I just became an instant fan, got an interview next week with printer company. Your troubleshooting methodology was awesome, you help reinforced why I choose this profession in the first place.
I was just about to say that. Pretty much 99% of all youtube audiences uses headphones...I just made that statistic up. Aren't all statistics made up anyway ?
Worked for a company that had you sign an agreement not to use their computers for personal use. On the third documented time per year, by-by! And they had an airtight system with a forensic it person if needed. I watched 2 employees being fired. No one ever did it again. And you know what ? I loved the even playing ball field!
the hardest thing for him is to talk about what employers have to do and how to treat your employee with blocked sites but at the same time might be afraid of what he has been talking about get heard by his employees. gotta stand in the both sides. hahaha. anyways, i love his education channel here. thanks to him. he taught me many thing here.
Hi Eli, First, I want to say that I great fun of your videos, it helps me alot! OpenDNS is very nice, but I think there are better solutions. OpenDNS server can be helpful just in cases the employe uses a domain name. Any worker can enter the IP address of Facebook instead "facebook.com" - this way my computer would go directly to the server of Facebook instead the OpenDNS server.Regarding your video: Am I right?
+Shaked Tayouri The tool is not designed to be a proxy replacment. Which is what your asking about bypassing for a single well known site. (Which BTW you can block facebook via Firewall and IP). Many malware campaigns and various worms and botnets use Domains to communicate to a range of servers to keep law enforcement from shutting them down. OpenDNS can be used for ALL external DNS queries, not just proxy traffic which is usually limited to user segment traffic. So in terms of a botnet, the bad actors aren't going to list the 20 ip address of servers it talks back to, it would be easy to block/shut down (ThreatSTOP is the tool for that stuff) so they will build in a Domain name, which is harder to take down and can be scripted to change IP address rapidly.
Eli I love all your videos they are very informative. However this video with so much reference to XXX material was a bit distracting. It would of been best to reference "Scary monsters com Bad pictures com" I would of been less distracted lol thank you
@BenBarrettBBB IP Addresses can be tracked down easily by the authorities. By using domain names the hackers can have one pointer, but then have the ability to change what it points to.
Great tutorial. One problem: if the router is configured with the openDNS's dns but the user still can change or add the dns on his computers's configuration. There's any way to solve that without using active directory?
I'm unsure what's easier: editing the host file or changing the DNS server. I have no clue where my hostfile is, however network settings are very easy to find and change... I guess the "protection" only works if the users have limited rights on their machine (ie no rights on their network prefs).
Hey Eli, love your vids. Just started using OpenDNS via my linksys router but unfortunately as soon as it was up and running I could no longer get on my VPN for work. I even added the VPN host name under exceptions for VPN user on the OpenDNS dashboard advanced settings. Am I missing something obvious? Tried creating a support ticket with OpenDNS and they offered some ideas but ultimately couldn't help me get it working. Any ideas? Thanks!
If we route our traffic to the openDNS server with intention on visiting RU-vid transmission would be complete, at that point you’re at the application layer using RU-vid interface. The content RU-vid stores is kept in storage. How would each video contain their own IP address? If each channel contained its own IP address, then it would be blockable. But if the only thing the DNS server routes traffic to is RU-vid, openDNS cannot simply block harsh content from being viewed by the user. This is why RU-vid has content review teams which makes it so sickos cant post crude material on RU-vid!
Bonjour!Is it possible to block sites using just "Keywords" without using an extension: com, org, net, etc? It would be impossible to list all 'porn' sites or sites you want blocked. During the 'demo' it would have been helpful if you shown all the steps you did to get your system set-up. Some of us need all the pieces to the puzzle to make it complete or understandable.
Hi Eli, Two questions first my initial thought it work on application as well as network layer correct me if I am wrong ? second proxy does the same thing why would we opt for opendns
so when you ask an external service for an IP from a domain name because your computer doesnt know it, the service can choose not to tell you the IP and then you won't be able to access the site. But, if you updated your local hosts file to include the IP for that domain before the computer asked the external service, would you be able to access the site anyway?
