Open DNS Question

I have a Time Capsule and an AP Express serving 5 Macs. Internet has gotten slow (Cable). Should I put Open DNS on each Mac (Sys Pref>Network>Airport>DNS) or directly on the Time Capsule, using Airport Utility (Manual Setup>Internet>DNS Servers)?
If the latter, do I need to change anything on the Express, as well?

pcbjr wrote:
I have a Time Capsule and an AP Express serving 5 Macs. Internet has gotten slow (Cable). Should I put Open DNS on each Mac (Sys Pref>Network>Airport>DNS) or directly on the Time Capsule, using Airport Utility (Manual Setup>Internet>DNS Servers)?
If the latter, do I need to change anything on the Express, as well?
Well, I think the best thing would be to change the settings at the furthest point from your macs. Is your cable modem also a router? If so, that is where I would make the change - I don't have a cable setup, using DSL, and I made the changes on my 2WIRE dsl modem no problem. No DNS setup anywhere else...

Similar Messages

Open DNS & Airport Question

I have a wireless network (Airport Extreme and Airport Express for range in the back of my house). Have 4 Macs on the network. All have Open DNS set in System Prefs>Network>Airport>Advanced>DNS.
Should I set one or both of the Airports to Open DNS also? If so, how? I looked at Airport Utility and see no ready way to do it.
If I should add OPen DNS to Airport, can someone tell me how in an easy to follow fashion?
Thanks in advance!

No, sorry.
All my machines are individually set for Open DNS: System Prefs>Network>Airport>Advanced>DNS: 208.67.222.222; 208.67.220.220.
The machines have been set this way for a long time.
My Q: Can/Should I set my Airports (Express and Extreme) somehow for Open DNS?
My general configuration is:Cable>Modem>Airport>4 Macs.
The hardware configuration is Cable into Router (Cox), Ethernet into Extreme, broadcast to Express 5 rooms away (to serve 2 of the 4 Macs); Ch 1 all.
Perfect connection - so don't want to mess with that.
Just want to know (if I can to speed up download time) --
Would (if possible) setting the Airport settings to Open DNS help my speed? If so, how in the world would one do that - - > set the actual base station to have Open DNS settings?
Make sense? Hope so!
Thanks!
Message was edited by: pcbjr

Having trouble setting up Open DNS with mac.

When I try to set up Open DNS I get the following error message:
Safari can’t open the page “http://192.168.1.1/Basic.tri” because the server unexpectedly dropped the connection. This sometimes occurs when the server is busy. Wait for a few minutes, and then try again.
I have a Linksys router. I can get the router so save the settings using my Microsoft laptop, but I get an "oops" error message from Open DNS saying I am not set up on their site and just sends me back to step one. Does this sound familiar to anyone?

No, you cannot put the router in front of the modem.
You might look for any information your ISP gave you for your modem, such as a user guide. Or use the instructions at OpenDNS for a Motorola router, it should be similar. Remove the router and directly connect just one computer to the modem and try to access the modem's built in utility, as you have with your Linksys router. Motorola's default address appears to be "http://192.168.10.1/", the default username is "admin", and the password "password". If you encounter a question about obtaining the DNS service dynamically, check NO, then handset the OpenDNS servers, save and possibly restart the modem.
If you are successful in configuring the modem, go back to the router and leave the DNS settings blank, as well as on each computer. Then the computers should receive the service dynamically from the modem.
After all that, hopefully the OpenDNS website detects you using their service and allows you to proceed with setting up your account.
Dah•veed

Open DNS? Why do we have to do this, all of a sudden?

I'm one of the folks who has been experiencing this inexplicable hanging/not loading web pages and slower connection since I upgraded to Snow Leopard and the new Safari.
I did this DNS thing, which is fine, I understand what it means -
but I never had to do that before, and so I don't understand why I have to do it now, and why isn't my clever computer doing it automatically?
My 67 year old mother would never have known this if I didn't come along and fix it! LOL
So is this something that will be incorporated in a future update so people like my mother don't have to be so savvy, or is this the kind of thing we have to keep doing as new things get added?
Is this the only thing that is making my Safari hang on some websites that weren't hanging before all the new updates? Is there some other reason? I've done nothing new to my connection, it's the same DSL as before, and my ISP seems to show no problems at all.
Thank you for your help.

