Author Topic: SECURE DNS  (Read 13908 times)

0 Members and 1 Guest are viewing this topic.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36992
Re: SECURE DNS
« Reply #15 on: May 01, 2015, 05:02:16 PM »
Quote
What answer are you referring to?
The answers given in user comments at the bottom of the page.
https://support.opendns.com/entries/57943894-Avast-2015-Security-Suite-Secure-DNS-and-OpenDNS

You must have seen it? ... there is one asking the same question as you and using same forum name as you are using here so i assume it is you?


Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33061
  • malware fighter
Re: SECURE DNS
« Reply #16 on: May 01, 2015, 05:27:23 PM »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline magdiel1975

  • Newbie
  • *
  • Posts: 13
Re: SECURE DNS
« Reply #17 on: May 01, 2015, 05:35:20 PM »
Quote
What answer are you referring to?
The answers given in user comments at the bottom of the page.
https://support.opendns.com/entries/57943894-Avast-2015-Security-Suite-Secure-DNS-and-OpenDNS

You must have seen it? ... there is one asking the same question as you and using same forum name as you are using here so i assume it is you?
YES!!.. that is me.. I had to also ask on that forum because noone here has an answer on how to block Avast DNS from bypassing the router... you keep referring me to the post I made on OpenDns forum, but that does NOT ANSWER MY QUESTION...the only answer I have gotten so far is .. "it can't be done unless I block Avast IPs"... so that is why I came to THIS forum to get AN ANSWER from AVAST since they are the culprit.
« Last Edit: May 01, 2015, 05:42:44 PM by magdiel1975 »

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3715
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
Re: SECURE DNS
« Reply #18 on: May 01, 2015, 05:49:19 PM »
magdiel1975,

Did you read my previous post ? Your question is router related, not Avast! related.
You will get better help on a forum with support for routers :)

Greetz, Red.

OS: Win 10 / iOS 14 / Debian 10 / Tails 4
Real Time: Avast Premium Security
VPN: NordVPN ( NordLynx ) with Cybersec

Offline magdiel1975

  • Newbie
  • *
  • Posts: 13
Re: SECURE DNS
« Reply #19 on: May 01, 2015, 05:59:58 PM »
magdiel1975,

Did you read my previous post ? Your question is router related, not Avast! related.
You will get better help on a forum with support for routers :)

Greetz, Red.
Yes.. I read the previous post.. I came from othe router forums and I was told that the ONLY way to be able to block AVAST DNS is to block Avast's DNS IP... BUT.. in order to block those, I NEED THOSE IPs.... AND THE ONLY way to get those IPs is FROM AVAST!!!!!

Not sure how many times Im gonna have to say that... it seems that you guys are the ones NOT reading previous posts.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45131
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: SECURE DNS
« Reply #20 on: May 01, 2015, 06:21:35 PM »
magdiel1975,

Did you read my previous post ? Your question is router related, not Avast! related.
You will get better help on a forum with support for routers :)

Greetz, Red.
Yes.. I read the previous post.. I came from othe router forums and I was told that the ONLY way to be able to block AVAST DNS is to block Avast's DNS IP... BUT.. in order to block those, I NEED THOSE IPs.... AND THE ONLY way to get those IPs is FROM AVAST!!!!!

Not sure how many times Im gonna have to say that... it seems that you guys are the ones NOT reading previous posts.
Submit a support ticket via here https://support.avast.com/Tickets/Submit
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v20H2 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline lukor

  • Avast team
  • Super Poster
  • *
  • Posts: 1879
    • AVAST Software
Re: SECURE DNS
« Reply #21 on: May 02, 2015, 12:45:45 AM »
Hi guys,
I understand the trouble here - but this is exactly what SecureDNS is supposed to do. If there is a device or configuration on the network (e.g. router) that modifies DNS resolves (such as instead of a porn site returns a blocked-page, or instead of your bank site returns a scam page), SecureDns is supposed to give you the right IP. What I see here is that it is working correctly. It is very hard to tell these two cases apart on our side - unless we would also provide the parental control part of the service.

Please, write me an email and I can (most probably) provide you with the current list of IPs used for Secure DNS at this moment - but this is a dynamic service, we add and remove servers based on their load, so it is not a static list.

It also shows, that any application that really needs to visit certain sites can do that, no matter what DNS server you have configured on the router. If we are talking about the computers you own and manage, then it seems to be that the best solution is really uninstalling SecureDNS. If we are talking about computers that you don't own and anyone can install any software on it (avast or other) - then blacklisting our IPs on the router would only help against SecureDNS, other methods of obtaining the DNS address similar to ours would still go through.


Lukas.

