Is Open DNS a good choice

We are having problems with very slow download speeds from our server company, and they blame it on Airport. A couple of people online have suggested using Open DNS as an alternative. Does anyone have advice pro or con on this?
Thanks

Mike,
I started using Open Dns in February of this year. I love it. The reason why I changed was because my isp was jerking around with installing their own search engine. (to grab extra income from search referals) I was getting a lot of redirects, especially when I was going to one of my primary financial sights. Since going to Open Dns, all of these redirects ceased to exist. I also use it for my 10 year old Dell PC which I use as a back up, and believe it or not, it is noticeably faster with the Open Dns. I elected to install it in each of my computers, even though you can actually install it in yor router, if you have one.
I like their security feature, and have mine set on medium. The medium setting blocks adware, *****, and even the swinsuit advertisements for Sports Illustrated. I do find that their logging capability for blocked sites to be a nice feature also, especially if you have kids using your computers. I would say that it is the best thing I've ever gotten for free. But you are doing the right thing by investigating it before making any decisions about its use. Of course, if you don't like it, you can always go back to using what you have now.
Carolyn Samit, who posts on this board, is the person who clued me in about O Dns.

Similar Messages

Open DNS

My very much up-to-date Safari has been exceptionally neurotic. The day begins at lightning speed, then slows down, then, from time to time, Safari simply knocks out my internet connection.
I've seen others here suggesting one could add 208.67.222.222 and 208.67.220.220 in their DNS menu. I haven't done it yet, simply when I click "+" to do so, my current numbers disappear. I was hoping the two series of numbers above could be added rather than substituted, so that if there was a problem with the two suggested numbers, I could revert back to the old ones, provided by, I assume, my internet provider Verizon.
Any thoughts on the above?

How did you add them?
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

Open dns resolver issues on windows server 2008 R2

my client is running a windows 2008 r2 server with dns and dhcp roles. it's not a domain controller, just a workgoup server.
got a notification from my client's isp:
"These attacks have been facilitated through DNS
amplification attacks. AT&T has detected these attacks and has confirmed
that the IP address x.x.x.x allocated to your Internet access account is
accessible from the Internet as an open DNS resolver. "
tried disabling recursion, but then there is no access to the internet.
tried disabling the firewall rule for dns udp, and no access to the internet.
does anyone have any idea how to correct this? do i need to add a public dns server to my dhcp scope for internet access? if i do, then what good is a dns server and it doesn't resolve internet addresses?
Gary

Just to add, I was wondering why you had port 53 opened to your DNS servers. And just to point out, that rule you created is a port translation rule that allows access to your DNS server from the internet, just as if you had created a rule to allow access
to an internal web server for public use, or for allowing webmail (OWA) access from the internet to your internal mail server.
What you did, as Keith said, will stop that, but to further point out, the rules are not really needed again, I would just remove the rules completely. For internet access, such as allowing your users to access websites, your DNS to resolve external names
(whether using Root hints or a Forwarder), just about any firewall will allow that out-of-the-box. In some firewalls, you have to create a rule to the outside untrusted interface to "allow established" meaning when an internal request goes to an outside resource,
such as a website, to allow the response back in.
The only time you want to create rules is either you want to allow inbound traffic with a port translation rule (such as what you originally unknowingly did for TCP & UDP 53) to a web server, OWA, SMTP traffic to a mail server, etc.), otherwise,
leave it out of the box.
As for what the ISP is concerned about regarding DNS amplification attacks, is that they are a fairly recent method for attackers to create a DOS (denial of service). You can read up at a couple of recent discussions about what all that means in
the following threads, with ways to stop or mitigate them.
Best way to reduce or disable DNS amplification for external DNS?,
Sunday, June 16, 2013 6:08 PM
http://social.technet.microsoft.com/Forums/windowsserver/en-US/d087a768-2075-49e4-afec-4fd23b50af0a/best-way-to-reduce-or-disable-dns-amplification-for-external-dns
Protecting Windows DNS Server from being abused for DNS amplification attacks,
Wednesday, April 10, 2013 8:05 AM
http://social.technet.microsoft.com/Forums/windowsserver/en-US/fac86dc7-779d-48eb-a113-9c06c2222af9/protecting-windows-dns-server-from-being-abused-for-dns-amplification-attacks
Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
This post is provided AS-IS with no warranties or guarantees and confers no rights.