I wonder myself why Carolyn has the same answer on countless postings of just switching to Open DNS? Actually their not a bad DNS provider. But people are right to question why their current DNS servers that their ISP use are all of a sudden the cause for Safari nor loading pages. If that were the case I would think the ISP provider would be flooded with complaints. Considering the fact also that a Windows computer using IE 8 or Firefox with the same ISP is not affected tells me that its not the DNS servers and that changing to Open DNS would not provide the best solution. As I have also been affected by this issue and have traced it more to Safari and Snow Leopard then any other issue.
Do I have a solution? No. But suggesting that its a DNS issue is not on target.

ISP Reporting Open DNS Resolvers

I have a WRV210 in stalled at a remote client, it is set to do a point to point VPN tunnel to the company office (Windows server) another 210 at the other end.
Behind this specific unit are 2 Windows workstations(XP). The client just received the following email from AT&T:
AT&T has determined that a device using your Internet connection is configured to run an open Domain Name System (DNS) resolver. A DNS resolver was observed answering public queries at Jan 7, 2014 at 7:06 PM EST at the IP address X.X.X.X. Our records indicate that this IP address was assigned to you at this time.
Open DNS resolvers can be used for network attacks, presenting additional load on your Internet access and resulting in unreliable service.
An open DNS resolver allows users on the Internet to perform DNS requests on your server. This is considered an insecure configuration and in the majority of cases, Internet subscribers should not operate an open DNS resolver. The open DNS resolver may be present due to a default operating system installation or system configuration issue. In some cases, network devices such as home wireless routers have flaws that expose DNS service to the Internet.
To address this problem we ask that you take the following actions. If your computer(s) are managed by an Information Technology (IT) group at your place of work, please pass this information on to them.
If you use a wireless network, ensure that your wireless router is password-protected and using WPA or WPA2 encryption (use WEP only if WPA is not available). In addition, ensure that the router is not configured to provide open DNS services (consult the manual for your specific hardware). Check the connections to the router and ensure that you recognize all connected devices.
If your environment requires you to run an open DNS resolver, please limit access via an ACL, rate limiting, or another method to minimize abuse of your server. Visit http://www.team-cymru.org/Services/Resolvers/instructions.html for additional technical information on preventing abuse.
Thank you for your prompt attention to this matter. We welcome your feedback and questions on this matter. Please contact us at [email protected] with any questions you may have.
I have no port forwarding setup nor do I have any port triggering. The workstation is not setup in the DMZ, the inside network is setup as 192.168.1.x
Can anyone point me in the right direction to resolve this?
Thank you.

My brother uses the Cisco WRV210 for his home wireless network and he has the same issue. He received the below warning from his ISP. The ISP provided this link http://www.thinkbroadband.com/tools/dnscheck.html to run a DNS check for this issue. I have reset the router to factory settings and upgraded the firmware but it did not resolve the issue. I have checked that all of his devices are clean of viruses and malware to the best of my ability. Even my own laptop, which is fine with my own home network, reports of this DNS resolver issue when I run the dnscheck when connected to the WRV210. This issue is beyond my knowledge and expertise. His ISP has terminated his service twice already as a warning, each time having to demand to have it restored. As a result I reinstalled my brother's 10 year old D-Link router and although it is noticeably slower, it does not exhibit this problem.
Any assistance is greatly appreciated!
Please be advised that we have received a report that your provisioned IP address is operating as an Open DNS server permitting unrestricted Recursive DNS Queries from anywhere on the Internet.
Open recursive DNS resolvers; have been used to generate an increasing number of extremely large reflective DDoS attacks, without needing a large number of infected hosts to launch the attacks.
Additional risks of open recursive resolvers include resource consumption by outside users without your consent, and, perhaps possible cache poisoning from outside entities.
For more information on the problems associated with Open DNS Recursion and assistance in remediation this threat, can be obtained from the site below.
http://www.us-cert.gov/reading_room/DNS-recursion033006.pdf
if you are not running a DNS server and are using a home gateway or router, it may be possible the router is running a DNS server. Usually, the DNS server should only be accessible to the computers inside your home, however if configured incorrectly, it may make the DNS server accessible to the entire Internet. If you suspect your router may be the cause of this activity, we suggest contacting your router manufacturer's support desk for assistance in reconfiguring your router.
Please note that each end user is responsible for the security of their computer system while connected to the network and thus is ultimately responsible for network abuse that is conducted through such configurations. Failure to take the appropriate measures to prevent network abuse through your internet account may result in a service interruption / account termination.

