Let’s face it, you cannot protect your children all the time from all the internet risks, but using some sort of filtering you can at least force it in your home. We all know of content we don’t want our kids to be exposed to, be it either accidentally or on purpose. We therefore have to do something about it. This tutorial describes how I filter inappropriate content for all online devices in my household all controlled from my Linux desktop.
OpenDNS is a free DNS service that can not only speed up your internet but also provide you options like…
- Web content filtering
- malware protection
- smart cache and much more.
The bottom line is OpenDNS servers have a huge collection IP addresses of millions of web pages. When you look for a website, it immediately finds the corresponding IP address and hence gets it to load faster. It’s intuitive and literally takes less than 10 minutes to set up (no software installation is necessary unless you want to set up ddclient as described below)
To utilize all its features, all you need to do is sign-up with them using this link https://www.opendns.com/
Basic OpenDNS is suitable for your household devices is free of cost.
Once you have signed up, you’ll get a confirmation link in your mailbox. Click on the link again and it will redirect you to dashboard settings on the main website.
It will automatically detect your IP address. Click on Add this network button given below your IP address All you need to now is to follow the Instructions provided on the website and add these IP addresses to your router.
Preferred DNS server: 220.127.116.11
Alternate DNS server: 18.104.22.168
By default, nothing is blocked. You have FULL control to select one of 3 pre-sets 1: Low 2: Moderate or 3: High filtering levels
Example: If you choose “Low” filtering level then all the porn sites will be blocked . You increase the filter level to apply more restrictions. There is also a custom filtering levels that allows you to be specific or tweak one of the pre-sets.
You can block or allow any domain of your choice by entering the domain name. It also gives you the ability to add an extra layer of security as it provides malware and botnet protection as well as phishing protection. You may also block internal IP addresses
- Login on DNS-O-Matic Site using e-mail and password from OpenDNS. https://www.dnsomatic.com/account/
- Add new Service.
- From list select OpenDNS.
- Click button Update account info for sync OpenDNS Dashboard settings with DNS-O-Matic.
Set DNS addresses in resolv.conf file:
sudo gedit /etc/resolv.conf.head
nameserver 22.214.171.124 nameserver 126.96.36.199
Note: If Your ISP provide IPv6 support, add these DNS IPv6 addresses entries in next lines in the /etc/resolv.conf.head file:
nameserver 2620:0:ccc::2 nameserver 2620:0:ccd::2
1 Install ddclient:
sudo pacman -S ddclient
2 Create backup a ddclient.conf file:
sudo cp /etc/ddclient/ddclient.conf /etc/ddclient/ddclient.conf.bak
3 Open ddclient.conf file in text editor.
sudo gedit /etc/ddclient/ddclient.conf
4 Delete current content, paste in:
Note: REMEMBER – replace values email_address, password with correct values.
daemon=1800 syslog=yes pid=/var/run/ddclient.pid ssl=yes use=web, web=myip.dnsomatic.com server=updates.dnsomatic.com protocol=dyndns2 login=email_address password=password all.dnsomatic.com
Save changes in a file.
5 Run command to enable and start ddclient service daemon:
sudo systemctl enable ddclient && sudo systemctl start ddclient && sudo systemctl status ddclient