A Concern About Open DNS

It is bad for download performance not to use your ISPs local DNS servers.
When you use foreign DNS servers, many websites will mis-identify your location, and send you to farther away places to download the website, rather than the local, faster location.
For example, your Software Updates from Apple, which go through Akamai, who will send you to a slower, more distant server for the download.
In addition, as the switch to IPv6 begins, sites such as Google/YouTube will not enable you for IPv6 because you aren't using your ISPs DNS server, which they use to decide whether to give you an IPv6 website address, or just the IPv4 address.

Adding DNS codes to your Network Preferences, should give good results in terms of speed-up as well as added security:
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS
Whilst in System Preferences/Network you should also turn off 'IPv6' in your preference pane, as otherwise you may not get the full speed benefit (the DNS resolver will default to making SRV queries). If you want to know what IPv6 is:
This is Apple's guidance on iPv6:
http://docs.info.apple.com/article.html?path=Mac/10.5/en/8708.html
Click on Apply Now and close the window.
Restart Safari, and repair permissions.

TRY OPEN DNS OR GOOGLE'S NAMEBENCH TO RESOLVE SAFARI 5 ISSUES

HI,
2 DAYS AGO, I EXPERIENCED ALL THE PROBLEMS YOU GUYS ARE HAVING WITH THE SAFARI 5 UPGRADE. I THEN SAW A POST ABOUT OPEN DNS CODES CLICKED ON THE ARTICLE ABOUT IT AND PLUGGED IN THE APPROPRIATE NUMBERS. HAS WORKED FINE SINCE. SOMEONE ELSE POSTED ABOUT DNS CODES AND USING GOOGLE'S NAMEBENCH WHICH I HAVEN'T TRIED SINCE THE INTERNET SPEED I AM AT CURRENTLY SUFFICES. HERE IS THE LINK FOR GOOGLE'S NAMEBENCH FOR ANYONE WHO WANTS TO DOWNLOAD IT: http://code.google.com/p/namebench/ USING THE OPEN DNS RESOLVED ALL ISSUES THAT SAFARI 5 HAD WHEN I UPGRADED. WORKS FINE AND I HAVEN'T EXPERIENCED ANY PROBLEMS SINCE. HERE'S THE ARTICLE EXPLAINING OPEN DNS: http://appletoolbox.com/2010/06/safari-5-0-hangs-while-loading-pages-fix/

No, that link doesn't work but the information is correct!
Adding DNS codes to your Network Preferences, should give good results in terms of speed-up as well as added security:
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

Open DNS better than Comcast xfinity DNS?

Is OpenDNS better than using Comcast/xfinity's DNS? If yes, how do I switch over?
I go to into Airport Utility and enter in the 2 openDNS numbers, something like 222 and 220, but at the bottom of the page right now (because I am using Comcast's DNS) there's a web address something.comcast.net Do I need to change that info too? If so, what do I put in that field?
Thanks!

How did you add them?
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

OPEN DNS not supported by APPLE?

I understand from talking to someone who is an apple service provider that Apple does not support the use of OPEN DNS. He told me was able to upgrade to Safari 5 with no problems using his default settings. I have been fine since using OPEN DNS. Prior to this, I was experiencing all the problems most of you have seem to have been experiencing since the Safari 5 upgrade (freezing, etc).
Should I try to delete the Safari 5 I have and download a new one? It sounds like people are still having the same issues. Why wouldn't Apple support OPEN DNS? My understanding is that it is perfectly safe to do so?