Isn't it soooo simple just to change ur ip address with a simple proxy or tor?(forget about a paid vpn). Also what u didn't talk about performance of the free version. Also is it possible to make custom block page, "like blocked by the fbi"!. Do firewalls block using a similar method?. Are there free firewalls or dns services that does similar function with more customization?. I am also looking for a firewall that has the capability and functionality of pfsense or sophos xg firewall or clear os but that can be installed on ubuntu 16.04 and windows 10 as package. Glasswire is not as powerful as clear os. On the linux side, zentyal server has lost a lot of gateway and firewall features, its not even installable on ubuntu 16.04. Now I could use a virtualbox, but its not efficient. Any idea on how to overcome this problem?. I liked sophos xg firewall & utm 9, its free & does an excellent job, but I want to have a linux home server with this firewall & a bunch of avs on it along with the ability to have nas & multimedia services. Basically an all in 1: Firewall/gateway, nas & multimedia. How do I go about this?
If i'm at a college in a network with a lot of computers and I want to use OpenDNS just for myself, will the other computers be affected by my settings?
thats what I'm wondering- (assuming facebook is blocked) if the user can edit their host file with the correct facebook IP address, could they bypass another DNS block on the site?
after using the open dns to game and switching back to normal dns google keeps giving me a word to type in like what they do to make sure you are not a robot for every search...how can i fix this?
In most network configurations, like enterprise situations, schools, etc., you would set up something like NAT redirection for port 53 so that no one on the specified subnets or interfaces can use any other DNS resolvers (i.e. 1.1.1.1 or 8.8.4.4), and all queries for DNS will be redirected to the specified DNS server for the network. The downside is that if VPN traffic is permitted, they can use things such as cloudflare WARP, which is a pseudo non encrypted VPN/DNS resolver in one, then they can tunnel out and use their DNS. Most users however will not go to this extent either because they don't know how to or the computers they work on will not have elevated permissions to change VPNs or DNS.
to configure custom DNS on my belkin router, do i have to change the Wan>:Connection type from dynamic to static? The option to change the DNS is grayed out, even though the "get automatically from ISP" box is not checked.
Hello, just a quick question. Can I make someone's search go to a different website. Say someone on my server is trying to go to Facebook could I make them go to Google instead. Im trying to prank my employees just for moral boost. Thanks!
If you are running a Windows AD domain on your internal network, your clients must have a windows DNS server as their DNS setting or they can't login properly. How can you take advantage of something like OpenDNS if you can't point your clients to the OpenDNS servers? or can you??
When i'm at work i'll just do one of the following. 1. Use Tor browser bundle to bypass DNS. 2. Use a standard proxy. 3. Type the IP address of face book into my web browser, to by pass DNS re directions. 4. Find out here there blocking me.
When you are first resolving your open DNS server, how can you ensure that you are directed to the correct OpenDNS server from the get go? Maybe I am missing some information here.
What is ironic is that you could probably use OpenDNS to tunnel through your employer's restrictions and achieve the exact opposite. :-) AnalButtRape FTW!!
Chris Craig in my opinion, this would require a separate guest subnet or the system administrator would change the users configuration (DNS config) to another address (9.9.9.9) instead of googles DNS 8.8.8.8. So if guest user is pointing towards openDNS and then admin configured their machine to point towards another DNS then each user account would be using separate DNS servers. I hope this helps. Don’t forget, your router has parental controls ;)
you cab di this on any site you just need to have access to your home or work router to be able to change the DNS. Windows Homegroup is a network if all your user at home have the same workgroup you can share files and folders just like on a work network you just don't have the same level of customization as a work network.
ImposterChovie I prefer this over Linus. Not that I do not think Linus is bad but.. this has: a better sounding voice. Also, talks some funny shit backed with a ton of knowledge and experience. Also more in depth.
video should have started at 25:32 - no need to watch the whole video for some folks. Very good video otherwise except for the constant mentioning of certain websites.
Naheem Sheikh google opendns website it will tell you where their servers are also norton has a free dns server with various levels of security. also there is free malwarebytes anti-exploit free.. and also sandboxie , also free