Disable an open dns

I currently have a Netware 6.5 sp8 dns server and an OES11 DNS server. As I am migrating way from Netware (tough to do because it simply works!) I have moved all of my dhcp and dns over to the OES11 box with the Netware box as a backup. I need to shut down this open dns for obvious reasons. But when I turn recursion to off, my workstations loose dns.
I would like to set my network up to use the OES11 box as a primary dns and the Netware box to secondary. I have a few questions.
Disable recursion
what settings do I configure the SLES network card dns to? Do I point them to my isp DNS or does sles need to be pointed to itself?
when I set recursion to "no" how do I allow my workstations, on multiple vlans use the server for DNS?
Does there need to be a forwarder?
Suggestions

Originally Posted by dholland
I currently have a Netware 6.5 sp8 dns server and an OES11 DNS server. As I am migrating way from Netware (tough to do because it simply works!) I have moved all of my dhcp and dns over to the OES11 box with the Netware box as a backup. I need to shut down this open dns for obvious reasons. But when I turn recursion to off, my workstations loose dns.
I would like to set my network up to use the OES11 box as a primary dns and the Netware box to secondary. I have a few questions.
Disable recursion
what settings do I configure the SLES network card dns to? Do I point them to my isp DNS or does sles need to be pointed to itself?
when I set recursion to "no" how do I allow my workstations, on multiple vlans use the server for DNS?
Does there need to be a forwarder?
Suggestions
Disabling recursion on OES is a matter of editing the /etc/named.conf. It isn't done on the network card. See the man page for the specifics.
Where you point to is a matter of what you want to resolve. I ALWAYS point to my ISP, but if my server is handling specific zones, I also point to it.
If you are disabling all recursion, then you disable forwarding. They will need to be able to query someone. I would add the my ISP's dns servers.
You can allow recursion from some clients/subnets if you wish, you don't have to disable it for every one.

Open DNS follow-up report

Interestingly, after a very positive experience by adding the open DNS numbers 208.67.222.222 and 208.67.220.220, I found today that every time I tried to open Safari it knocked me offline. So I've now resorted back to the number originally assigned to me.
What's going on with Safari?

Jake,
One Verizon DSL account; one Westell 6100 modem
Check with Verizon and find out what the max download / upload speeds should be.
If this is the plan you purchased: http://www22.verizon.com/residential/highspeedinternet/
*"And we’re constantly looking for ways to make our DSL faster—recently upgrading our Starter plan to 1 Mbps* download and our Turbo plan to 7.1 Mbps."*
1 Mbps download / 7.1 Mbps is hardly high speed.
You can check your upload/download speeds here. http://www.speedtest.net/
To realize faster download and uploads speeds you would need to upgrade your service.
This is more then just a DNS issue.

Open DNS

My very much up-to-date Safari has been exceptionally neurotic. The day begins at lightning speed, then slows down, then, from time to time, Safari simply knocks out my internet connection.
I've seen others here suggesting one could add 208.67.222.222 and 208.67.220.220 in their DNS menu. I haven't done it yet, simply when I click "+" to do so, my current numbers disappear. I was hoping the two series of numbers above could be added rather than substituted, so that if there was a problem with the two suggested numbers, I could revert back to the old ones, provided by, I assume, my internet provider Verizon.
Any thoughts on the above?

