OpenDNS/zh cn - Revision history http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&action=history Revision history for this page on the wiki en MediaWiki 1.10.1 Thu, 28 Mar 2024 09:50:21 GMT Glenn: + /zh cn http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=42934&oldid=prev <p>+ /zh cn</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 16:04, 19 June 2012</td> </tr> <tr><td colspan="2" align="left"><strong>Line 61:</strong></td> <td colspan="2" align="left"><strong>Line 61:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">如果您选择使用OpenDNS的,你会得到的是最佳到OpenDNS的'网络,但也许远离你的网络IP地址。这将有性能的网站正在使用内容传送网络的影响</td><td> </td><td style="background: #eee; font-size: smaller;">如果您选择使用OpenDNS的,你会得到的是最佳到OpenDNS的'网络,但也许远离你的网络IP地址。这将有性能的网站正在使用内容传送网络的影响</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Category:DNS]]</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Category:DNS<ins style="color: red; font-weight: bold; text-decoration: none;">/zh cn</ins>]]</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[[Category:Basic tutorials]]</td><td>+</td><td style="background: #cfc; font-size: smaller;">[[Category:Basic tutorials<ins style="color: red; font-weight: bold; text-decoration: none;">/zh cn</ins>]]</td></tr> </table> Tue, 19 Jun 2012 16:04:35 GMT Glenn http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn Leangjia: /* Basic Setup */ http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=39128&oldid=prev <p><span class="autocomment">Basic Setup</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 05:43, 13 February 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 5:</strong></td> <td colspan="2" align="left"><strong>Line 5:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">__TOC__</td><td> </td><td style="background: #eee; font-size: smaller;">__TOC__</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==<del style="color: red; font-weight: bold; text-decoration: none;">Basic Setup</del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;">==<ins style="color: red; font-weight: bold; text-decoration: none;">基本设置</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"># On the '''Setup''' tab under '''Network Address Server Settings (DHCP)''' look for '''Static DNS 1''' and '''Static DNS 2'''</td><td> </td><td style="background: #eee; font-size: smaller;"># On the '''Setup''' tab under '''Network Address Server Settings (DHCP)''' look for '''Static DNS 1''' and '''Static DNS 2'''</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"># Set '''Static DNS 1''' to '''208.67.222.222'''</td><td> </td><td style="background: #eee; font-size: smaller;"># Set '''Static DNS 1''' to '''208.67.222.222'''</td></tr> </table> Sun, 13 Feb 2011 05:43:25 GMT Leangjia http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn Leangjia: /* 拦截特定的IP或IP范围的DNS端口 */ http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=39127&oldid=prev <p><span class="autocomment">拦截特定的IP或IP范围的DNS端口</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 05:42, 13 February 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 49:</strong></td> <td colspan="2" align="left"><strong>Line 49:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> iptables -t nat -A PREROUTING -i br0 -s 192.168.1.128/25 -p tcp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)</td><td> </td><td style="background: #eee; font-size: smaller;"> iptables -t nat -A PREROUTING -i br0 -s 192.168.1.128/25 -p tcp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">'''<del style="color: red; font-weight: bold; text-decoration: none;">Or</del>'''</td><td>+</td><td style="background: #cfc; font-size: smaller;">'''<ins style="color: red; font-weight: bold; text-decoration: none;">或</ins>'''</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"> iptables -t nat -I PREROUTING -i br0 -s 192.168.1.128/25 -p udp --dport 53 -j DNAT --to 208.67.222.222</td><td> </td><td style="background: #eee; font-size: smaller;"> iptables -t nat -I PREROUTING -i br0 -s 192.168.1.128/25 -p udp --dport 53 -j DNAT --to 208.67.222.222</td></tr> </table> Sun, 13 Feb 2011 05:42:29 GMT Leangjia http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn Leangjia: /* Performance Impact */ http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=39126&oldid=prev <p><span class="autocomment">Performance Impact</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 05:42, 13 February 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 56:</strong></td> <td colspan="2" align="left"><strong>Line 56:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"># Click '''Save Firewall''' (note: your WAN interface will be restarted)</td><td> </td><td style="background: #eee; font-size: smaller;"># Click '''Save Firewall''' (note: your WAN interface will be restarted)</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==<del style="color: red; font-weight: bold; text-decoration: none;">Performance Impact</del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;">==<ins style="color: red; font-weight: bold; text-decoration: none;">性能的影响</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Do note that many major websites, download hosts and media sites are now using content delivery network. These network will resolve an IP that is closest to you for performance. Typically, when you use your ISP's DNS server, you will get an IP address within or close to your ISP's network.</td><td> </td><td style="background: #eee; font-size: smaller;">Do note that many major websites, download hosts and media sites are now using content delivery network. These network will resolve an IP that is closest to you for performance. Typically, when you use your ISP's DNS server, you will get an IP address within or close to your ISP's network.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">&lt;br&gt;&lt;br&gt;</td><td> </td><td style="background: #eee; font-size: smaller;">&lt;br&gt;&lt;br&gt;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">If you choose to use OpenDNS, you will get IP addresses that are optimal to OpenDNS</del>' <del style="color: red; font-weight: bold; text-decoration: none;">network but maybe far away from your network. This will have performance impact for sites that are using content delivery networks.</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">如果您选择使用OpenDNS的,你会得到的是最佳到OpenDNS的</ins>'<ins style="color: red; font-weight: bold; text-decoration: none;">网络,但也许远离你的网络IP地址。这将有性能的网站正在使用内容传送网络的影响</ins></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:DNS]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:DNS]]</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Basic tutorials]]</td><td> </td><td style="background: #eee; font-size: smaller;">[[Category:Basic tutorials]]</td></tr> </table> Sun, 13 Feb 2011 05:42:06 GMT Leangjia http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn Leangjia: /* Intercept DNS Port Specific Ip/Range */ http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=39125&oldid=prev <p><span class="autocomment">Intercept DNS Port Specific Ip/Range</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 05:41, 13 February 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 41:</strong></td> <td colspan="2" align="left"><strong>Line 41:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"># Click '''Save Firewall''' (note: your WAN interface will be restarted)</td><td> </td><td style="background: #eee; font-size: smaller;"># Click '''Save Firewall''' (note: your WAN interface will be restarted)</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">== <del style="color: red; font-weight: bold; text-decoration: none;">Intercept DNS Port Specific Ip/Range </del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;">== <ins style="color: red; font-weight: bold; text-decoration: none;">拦截特定的IP或IP范围的DNS端口 </ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Same as above but for a specific IP address/Range</td><td> </td><td style="background: #eee; font-size: smaller;">Same as above but for a specific IP address/Range</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> </table> Sun, 13 Feb 2011 05:41:00 GMT Leangjia http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn Leangjia: /* Intercept DNS Port */ http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=39124&oldid=prev <p><span class="autocomment">Intercept DNS Port</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 05:39, 13 February 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 33:</strong></td> <td colspan="2" align="left"><strong>Line 33:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"># Apply</td><td> </td><td style="background: #eee; font-size: smaller;"># Apply</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">==<del style="color: red; font-weight: bold; text-decoration: none;">Intercept DNS Port</del>==</td><td>+</td><td style="background: #cfc; font-size: smaller;">==<ins style="color: red; font-weight: bold; text-decoration: none;">DNS端口拦截</ins>==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">You can prevent users from using their own DNS servers (and hence get around content filtering) by intercepting DNS queries and forcing them to use the DNS servers you specify.