Why is OpenDNS interfering with my network ?

Question

Level 3

570 points

Why is OpenDNS interfering with my network ?

I have an ordinary ADSL internet connection at home. Normally it works fine, and I can surf the web using safari without problem.

I was using google, and trying to find an answer regarding Xcode settings. When I clicked on the Google Search result (linking to stackoverflow.com) , I was

redirected to a page (see image below) saying that the domain has been blocked, and is not allowed on this network.

It doesn't make much sense to me: Stackoverflow is a network for discussing programming questions etc. Why is it being blocked? Also, what does opendns have to do with me?

When I tried logging into discussion.apple.com, Safari prompted me that the certificate presented did not match the domain. On examining the certificate, I noticed that it has opendns.com as the domain, instead of apple.com. Instead of accepting the certificate I close the window.

Now after restarting my router, and waiting for about 15minutes (it wouldn't let me connect earlier), I am able to surf the internet normally again.

I want to know what is going on. Is my computer compromised? What does OpenDNS have to do with me? This is my home network, and is not managed by anyone else.

I have never used OpenDNS, never installed any security software. My home network is an ordinary network.

Safari-OTHER, Mac OS X (10.7.1)

Posted on Sep 29, 2011 9:22 AM

Reply

Answer 1

Sep 29, 2011 12:08 PM in response to KeanuReeves

Your ISP is redirecting your browser. A common occurence. Your computer isn't compromised.

Actually, you can avoid redirects by using Open DNS. It's free, adds security and includes anti phishing filters.

Use OpenDNS for better speed and more security. It's free.

Open System Preferences / Preferences then select the Network tab. Click the Advanced tab then click the DNS tab.

Enter these numbers exactly as you see them here.

Click +

208.67.222.222

Click +

208.67.220.220

Then click OK.

More about OpenDNS here.

Topic : Manually provided DNS server addresses are higher priority than DHCP's

OpenDNS: 30 million users around the world!

Reply

Answer 2

KeanuReeves Author

Level 3

570 points

Sep 29, 2011 8:03 PM in response to Carolyn Samit

Well it seems that it is redirecting me to OpenDNS, or that my ISP is using OpenDNS to prevent me reaching some websites.

But why would they try to impersonate apple.com or prevent me from visiting stackoverflow.com ?

Reply

Answer 3

Apr 18, 2012 12:36 PM in response to KeanuReeves

Hi all

I've just stated to have the same problem with pages being blocked, including Facebook, and certificates not being trusted on numerous sites. I have had the Opendns numbers in my preferences for years but the problem has only just started

thanks

Geoff

Reply

Answer 4

Linc Davis

Level 10

209,649 points

Apr 18, 2012 1:26 PM in response to KeanuReeves

Select  ▹ System Preferences ▹ Network ▹ Advanced ▹ DNS. Under DNS Servers you should have one or more numerical addresses, such as “192.168.1.1” or “10.0.0.1”. What are those addresses?

Reply

Answer 5

Klaus1

Level 9

52,805 points

Apr 18, 2012 3:47 PM in response to KeanuReeves

If your computer is part of a network:please refer to this page: http://www.opendns.com/start/best_practices/#your_network and follow the advice given.

Reply

Answer 6

Apr 19, 2012 3:25 AM in response to Linc Davis

Hi Linc

The numbers in preferences are;

208.67.222.222, 208.67.220.220. These are the same as the numbers in the earlier post by Caroline and as I said in my post I entered these a couple of years ago.

Hi Klaus, no it's not part of a network but I use my computer as a wifi host for my iphone using airport, but again this has been set up like this for 3 years.

I dont recall doing anything to the computer in the last week or so to start the problem

thanks

Geoff

Reply

Answer 7

Linc Davis

Level 10

209,649 points

Apr 19, 2012 4:49 AM in response to Geoff Brown

You're definitely using OpenDNS, so this issue isn't the fault of your ISP or anyone else. You'd have to contact OpenDNS for a resolution.

Reply