How did you add them?
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

Open DNS and internet sharing

I am seeing strange behavior, and wondering if anyone has a thought about what is going on.
I am at a hotel with fast internet service over ethernet, but, for whatever reason, DNS seems very slow if I use DHCP to connect (timeouts of 5-10 secs to get to a new site). If I switch to DHCP with fixed DNS, and use the Open DNS servers (208.67.222.222, 208.67.220.220) the latency issues go away.
The interesting thing is that I am sharing the internet connection over Airport to my wife's computer (she connecting thru DHCP). If I use a fixed DNS for MY computer, then her computer cannot connect thru internet sharing. But if I use the (slow) DHCP connection, then she can connect through mine. I have not tried setting up her computer with a fixed DNS, as she really doesn't like me to change settings on her computer
Is this a known limitation of internet sharing, or is there something I should know?
TIA

In more detail, if my ethernet (the computer that is doing the sharing), is set up with Configure: Using DHCP, and DNS Server: 208.67.222.222, 208.67.220.220 (in Network Panel for Ethernet), then the computer connecting thru Internet Sharing in Sharing Panel is not able to access some or all resources thru http (ie, pages fail to load, or do not fully load).
However, if I clear the DNS Server part in the Network Panel, thereby using the the DNS Servers supplied by the hotel, then my computer's connection to the internet is slower, with long waits (presumably due to a slow DNS server), but computers accessing the internet via Airport thru my shared connection are able to browse the internet successfully.
I suspect that when I have a fixed DNS server in my computer, that fact is not broadcast to computers using the shared connection. But I am not an expert in TCP/IP, and may well be confused about how DHCP, DNS, and Apple's Internet Sharing work together.
Thanks for any ideas you have
A

Help setting up Open DNS with new airport extreme

I cant seem to get Open DNS to work with a new airport extreme. The status says I am not using Open DNS and its not filtering anything. I have followed the exact steps for set up listed on their website, checked the dns settings, cleared both caches and restarted the computer, modem and router with no success. I set the airport up in bridged mode, although I tried the other option under setup, but not sure what I was doing? I picked up this router because I wanted easy set up and the apple store assured me it would work with Open DNS. Oh, and I also downloaded the latest firmware update on the router. Can anyone help me with the settings or what else I need to check?

Sorry, I am not familiar with this product, so I checked online to pick up some information. Here I am referring to the information found here:
http://www.dslreports.com/faq/6096
I found that your device is mentioned as follows in the intro under Section 1 of this document:
The BellSouth supplied Westell 2100, 2200 and 6100 models (Models A90-210030-04, B90-220030-04, and B90-610030-06/C90-610030-06, respectively) share many features and functions.
Next, I am referring to the information under Section 2, under the heading of Standard Default Mode Connection (separate hub or switch present). Unless you have changed the configuration on the Westell, this is how your device is operating. In this mode, the Westell device is acting both as a modem and router in one unit.
So, an attached router (AirPort Extreme) must be configured as a switch to work correctly. That is what Bridge Mode is....the AirPort Extreme is operating as a switch when it is in Bridge Mode (which would be the correct setting to use when the Westell is set to its Standard Default Mode).
Any changes that you want to make regarding DNS settings would need to be made on the Westell device, since it is acting as the main router on your network.
In Bridge Mode, the AirPort Extreme simply passes that information through to its connected devices. You will not be able to make any DNS related changes on the AirPort Extreme since it receives that info from the Westel device. Some service providers force you to use their DNS servers, so you might want to check with Bell South or AT&T for more information in this regard.
If you want to be able to configure the AirPort Extreme as the main router on your network, and instruct it to use the DNS information that you want, you will need to refer to the section under the heading of Bridged Ethernet Mode ( separate router present).
Please note that the first item under this heading specifies that "This is the preferred configuration when using a separate external router..." (which would be the AirPort Extreme in your case)
So, it appears to me that this would be the way that you must reconfigure the Westell device to allow the AirPort Extreme to function as the "main" router on your network. In this type of setup, you will be able to enter the DNS information that you want to use under the setup for the AirPort Extreme and it will act as you instruct.
The AirPort Extreme would not be configured in Bridge Mode for this....it would be configured to "Share a public IP address".
The next item in the article specifies that you "Must use a PPPoE client on the Router." This means that the AirPort Extreme would be configured to Connect Using = PPPoE as follows:
AirPort Utility - Manual Setup
Click the Internet icon
Click the Internet Connection tab
Connect Using = PPPoE
You would enter your user name (probably your email address), password, etc in this area. Leave the Service Area box completely blank. Set Connection to Always On, and Disconnect if Idle to Never
Click Update to save the new settings. Power off the Westell device after this and then restart it so that it will pick up the new information that you have programmed into the AirPort Extreme.
I want to stress that this is how I would try to configure the Westell and AirPort Extreme. But, as I said, have not used a Westell device, so I cannot say that this will work correctly for you.
It might be an excellent idea to contact Bell South or AT&T Support to ask for their opinion on this before you decide to change the configuration of the Westel device and the AirPort Extreme.
This type of thing can be intimidating for users, so you might elect to use the services of someone like the Geek Squad at Best Buy, or a similar service from a local computer firm. Perhaps the Apple store could help as well.
If it is not critical that you use Open DNS, you might want to simply leave things "as is", with the AirPort Extreme in Bridge Mode.