</td><td> </td><td style="background: #eee; font-size: smaller;">You can prevent users from using their own DNS servers (and hence get around content filtering) by intercepting DNS queries and forcing them to use the DNS servers you specify.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"># Go to the '''Commands''' tab under '''Administration'''.</td><td> </td><td style="background: #eee; font-size: smaller;"># Go to the '''Commands''' tab under '''Administration'''.</td></tr> </table> Sun, 13 Feb 2011 05:39:55 GMT Leangjia http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn Leangjia at 05:36, 13 February 2011 http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=39123&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 05:36, 13 February 2011</td> </tr> <tr><td colspan="2" align="left"><strong>Line 1:</strong></td> <td colspan="2" align="left"><strong>Line 1:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">{{languages|OpenDNS}}</td><td> </td><td style="background: #eee; font-size: smaller;">{{languages|OpenDNS}}</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">[http://opendns.com OpenDNS] <del style="color: red; font-weight: bold; text-decoration: none;">is a free DNS (Domain Name Server) service which makes internet browsing safer and allegedly faster. </del>By simply using their DNS servers instead of your ISP's you are automatically protected from their list of Phishing websites. However, in order to restrict a variety of adult website content you will need to create a free account with them, register your IP address and select the categories you want restricted (i.e. sexuality, nude, pornography, lingerie, grotesque, etc...). Since most of us have DHCP assigned WAN IP addresses that change periodically we need to instruct our router to tell OpenDNS what our new IP address is when it changes. We will go over that below.</td><td>+</td><td style="background: #cfc; font-size: smaller;">[http://opendns.com OpenDNS] <ins style="color: red; font-weight: bold; text-decoration: none;">是一个免费的DNS(域名服务器)的服务,使互联网浏览更安全,据称速度更快。 </ins>By simply using their DNS servers instead of your ISP's you are automatically protected from their list of Phishing websites. However, in order to restrict a variety of adult website content you will need to create a free account with them, register your IP address and select the categories you want restricted (i.e. sexuality, nude, pornography, lingerie, grotesque, etc...). Since most of us have DHCP assigned WAN IP addresses that change periodically we need to instruct our router to tell OpenDNS what our new IP address is when it changes. We will go over that below.</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> </table> Sun, 13 Feb 2011 05:36:25 GMT Leangjia http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn Wufangzhuo: New page: {{languages|OpenDNS}} [http://opendns.com OpenDNS] is a free DNS (Domain Name Server) service which makes internet browsing safer and allegedly faster. By simply using their DNS servers i... http://wiki.dd-wrt.com/wiki/index.php?title=OpenDNS/zh_cn&diff=36979&oldid=prev <p>New page: {{languages|OpenDNS}} [http://opendns.com OpenDNS] is a free DNS (Domain Name Server) service which makes internet browsing safer and allegedly faster. By simply using their DNS servers i...</p> <p><b>New page</b></p><div>{{languages|OpenDNS}}<br /> [http://opendns.com OpenDNS] is a free DNS (Domain Name Server) service which makes internet browsing safer and allegedly faster. By simply using their DNS servers instead of your ISP's you are automatically protected from their list of Phishing websites. However, in order to restrict a variety of adult website content you will need to create a free account with them, register your IP address and select the categories you want restricted (i.e. sexuality, nude, pornography, lingerie, grotesque, etc...). Since most of us have DHCP assigned WAN IP addresses that change periodically we need to instruct our router to tell OpenDNS what our new IP address is when it changes. We will go over that below.