DNS filtering. why are there 2 areas to set this up

[Gravityz]

i noticed that most opendns settings are instructing to put the dns adresses in the WAN tab area.
however there is also the same option in the parental control tab(DNS filtering)

it works when put in the wan area so why is it possible to enable dns filtering also under the parental control tab(without enabling parental control) and even put in different dns adresses.

as far as i can tell the WAN option is leading over the parental control option

 

[ColinTaylor]

Because client devices can choose to ignore the WAN DNS setting and use whatever they want. Also the WAN setting effects all devices (that choose to use it).

The parental controls setting forces devices to use a certain DNS overriding any settings they may have set themselves. It can also be applied globally or individually.

 

[Gravityz]

thanks

so if i set both enties to use opendns i am good to go i guess

Because client devices can choose to ignore the WAN DNS setting and use whatever they want. Also the WAN setting effects all devices (that choose to use it).

The parental controls setting forces devices to use a certain DNS overriding any settings they may have set themselves. It can also be applied globally or individually.

 

[ColinTaylor]

so if i set both enties to use opendns i am good to go i guess

It depends entirely on what you're trying to achieve.

For example, some TV boxes have hard coded DNS settings that only allow you to stream programs available in your country. By using DNS filtering to redirect the device to a DNS server in another country you can view TV programs from that region.

If you just want all of your devices to use opendns without the possibility of overriding it then I would suggest that you;

1) Set the WAN DNS to opendns
2) Enable DNS filtering
3) Set Global Filter mode to "Router" *

* If you don't set the global filter to "Router" you will not be able to use DNS to resolve the names of devices on your local network.

 

[Hydro]

Thank you, Colin - that is very helpful info! If I may please pick your brain with a follow-up question...

On the "DNS-based Filtering" setup page, once you turn it on and select the Global Filter Mode to "Router", is there any advantage to next identifying individual clients in the "Client List" (and setting each client's individual Filter to "Router"), or is that an unnecessary step when the "Global Filter Mode" itself is set to Router?

Thank you again for your help!

Cheers, Chris

 

[ColinTaylor]

No, there is no point setting individual clients to "Router" if that is set as the Global Filter. You would set individual clients when you wanted them to use something different from the global setting.

 

[Hydro]

Perfect - that's what I thought, and I'm grateful the confirmation!

My previously maddeningly-flakey 5ghz network connection on my iPhone has been rock-solid since setting up the DNS-Based Filtering / Global filter Mode = Router (after first specifying the OpenDNS servers on the WAN page, of course).

Great stuff - thank you again for the explanations here.

Cheers, Chris

 

[Gravityz]

Hi Colin,

thanks for the accurate answer.
also the second question i had has been answered(about setting individuals)

i noticed opendns is a littlre bit better then Norton.

Norton seems better but sometimes gives you an option to still watch a blocked site(where is the sense in that if you want to block access to kids)

It depends entirely on what you're trying to achieve.

For example, some TV boxes have hard coded DNS settings that only allow you to stream programs available in your country. By using DNS filtering to redirect the device to a DNS server in another country you can view TV programs from that region.

If you just want all of your devices to use opendns without the possibility of overriding it then I would suggest that you;

1) Set the WAN DNS to opendns
2) Enable DNS filtering
3) Set Global Filter mode to "Router" *

* If you don't set the global filter to "Router" you will not be able to use DNS to resolve the names of devices on your local network.

 

[DroidST]

for reference, some may my posts useful (Asus RT‑AC68U (H/W Ver A1) - Asuswrt-Merlin 380.59)

http://www.snbforums.com/threads/rt-ac87u-aiprotection.20833/page-3