Problems setting up open DNS

I have been trying for several days to get open dns set up on my home network and imac and am running into a wall. I have installed the correct numbers on my router and even added them to my modem. I checked on my imac ethernet network settings and the dns numbers are displayed there correctly. I have been in contact with Open DNS through a service ticket and been on their forum and tried multiple solutions. I appear to be using the open dns connections but even after multiple attempts to adjust my settings, I cant get it to filter Adult sites (I did set up an account as directed). Im about ready to give up on the service but thought I would try hear to see if this might be a common issue and if anyone has recommendations??

If you goto http://opendns.com
if you are using their service you should see in your browser.
If you are able to access a pron site that you accessed prior to turning on filtering then this problem may be due to the browsers caching the information.
I would suggest you clear your browsers caches.
also clear the dns cache on your mac use the following command in your terminal
dscacheutil -flushcache
also use the following command to list what dns servers your mac is using and post the results so I can check them.
/usr/sbin/scutil --dns | grep nameserver

Open DNS and shortcuts?

I'm not sure what's going on, but Safari 4 is not exhibiting it's usual behavior when it comes to shortcuts. Or at least I think it's shortcuts.
When I used to type in "website" it would automatically go to "website.com" but now it takes me to the Open DNS guide instead of the website.
Anyone have any idea why this is suddenly occurring?

This has been an annoying issue since upgrading to Snow Leopard. It's one of those minor but incredibly irritating nuisances scattered throughout the OS. I know it was sort of a luxury to have it auto-complete the domain but when a feature like this goes missing you begin to realize how much you took it for granted. Is there a hack/fix for this?

Open dns resolver issues on windows server 2008 R2

my client is running a windows 2008 r2 server with dns and dhcp roles. it's not a domain controller, just a workgoup server.
got a notification from my client's isp:
"These attacks have been facilitated through DNS
amplification attacks. AT&T has detected these attacks and has confirmed
that the IP address x.x.x.x allocated to your Internet access account is
accessible from the Internet as an open DNS resolver. "
tried disabling recursion, but then there is no access to the internet.
tried disabling the firewall rule for dns udp, and no access to the internet.
does anyone have any idea how to correct this? do i need to add a public dns server to my dhcp scope for internet access? if i do, then what good is a dns server and it doesn't resolve internet addresses?
Gary

