Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[heavyrain]

A member of the family is just taking online gambling too far... I don't want to go too much into it. I need to block access to ALL gambling/slot sites.

I know there is alot of software type deals but they all seem to have to be installed on the actual pc being blocked which isn't a good idea. I need it to appear to be a global ban so they don't think they are being singled out.

OpenDNS seemed like a good router way (especially for someone not that technically minded on how to bypass it as this person is) but even relatively known sites would still have access e.g. https://www.allbritishcasino.com/ would still work. The person signed up to maybe 10 or more sites (that I know of).

Does there exist another dns provider that's actually decent or software I can install on my own pc to stop another pc accessing gambling sites? Free if possible.

[g3uiss]

Perhaps PiHole might be a good solution

[heavyrain]

Seems to be based on filters which rely on the people making the filters to know the sites. It seems ok for USA but UK is lacking. If someone finds a method that auto blocks sites like https://www.barbadosbingo.com/ or https://www.allbritishcasino.com/en/index that would be great. If it blocks them then I know the filtering is pretty strong.

[craigski]

OpenDNS is now Cisco Umbrella, and you can filter on categories.

You can check the categories here:

https://talosintelligence.com/

Both examples you gave are in the Gambling category.

But, easy to bypass, eg a mobile phone not using home WiFi etc.

[heavyrain]

OpenDNS is now Cisco Umbrella, and you can filter on categories.

You can check the categories here:

https://talosintelligence.com/

Both examples you gave are in the Gambling category.

But, easy to bypass, eg a mobile phone not using home WiFi etc.

This will be good enough. Can I ask how you set this up? Is it still just OpenDNS as before? I'm really puzzled because I tried those sites on OpenDNS about 4 months ago and they were not blocked and Cisco took over OpenDNS in 2015?

[craigski]

You may already have an account, I guess you need the "OpenDNS Home" option:

https://www.opendns.com/home-internet-security/

Select custom in Web Content Filtering:

[heavyrain]

I won't be able to try this again till tomorrow but could you enable OpenDNS and see if those sites are indeed blocked?

[Alex Atkin UK]

Wont work if they are using a browser with DNS over HTTPS though.

Might be more effective with phone apps, if they aren't crafty and use their own DNS (eg I believe Googles own apps bypass your routers issued DNS and use Googles own directly).

Ultimately DNS blocks are far less effective these days as we move to technologies designs to get around DNS blocks, for security reasons (not allowing bad ISPs to hijack DNS).

Its one thing I do on pfSense, I hijack all traffic aimed at port 53 and force it to go via Unbound so I can do my own filtering.  But again, DNS over HTTPS in the browser will bypass that.

[craigski]

I won't be able to try this again till tomorrow but could you enable OpenDNS and see if those sites are indeed blocked?

Seems to work:

Code: [Select]

> allbritishcasino.com
Server:  dns.opendns.com
Address:  208.67.222.222

Non-authoritative answer:
Name:    allbritishcasino.com
Addresses:  ::ffff:146.112.61.106
          146.112.61.106

> barbadosbingo.com
Server:  dns.opendns.com
Address:  208.67.222.222

Non-authoritative answer:
Name:    barbadosbingo.com
Addresses:  ::ffff:146.112.61.106
          146.112.61.106

> server 8.8.8.8
Default Server:  dns.google
Address:  8.8.8.8

> allbritishcasino.com
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    allbritishcasino.com
Addresses:  149.126.77.135
          185.11.125.135

> barbadosbingo.com
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    barbadosbingo.com
Addresses:  104.21.8.83
          172.67.130.99

Some info on using DoH with OpenDNS:

https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS

[Chrysalis]

There is an anti ad domain list that includes gambling sites (it annoyed me as I only wanted anti ad/tracking) I will try to find it for you, then add to pihole/pfsense to work network wide.

Also if you on a mainstream ISP and are the account holder setting family mode on their filtering might block gambling as well.  There is also options like cloudflare DNS family, 1.1.1.3.

https://blog.cloudflare.com/introducing-1-1-1-1-for-families/
However not sure this blocks betting sites. https://community.cloudflare.com/t/1-1-1-3-families-should-block-web-vpn-and-betting/485240/2  (looks like the opendns suggestion is better)

If using DNS solutions you will need to do something about DNS over HTTPS as that can bypass router side DNS easily.  If the family member is tech savvy then also VPNs.

If you search my posts on this forum I did at one point post a list of most public DoH IP's I could find which could then be filtered on your firewall.  I have attached the IP's I got in my firewall alias, can drop packets to these IP's on port 443.  Consider a walled garden internet which would work at making a VPN difficult to use.  Outbound NAT/RDR port 53 to your router DNS.

[meritez]

A member of the family is just taking online gambling too far... I don't want to go too much into it. I need to block access to ALL gambling/slot sites.

I know there is alot of software type deals but they all seem to have to be installed on the actual pc being blocked which isn't a good idea. I need it to appear to be a global ban so they don't think they are being singled out.

OpenDNS seemed like a good router way (especially for someone not that technically minded on how to bypass it as this person is) but even relatively known sites would still have access e.g. https://www.allbritishcasino.com/ would still work. The person signed up to maybe 10 or more sites (that I know of).

Does there exist another dns provider that's actually decent or software I can install on my own pc to stop another pc accessing gambling sites? Free if possible.

How are they accessing?
If it's by mobile have someone else they trust set the pin on their mobile
Get all sites listed, scramble the login passwords and unsubscribe all emails

[Alex Atkin UK]

Seems to work:

Code: [Select]

> allbritishcasino.com
Server:  dns.opendns.com
Address:  208.67.222.222

Non-authoritative answer:
Name:    allbritishcasino.com
Addresses:  ::ffff:146.112.61.106
          146.112.61.106

> barbadosbingo.com
Server:  dns.opendns.com
Address:  208.67.222.222

Non-authoritative answer:
Name:    barbadosbingo.com
Addresses:  ::ffff:146.112.61.106
          146.112.61.106

> server 8.8.8.8
Default Server:  dns.google
Address:  8.8.8.8

> allbritishcasino.com
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    allbritishcasino.com
Addresses:  149.126.77.135
          185.11.125.135

> barbadosbingo.com
Server:  dns.google
Address:  8.8.8.8

Non-authoritative answer:
Name:    barbadosbingo.com
Addresses:  104.21.8.83
          172.67.130.99

Some info on using DoH with OpenDNS:

https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS

The problem with trying to deal with DNSoHTTPS is that its again a client-side option, and if you are working client side it makes more sense to have an actual application that can block the sites outright rather than relying on DNS, as preventing the client from even attempting to access the site is the only foolproof way to begin with.

[heavyrain]

Seems to work ok. Is there anyway to remove this on the block page though? I set up a custom message and it's still there.

[heavyrain]

lol. The biggest site https://www.national-lottery.co.uk/ isn't classed as gambling. It's under "lotteries" but you can't select lotteries in OpenDNS...

Honestly feels like these companies want people to gamble.

[Alex Atkin UK]

How bizarre, I mean I could kinda understand being able to block Casinos, Slots and Lotteries individually but to not include them all in Gambling is dumb.