<br /> <br /> <br /> __TOC__<br /> <br /> ==Basic Setup==<br /> # On the '''Setup''' tab under '''Network Address Server Settings (DHCP)''' look for '''Static DNS 1''' and '''Static DNS 2'''<br /> # Set '''Static DNS 1''' to '''208.67.222.222'''<br /> # Set '''Static DNS 2''' to '''208.67.220.220'''<br /> # Depending on the behavior you want: either leave '''Static DNS 3''' set to '''0.0.0.0''' to still fall back to your ISP DNS if OpenDNS is unresponsive, set it to '''10.0.0.0''' (a non-usable IP) if you don't want to use any other servers, or set it to another DNS server of your choice. Do not duplicate one of the other DNS IP's or else it will act the same as if you left it set to 0.0.0.0.<br /> # Apply Settings and go to the '''Services''' tab<br /> # Under '''DNSMasq''' put '''strict-order''' in the '''Additional DNSMasq Options''' text box if you want the DNS servers to be queried in the order they're listed rather than randomly.<br /> # Apply Settings again<br /> <br /> ==OpenDns with DNS-O-Matic for users with a Dynamic IP==<br /> OpenDNS provides an additional service for users with [[Dynamic DNS]]s. Their DNS-O-Matic will relay the request to OpenDNS and also optionally forward this to any number of additional Dynamic DNS providers. <br /> <br /> # Follow instructions for basic setup above. [[Image:dns-o-matic.jpg|thumbnail|DNS-O-Matic with dd-wrt]]<br /> # Setup an account with OpenDns and '''Enable dynamic IP update''' under the settings tab on the OpenDNS website. Also enable any filtering options you want.<br /> # Log into [http://www.dnsomatic.com/ DNS-O-Matic]. It shares the same username and password for OpenDNS.<br /> # Add OpenDNS as a service on DNS-O-Matic<br /> # Also add account information for any other Dynamic DNS providers you have.<br /> # Now click the &quot;Update Info&quot; radio buttion<br /> # On the '''DDNS''' tab under '''Setup''' in dd-wrt set '''DDNS Service''' to Custom.<br /> # Set '''DYNDNS Server''' to updates.dnsomatic.com<br /> # Fill in your Username and Password for OpenDNS/DNS-O-Matic<br /> # Set '''Host Name''' to all.dnsomatic.com<br /> #* To update multiple hosts, use '''''hostname1'' -a ''hostname2'' -a ''hostname3'' -a ''hostnameN''''' Source: [http://www.dd-wrt.com/phpBB2/viewtopic.php?p=273200#273200 this tip].<br /> # Put /nic/update?hostname= in the '''URL''' text box.<br /> #* If that doesn't work, use: &lt;pre&gt;http://updates.dnsomatic.com/nic/update?hostname=&lt;/pre&gt;<br /> #* If you get a badauth error from dnsomatic, it could be that you need to use https instead of http, so try: &lt;pre&gt;https://updates.dnsomatic.com/nic/update?hostname=&lt;/pre&gt;<br /> # Apply<br /> <br /> ==Intercept DNS Port==<br /> You can prevent users from using their own DNS servers (and hence get around content filtering) by intercepting DNS queries and forcing them to use the DNS servers you specify.<br /> # Go to the '''Commands''' tab under '''Administration'''.<br /> # In the '''Commands''' box paste the following:<br /> iptables -t nat -A PREROUTING -i br0 -p udp --dport 53 -j DNAT --to `nvram get lan_ipaddr`<br /> iptables -t nat -A PREROUTING -i br0 -p tcp --dport 53 -j DNAT --to `nvram get lan_ipaddr`<br /> # Click '''Save Firewall''' (note: your WAN interface will be restarted)<br /> <br /> == Intercept DNS Port Specific Ip/Range ==<br /> Same as above but for a specific IP address/Range<br /> <br /> # Go to the '''Commands''' tab under '''Administration'''.<br /> # In the '''Commands''' box paste the following:<br /> iptables -t nat -A PREROUTING -i br0 -s 192.168.1.128/25 -p udp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)<br /> iptables -t nat -A PREROUTING -i br0 -s 192.168.1.128/25 -p tcp --dport 53 -j DNAT --to $(nvram get lan_ipaddr)<br /> <br /> '''Or'''<br /> <br /> iptables -t nat -I PREROUTING -i br0 -s 192.168.1.128/25 -p udp --dport 53 -j DNAT --to 208.67.222.222<br /> iptables -t nat -I PREROUTING -i br0 -s 192.168.1.128/25 -p tcp --dport 53 -j DNAT --to 208.67.222.222<br /> <br /> # Click '''Save Firewall''' (note: your WAN interface will be restarted)<br /> <br /> ==Performance Impact==<br /> Do note that many major websites, download hosts and media sites are now using content delivery network. These network will resolve an IP that is closest to you for performance. Typically, when you use your ISP's DNS server, you will get an IP address within or close to your ISP's network.<br /> &lt;br&gt;&lt;br&gt;<br /> If you choose to use OpenDNS, you will get IP addresses that are optimal to OpenDNS' network but maybe far away from your network. This will have performance impact for sites that are using content delivery networks.<br /> <br /> [[Category:DNS]]<br /> [[Category:Basic tutorials]]</div> Sun, 07 Nov 2010 12:06:50 GMT Wufangzhuo http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenDNS/zh_cn