Just to add, I was wondering why you had port 53 opened to your DNS servers. And just to point out, that rule you created is a port translation rule that allows access to your DNS server from the internet, just as if you had created a rule to allow access
to an internal web server for public use, or for allowing webmail (OWA) access from the internet to your internal mail server.
What you did, as Keith said, will stop that, but to further point out, the rules are not really needed again, I would just remove the rules completely. For internet access, such as allowing your users to access websites, your DNS to resolve external names
(whether using Root hints or a Forwarder), just about any firewall will allow that out-of-the-box. In some firewalls, you have to create a rule to the outside untrusted interface to "allow established" meaning when an internal request goes to an outside resource,
such as a website, to allow the response back in.
The only time you want to create rules is either you want to allow inbound traffic with a port translation rule (such as what you originally unknowingly did for TCP & UDP 53) to a web server, OWA, SMTP traffic to a mail server, etc.), otherwise,
leave it out of the box.
As for what the ISP is concerned about regarding DNS amplification attacks, is that they are a fairly recent method for attackers to create a DOS (denial of service). You can read up at a couple of recent discussions about what all that means in
the following threads, with ways to stop or mitigate them.
Best way to reduce or disable DNS amplification for external DNS?,
Sunday, June 16, 2013 6:08 PM
http://social.technet.microsoft.com/Forums/windowsserver/en-US/d087a768-2075-49e4-afec-4fd23b50af0a/best-way-to-reduce-or-disable-dns-amplification-for-external-dns
Protecting Windows DNS Server from being abused for DNS amplification attacks,
Wednesday, April 10, 2013 8:05 AM
http://social.technet.microsoft.com/Forums/windowsserver/en-US/fac86dc7-779d-48eb-a113-9c06c2222af9/protecting-windows-dns-server-from-being-abused-for-dns-amplification-attacks
Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/
This post is provided AS-IS with no warranties or guarantees and confers no rights.

Stealth mode connection attempts? Reason for Open DNS in router settings?

Console is giving me repeated messages (many times per minute) that read
"Stealth Mode connection attempt to UDP xxxx from 208.67.222.222:53"
That's a little scary to the uninitiated! I've done some rummaging here and across the net on this. I understand little of what I found or how to stop this. I understand that the 208.67.222.222 is Open DNS related. I was glad to discover that as I originally thought some malicious computer somewhere was trying to gain access to my MacBook Pro. I thought I'd delete the DNS servers to see if that would help, but they are greyed out in the Preferences--Network--DNS panel and cannot be removed.
From what I've investigated, those Open DNS servers are set in the router. I know how to change or delete those, but maybe I shouldn't. In fact, maybe someone can remind me why I put them in there in the first place (years ago). I vaguely recall some advantage to using Open DNS (faster?), although I'll confess that, of late, too often mistyped web addresses go to an Open DNS page, which is a nuisance.
In any event, I'd like to do something that would stop the stealth mode "attacks". While I'm sure I could ignore it, maybe it's eating up some browser or network time. It also seems odd that it would go on and on!

Thanks for some info on this. Should I only see it then, when I'm in a browser? Or, when wi-fi is on? I'm assuming that the Mac may be checking what time it is, although it seems a little too frequent for that! (3 times a minute? Well, maybe that's about right, but then Apple and Open DNS should coordinate so that this message doesn't show up.)
I did find this: http://forums.opendns.com/comments.php?DiscussionID=1785
Does that make sense? It's completely benign? And doesn't waste CPU cycles?
One problem with all this stealth mode logging is that it fills up the Console message window! It thus means that there is gobs of stuff I have to wade through to see if there really is something going on from the outside!
I did find two oddballs in there (I don't think they were open DNS as they weren't 208s), so the firewall is doing something.

I am trying to set an open DNS using the MacAir. But when I tried to flush the existing one at utilities/terminal, it will not work. I am using Yosemite. May I know what should be the command line so that I can shift to an open DNS? Thanks

I am trying to set an open DNS using the MacAir. But when I tried to flush the existing one at utilities/terminal, it will not work. I am using Yosemite. May I know what should be the command line so that I can shift to an open DNS? Thanks

>SystemPreferences>Network>DNS

Open DNS Question

Similar Messages

Maybe you are looking for