iBoss and got over 20 Megs out of it. Thats not slow in my eyes. It is not a proxy and uses my own bandwidth. Hey doorknob60, you mention your parents bought the iBoss, why would you be so happy the got the OpenDNS? Was it easier to bypass:). I do think openDNS is good but not robust enough. Has anyone tried to see how many leaks are open.

By: The Windows Fix

The Windows Fix — Wed, 29 Oct 2008 22:33:46 +0000

OpenDNS is one of coolest projects I’ve seen in quite a while. Really puts a hit on content filterting software.

By: doorknob60

doorknob60 — Wed, 29 Oct 2008 21:43:20 +0000

Woulda liked to hear about this like 6 months ago…my parents bought this crappy iBoss router and I suffered with reduced internet speed and reliability for a while, then I found OpenDNS about a month ago, and it works great

By: David Ulevitch

David Ulevitch — Wed, 29 Oct 2008 21:00:38 +0000

TheOzz,

Most network administrators lock down desktops and unless you are logged in as an administrator you can’t change the DNS or use a hosts file. And if you have tried, you’ll know navigating by IP is impractical.

We are a content filter, and if and when we need to proxy traffic, we will. Thus far, we haven’t needed to do anything like that which is part of why we’re growing so quickly. People recognize our service meets their needs. As we expand and see areas where we need to improve, we’ll do that. We are heads-down, focused, and with an ear pointed at our customers to listen.

Also, your second example is just not practical, at all.

Appreciate the feedback though.

By: TheOzz

TheOzz — Wed, 29 Oct 2008 20:35:09 +0000

Sounds great, but does nothing for folks who make a list of IPs and either go directly to the site by IP or create a custom host file on their PC that takes presidency over DNS server lookups. Content filters and proxy servers do a much better job. Bluecoat, one of the industry leaders in proxy appliances, produces a free content filter for home called K9 Web Protection.

Another low cost alternative is to create accounts on home and work PCs that limit the ability to clear cache. View cache once in a while to see what folds are accessing. Then create block rules on your router to block access to those “bad” IP addresses.