I understand from talking to someone who is an apple service provider that Apple does not support the use of OPEN DNS
Rubbish.
Adding DNS codes to your Network Preferences, should give good results in terms of speed-up as well as added security:
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

OPEN DNS HAS SOLVED MY SAFARI 5 ISSUES

Thought previously that the disk permissions would completely resolve the issue but was still experiencing some problems that others have described. Saw another post on open dns so googled it and found this article: http://appletoolbox.com/2010/06/safari-5-0-hangs-while-loading-pages-fix/
Plugged in the numbers for the open dns and all seems to be fine in the Safari 5 universe now!

No, that link doesn't work but the information is correct!
Adding DNS codes to your Network Preferences, should give good results in terms of speed-up as well as added security:
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

Is Keynote a good choice for this kind of video presentation?

Can Keynote easily be set up and used for the presenter to work from a slide table mode with both names (as well as numbers) and good-size customizable thumbnails of the visual material, primarily videos, which can be clicked on so as to play for the audience, on a projector (second monitor), each clip? This would allow nonlinear access to the videos, and spur-of-the-moment changes of order. I would use Final Cut Pro for the presentations, but this will not be available in many venues. I understand the current iMovie does not have a timeline, so it will be less than ideal. Is Keynote a good choice for this? If not, what would be?

I have I work 09 (newest version 5.0.2) and the presenter window only shows the next slide.
I have never had a need for a multi-slide view, because my presentations are all developed for education and are in a pre-determined order.
I can clearly see that this "pick a slide" feature could be quite useful when engaged in a conversational presentation rather than a seminar or classroom format that I use.
To change the order you would have to flip from multi-slide or disengage the program and choose a slide from the builder/creator menu. (Basically stop the presentation and that could be awkward)
If I am missing something, someone pipe in, I opened a presentation and was only able to get "next slide" up on the presenter menu.

Open DNS follow-up report

Interestingly, after a very positive experience by adding the open DNS numbers 208.67.222.222 and 208.67.220.220, I found today that every time I tried to open Safari it knocked me offline. So I've now resorted back to the number originally assigned to me.
What's going on with Safari?

Jake,
One Verizon DSL account; one Westell 6100 modem
Check with Verizon and find out what the max download / upload speeds should be.
If this is the plan you purchased: http://www22.verizon.com/residential/highspeedinternet/
*"And we’re constantly looking for ways to make our DSL faster—recently upgrading our Starter plan to 1 Mbps* download and our Turbo plan to 7.1 Mbps."*
1 Mbps download / 7.1 Mbps is hardly high speed.
You can check your upload/download speeds here. http://www.speedtest.net/
To realize faster download and uploads speeds you would need to upgrade your service.
This is more then just a DNS issue.

Open DNS and internet sharing

I am seeing strange behavior, and wondering if anyone has a thought about what is going on.
I am at a hotel with fast internet service over ethernet, but, for whatever reason, DNS seems very slow if I use DHCP to connect (timeouts of 5-10 secs to get to a new site). If I switch to DHCP with fixed DNS, and use the Open DNS servers (208.67.222.222, 208.67.220.220) the latency issues go away.
The interesting thing is that I am sharing the internet connection over Airport to my wife's computer (she connecting thru DHCP). If I use a fixed DNS for MY computer, then her computer cannot connect thru internet sharing. But if I use the (slow) DHCP connection, then she can connect through mine. I have not tried setting up her computer with a fixed DNS, as she really doesn't like me to change settings on her computer
Is this a known limitation of internet sharing, or is there something I should know?
TIA