Offline magdiel1975

  • Newbie
  • *
  • Posts: 13
Re: SECURE DNS
« Reply #22 on: May 02, 2015, 01:22:49 AM »
Hi guys,
I understand the trouble here - but this is exactly what SecureDNS is supposed to do. If there is a device or configuration on the network (e.g. router) that modifies DNS resolves (such as instead of a porn site returns a blocked-page, or instead of your bank site returns a scam page), SecureDns is supposed to give you the right IP. What I see here is that it is working correctly. It is very hard to tell these two cases apart on our side - unless we would also provide the parental control part of the service.

Please, write me an email and I can (most probably) provide you with the current list of IPs used for Secure DNS at this moment - but this is a dynamic service, we add and remove servers based on their load, so it is not a static list.

It also shows, that any application that really needs to visit certain sites can do that, no matter what DNS server you have configured on the router. If we are talking about the computers you own and manage, then it seems to be that the best solution is really uninstalling SecureDNS. If we are talking about computers that you don't own and anyone can install any software on it (avast or other) - then blacklisting our IPs on the router would only help against SecureDNS, other methods of obtaining the DNS address similar to ours would still go through.


Lukas.
Thanks Lukas.. I sent you a PM.

Offline lukor

  • Avast team
  • Super Poster
  • *
  • Posts: 1879
    • AVAST Software
Re: SECURE DNS
« Reply #23 on: May 05, 2015, 01:55:19 AM »
Hi guys,

as I have just described in greater detail to magdiel in pm, I've consulted this with the backend team and have found out that the server list for secureDNS is very dynamic and is shared with many other services in avast. Some of these are unrelated to the secureDNS functionality and are essential for correct behavior. Therefore I wasn't able to provide magdiel any list suitable for blocking on the router. Sorry for the confusion.

The only suggestion here is to uninstall SecureDNS provider on the machines and prevent reinstallation with proper admin rights setup and/or password protection of the avast UI.

Lukas.

Offline magdiel1975

  • Newbie
  • *
  • Posts: 13
Re: SECURE DNS
« Reply #24 on: May 05, 2015, 02:13:06 AM »
Thanks, but that suggestion is only for computers I have control of, not anyone else's  that connects to my network. I feel this feature of Avast very intruding. Iknow it's purpose is to "protect" the user, but it should NOT intrude on another network.

This is like letting guests in your house, then some of them are snorting cocaine in your bathroom or some place I can't see them.
I welcome folks to my house, but I want to have control of what they can do IN MY HOUSE.. same applies to the internet access I provide to them.. I want to have control since I am the provider of it.
« Last Edit: May 05, 2015, 02:27:07 AM by magdiel1975 »

Offline lukor

  • Avast team
  • Super Poster
  • *
  • Posts: 1879
    • AVAST Software
Re: SECURE DNS
« Reply #25 on: May 05, 2015, 02:59:13 AM »
The same applies to other software any visitor might be using on his PC that also bypasses your dns based protection,  such as browsing through a VPN or http proxy.

Offline Bob4

  • Newbie
  • *
  • Posts: 7
Re: SECURE DNS
« Reply #26 on: October 19, 2015, 06:41:55 PM »
Starting last week, the internet connection from my personal workstation to my Outlook Web App account for work (https:/owa.shsst.edu) began to be blocked.  I tracked the block to Secure DNS.  Unlike other AVAST! shields, I cannot configure exclusions.  My interim approach is to turn off Secure DNS.  Any alternative suggestions?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 36992
Re: SECURE DNS
« Reply #27 on: October 19, 2015, 07:29:43 PM »
Starting last week, the internet connection from my personal workstation to my Outlook Web App account for work (https:/owa.shsst.edu) began to be blocked.  I tracked the block to Secure DNS.  Unlike other AVAST! shields, I cannot configure exclusions.  My interim approach is to turn off Secure DNS.  Any alternative suggestions?
Is there a message from avast? ... if so what does it say


Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 45131
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: SECURE DNS
« Reply #28 on: October 19, 2015, 09:42:02 PM »
Starting last week, the internet connection from my personal workstation to my Outlook Web App account for work (https:/owa.shsst.edu) began to be blocked.  I tracked the block to Secure DNS.  Unlike other AVAST! shields, I cannot configure exclusions.  My interim approach is to turn off Secure DNS.  Any alternative suggestions?
As suggested by Avast, uninstall Secure DNS.
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v20H2 64bit, 24 Gig Ram, 1TB SSD, AvastOmni 20.7.xxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Bob4

  • Newbie
  • *
  • Posts: 7
Re: SECURE DNS
« Reply #29 on: October 19, 2015, 11:26:35 PM »
Reply to Pondus and bob3160,

Pondus: Just the standard "Server not found" browser message.

bob3160: Thanks for the suggestion.  I'll uninstall/reinstall w/o Secure DNS next time I'm doing some maintenance on the machine.