Re: Internet Explorer cannot open up Internet Site Http://www.google.com

Re: Lan applications
Wow...sounds like only OpenDNS was being used to resolve all your client's
DNS queries if they couldn't reach LAN based applications (assuming those
apps were using DNS).

If you ran IPCONFIG /ALL on a workstation that couldn't reach a LAN based
app, did it show OpenDNS nameservers or (hopefully) your internal DNS? Did
you do any NSLOOKUPs from affected workstations to see who was resolving
what?

Re:WPAD
I don't use WPAD or auto configuration - I push the proxy address via Group
Policy, so I can't comment on that. Still don't see how changing your
forwarders should break that, though, either.

I gotta say, I'm really curious as to what was going on...I've never heard
of this problem... The only thing I can think of is that it really sounds to
me like the clients were querying OpenDNS directly rather than your DNS
server. What do you use as your forwarders now? Your ISP's name servers?


"Phillip Windell" <philwindell@xxxxxxxxxxx> wrote in message
news:%23F3dqNttJHA.3988@xxxxxxxxxxxxxxxxxxxxxxx
I went ahead and created an account and changed my forwarder. I just added
the two from OpenDNS and moved them to the top so they would be tried
first. This way I could quickly switch back to my originals by moving them
tot he top of just deleting the ones from OpenDNS.

Within a few minutes two of our applications lost contact with their
server,...which is on the LAN, not the Internet. At the same time the
Proxy Autodetection (WPAD) stopped "dicovering" the proxy. I believe all
three of those have some kind of dependency with Netbios Naming,...or at
least the two Apps do anyway.

I removed the OpenDNS "forwarders" and everything started working
correctly again in about two minutes.

What gives with that? I don't see anyway that would cause that problem,
but I kinda verified that it did.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or
Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------


"Bruce Lautenschlager" <brucel.spamless@xxxxxxxxx> wrote in message
news:utoLksKtJHA.5376@xxxxxxxxxxxxxxxxxxxxxxx
I personally have no issues in using OpenDNS and like it very much. Their
network seems to be robust (you can watch a demo on their site describing
it) and the performance seems very good to me. Fairly granular content
control for a free service (with whitelisting and blacklisting, too),
especially if you combine it with ISA (IE - you can block all TV sites via
OpenDNS, exempt MSNBC.COM, and then create a deny rule in ISA that blocks
MSNBC.COM but exempts a user).

DNS stats (find out who your PCs are really trying to talk to),
customized dashboard, DNS "shortcuts", and good management if you have
more than one WAN circuit (you can apply changes to all networks). They
run Phishtank, which other commercial services use themselves - you get
it for free.

But they clearly proxy and admit it:
http://www.opendns.com/support/article/244
http://blog.opendns.com/2007/05/22/google-turns-the-page/

Some people hate it and have issue with it (mostly with google):
http://forums.opendns.com/comments.php?DiscussionID=226

I have a PC with a Google toolbar that works fine. I don't use iGoogle,
and try to avoid ANY widget or program that's constantly phoning home, so
maybe that's why I'm okay.

They make money by displaying Yahoo! search results if your client hits a
blocked page. Clients can fill out a form on the page that notifies you
of the block in case you want to review your policy. The OpenDNS
community nominates and votes for categorization of sites. OpenDNS
clearly benefitted thousands with their Conficker blocking this week,
too.

I've got 2500 users, and OpenDNS has given us (other than my time
participating in the OpenDNS community) fairly good content control for
free. It works very well for me, but I'm not one to discount other's
experiences...everyone is different.

Besides, most of my WAN circuits are AT&T (legacy BellSouth), and nothing
could be worse than those DNS servers.

Bruce Lautenschlager
Bethesda Healthcare System



"Phillip Windell" <philwindell@xxxxxxxxxxx> wrote in message
news:uduUDOKtJHA.5172@xxxxxxxxxxxxxxxxxxxxxxx
"Bruce Lautenschlager" <brucel.spamless@xxxxxxxxx> wrote in message
news:O78C83JtJHA.3928@xxxxxxxxxxxxxxxxxxxxxxx
A lot of people won't use OpenDNS just because of the google proxy
issue. I've used them for some time now and never had an issue (not
performance wise...perhaps ethically, though). And since they won't
cough up for content control around here...

You've got me interested in using OpenDNS for us. What are any known
issue with dealing with them? What did you mean by "ethical"? While
posting in the group for help you may have spun it around and be helping
me instead. :-)


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or
Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------









.

Relevant Pages

  • Re: Leopard, airport e DNS
    ... Ho aggiunto i dns di opendns, ... La domanda non è affatto banale come potrebbe sembrare a prima vista. ... Anch'io sono dietro un router (ISDN e non ADSL, ...
    (it.comp.macintosh)
  • Re: Block Rapidshare and similar sites
    ... The first way to deal with this is the remove the P2P Apps from the users ... One other option is OpenDNS. ... You just point your DNS ... I'm blocking them in ISA Server as I found them, ...
    (microsoft.public.isaserver)
  • Re: Google Public DNS - Opinions?
    ... I have no real need to change DNS unless there is some kind of security ... show that OpenDNS generally is equally fast or faster than Google ... Public DNS. ... normal course of business. ...
    (comp.sys.mac.system)
  • Re: OpenDNS and SBS2008
    ... You then use their web interface to configure which sites and categories you want OpenDNS to "block" which it enforces by not returning the real IP address when one of their DNS servers receives a lookup request that matches the criteria. ... There is the one configuration step of pointing the SBS forwarders to the public IP of the OpenDNS servers which you reply aptly covered how to do. ...
    (microsoft.public.windows.server.sbs)
  • Re: Accessing Website
    ... OpenDNS is a service that provides an alternate ... DNS service. ... Instead of using the default DNS servers ... of your ISP you substitute the OpenDNS servers. ...
    (microsoft.public.windowsxp.general)
Loading