LazyLion
King of de Jungle
no, it is actually for a client. She wants to use OpenDNS to block stuff from her kids. Our other option is to use the Windows Live Family Safety Software.
-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: What is your non-negotiable item, device, or app for international travel?
Mweb DNS Hijack
- Thread starter Gatecrasher
- Start date
no, it is actually for a client. She wants to use OpenDNS to block stuff from her kids. Our other option is to use the Windows Live Family Safety Software.
OpenDNS is a great product, however will not ever work properly in South Africa. Ever is most probably a long time......
As the upstream ISP proxy/cache your international http surfing and hence don't care what DNS IP address you are trying to go to as they look at the http header on the proxy server
example. you goto some www.porn.com site your OpenDNS picks it up and changes it to their intercepted IP address, this part is all perfect and working nicely. However now your request leaves your computer in a http packet heading for this opendns ip address, however the http header still states www.porn.com now Telkom/IS/MWeb proxy/cache servers intercepts your packet and handles it it looks at the header and says great I can get there and off it goes and does a dns lookup for www.porn.com and hence gets the actual address and serves the site back to you. Hencing making the fantastic opendns product useless in SA.
As the upstream ISP proxy/cache your international http surfing and hence don't care what DNS IP address you are trying to go to as they look at the http header on the proxy server
example. you goto some www.porn.com site your OpenDNS picks it up and changes it to their intercepted IP address, this part is all perfect and working nicely. However now your request leaves your computer in a http packet heading for this opendns ip address, however the http header still states www.porn.com now Telkom/IS/MWeb proxy/cache servers intercepts your packet and handles it it looks at the header and says great I can get there and off it goes and does a dns lookup for www.porn.com and hence gets the actual address and serves the site back to you. Hencing making the fantastic opendns product useless in SA.
LazyLion
King of de Jungle
aaah, so that is why it is not blocking anything for me here at work either! Thanks for the info. Me goes to look for something else.
Its still a good product, I've asked some guys I know at SAIX to look at excluding the OpenDNS ip blocks from being redirected to the transparent caching servers, if we can get that done then OpenDNS will work here properly. If IS can do the same then it will be great.