In more detail, if my ethernet (the computer that is doing the sharing), is set up with Configure: Using DHCP, and DNS Server: 208.67.222.222, 208.67.220.220 (in Network Panel for Ethernet), then the computer connecting thru Internet Sharing in Sharing Panel is not able to access some or all resources thru http (ie, pages fail to load, or do not fully load).
However, if I clear the DNS Server part in the Network Panel, thereby using the the DNS Servers supplied by the hotel, then my computer's connection to the internet is slower, with long waits (presumably due to a slow DNS server), but computers accessing the internet via Airport thru my shared connection are able to browse the internet successfully.
I suspect that when I have a fixed DNS server in my computer, that fact is not broadcast to computers using the shared connection. But I am not an expert in TCP/IP, and may well be confused about how DHCP, DNS, and Apple's Internet Sharing work together.
Thanks for any ideas you have
A

Open DNS & Airport Question

I have a wireless network (Airport Extreme and Airport Express for range in the back of my house). Have 4 Macs on the network. All have Open DNS set in System Prefs>Network>Airport>Advanced>DNS.
Should I set one or both of the Airports to Open DNS also? If so, how? I looked at Airport Utility and see no ready way to do it.
If I should add OPen DNS to Airport, can someone tell me how in an easy to follow fashion?
Thanks in advance!

No, sorry.
All my machines are individually set for Open DNS: System Prefs>Network>Airport>Advanced>DNS: 208.67.222.222; 208.67.220.220.
The machines have been set this way for a long time.
My Q: Can/Should I set my Airports (Express and Extreme) somehow for Open DNS?
My general configuration is:Cable>Modem>Airport>4 Macs.
The hardware configuration is Cable into Router (Cox), Ethernet into Extreme, broadcast to Express 5 rooms away (to serve 2 of the 4 Macs); Ch 1 all.
Perfect connection - so don't want to mess with that.
Just want to know (if I can to speed up download time) --
Would (if possible) setting the Airport settings to Open DNS help my speed? If so, how in the world would one do that - - > set the actual base station to have Open DNS settings?
Make sense? Hope so!
Thanks!
Message was edited by: pcbjr

Having trouble setting up Open DNS with mac.

When I try to set up Open DNS I get the following error message:
Safari can’t open the page “http://192.168.1.1/Basic.tri” because the server unexpectedly dropped the connection. This sometimes occurs when the server is busy. Wait for a few minutes, and then try again.
I have a Linksys router. I can get the router so save the settings using my Microsoft laptop, but I get an "oops" error message from Open DNS saying I am not set up on their site and just sends me back to step one. Does this sound familiar to anyone?

No, you cannot put the router in front of the modem.
You might look for any information your ISP gave you for your modem, such as a user guide. Or use the instructions at OpenDNS for a Motorola router, it should be similar. Remove the router and directly connect just one computer to the modem and try to access the modem's built in utility, as you have with your Linksys router. Motorola's default address appears to be "http://192.168.10.1/", the default username is "admin", and the password "password". If you encounter a question about obtaining the DNS service dynamically, check NO, then handset the OpenDNS servers, save and possibly restart the modem.
If you are successful in configuring the modem, go back to the router and leave the DNS settings blank, as well as on each computer. Then the computers should receive the service dynamically from the modem.
After all that, hopefully the OpenDNS website detects you using their service and allows you to proceed with setting up your account.
Dah•veed

Help setting up Open DNS with new airport extreme

I cant seem to get Open DNS to work with a new airport extreme. The status says I am not using Open DNS and its not filtering anything. I have followed the exact steps for set up listed on their website, checked the dns settings, cleared both caches and restarted the computer, modem and router with no success. I set the airport up in bridged mode, although I tried the other option under setup, but not sure what I was doing? I picked up this router because I wanted easy set up and the apple store assured me it would work with Open DNS. Oh, and I also downloaded the latest firmware update on the router. Can anyone help me with the settings or what else I need to check?

Sorry, I am not familiar with this product, so I checked online to pick up some information. Here I am referring to the information found here:
http://www.dslreports.com/faq/6096
I found that your device is mentioned as follows in the intro under Section 1 of this document:
The BellSouth supplied Westell 2100, 2200 and 6100 models (Models A90-210030-04, B90-220030-04, and B90-610030-06/C90-610030-06, respectively) share many features and functions.
Next, I am referring to the information under Section 2, under the heading of Standard Default Mode Connection (separate hub or switch present). Unless you have changed the configuration on the Westell, this is how your device is operating. In this mode, the Westell device is acting both as a modem and router in one unit.
So, an attached router (AirPort Extreme) must be configured as a switch to work correctly. That is what Bridge Mode is....the AirPort Extreme is operating as a switch when it is in Bridge Mode (which would be the correct setting to use when the Westell is set to its Standard Default Mode).
Any changes that you want to make regarding DNS settings would need to be made on the Westell device, since it is acting as the main router on your network.
In Bridge Mode, the AirPort Extreme simply passes that information through to its connected devices. You will not be able to make any DNS related changes on the AirPort Extreme since it receives that info from the Westel device. Some service providers force you to use their DNS servers, so you might want to check with Bell South or AT&T for more information in this regard.
If you want to be able to configure the AirPort Extreme as the main router on your network, and instruct it to use the DNS information that you want, you will need to refer to the section under the heading of Bridged Ethernet Mode ( separate router present).
Please note that the first item under this heading specifies that "This is the preferred configuration when using a separate external router..." (which would be the AirPort Extreme in your case)
So, it appears to me that this would be the way that you must reconfigure the Westell device to allow the AirPort Extreme to function as the "main" router on your network. In this type of setup, you will be able to enter the DNS information that you want to use under the setup for the AirPort Extreme and it will act as you instruct.
The AirPort Extreme would not be configured in Bridge Mode for this....it would be configured to "Share a public IP address".
The next item in the article specifies that you "Must use a PPPoE client on the Router." This means that the AirPort Extreme would be configured to Connect Using = PPPoE as follows:
AirPort Utility - Manual Setup
Click the Internet icon
Click the Internet Connection tab
Connect Using = PPPoE
You would enter your user name (probably your email address), password, etc in this area. Leave the Service Area box completely blank. Set Connection to Always On, and Disconnect if Idle to Never
Click Update to save the new settings. Power off the Westell device after this and then restart it so that it will pick up the new information that you have programmed into the AirPort Extreme.
I want to stress that this is how I would try to configure the Westell and AirPort Extreme. But, as I said, have not used a Westell device, so I cannot say that this will work correctly for you.
It might be an excellent idea to contact Bell South or AT&T Support to ask for their opinion on this before you decide to change the configuration of the Westel device and the AirPort Extreme.
This type of thing can be intimidating for users, so you might elect to use the services of someone like the Geek Squad at Best Buy, or a similar service from a local computer firm. Perhaps the Apple store could help as well.
If it is not critical that you use Open DNS, you might want to simply leave things "as is", with the AirPort Extreme in Bridge Mode.

Problems setting up open DNS

I have been trying for several days to get open dns set up on my home network and imac and am running into a wall. I have installed the correct numbers on my router and even added them to my modem. I checked on my imac ethernet network settings and the dns numbers are displayed there correctly. I have been in contact with Open DNS through a service ticket and been on their forum and tried multiple solutions. I appear to be using the open dns connections but even after multiple attempts to adjust my settings, I cant get it to filter Adult sites (I did set up an account as directed). Im about ready to give up on the service but thought I would try hear to see if this might be a common issue and if anyone has recommendations??

If you goto http://opendns.com
if you are using their service you should see in your browser.
If you are able to access a pron site that you accessed prior to turning on filtering then this problem may be due to the browsers caching the information.
I would suggest you clear your browsers caches.
also clear the dns cache on your mac use the following command in your terminal
dscacheutil -flushcache
also use the following command to list what dns servers your mac is using and post the results so I can check them.
/usr/sbin/scutil --dns | grep nameserver

Is Open DNS a good choice

Similar Messages

Maybe you are looking for