SECURE DNS

This Avast Secure DNS setting is not a good thing to have if you have any type of parental controls on your network…

example, I use OpenDNS, and if “secure DNS” is enabled, it bypasses all filtration from OpenDNS and my network is free as a bird and anyone with this “secured DNS” feature enabled on their computers can go to any website they wish…

How can a piece of software like a Avast circumvent the DNS settings I have a t the router level? - I have even enabled “Intercept port 53” on my router which prevents users from using their own dns server…yet, Avast can bypass it like it was nothing.

Not very good Avast… not very good at all.

Which port or IP does Avast use for the Secure DNS… I need to be able to block this on my router…please help.

if you have settup your router with OpenDND the i would just turn off avast dns

thanks for the reply, but you’re completely missing my point.

Go to avast!UI->click settings->click active protection->click secure dns button slider->click disable permanently!

Multiple User accounts or Multiple computers that you have that you want to disable secure dns follow the same steps above. 8)

Maybe my post is too difficult to understand… I say this because it’s already been 2 people responding the same way.
I’m going to try this again…

I DO NOT need t know how to disable Avast Secure DNS on a computer… I KNOW HOW TO DO THAT!!! - What I need to know is how to BLOCK AVAST SECURE DNS FROM BYPASSING MY ROUTER!!! - MEANING, is there a port or IP I need to block in my router to prevent anyone with Secure DNS enabled from bypassing my router… I want anyone connected to my router to be subjected to the DNS I have set at the router level.

as I stated on my first post… I use OpenDNS to block porn… I use DNS IP of 208.67.222.123 on my router, which means that any computer that connects to my router will be subjected to the filtering… but, if any computer is using AVAST Secure DNS…then it completely bypasses OpenDNS filter…which means, they can go to any website they wish while connected to my network.

BUMP???

Avast! 2015 Security Suite Secure DNS and OpenDNS
https://support.opendns.com/entries/57943894-Avast-2015-Security-Suite-Secure-DNS-and-OpenDNS

read user comments …

So basically there is no way to block AVAST DNS on the router.

Not to be anti-Avast but in that situation maybe best to not let people install avast at all if you need that much control of your Network. They can use the windows firewall along with the SPI / NAT router

I get what you’re saying… it’s not really being anti Avast…is just that no software should be able to circumvent the settings of a router, period.
Since I have no control of what the users (guests) in my network do online, that’s why I want to have control of where they can go, but if they have Avast Secure DNS enabled on their computer, it completely bypasses any DNS or router settings…which is not acceptable at all.

There’s got to be a some iptables to block either the IP’s or DNS Avasts uses.

Simple answer:

Secure DNS is part of Active protection in Avast 2015. To enable or disable this feature, go to Settings → Active protection. Next to Secure DNS, click on the ON/OFF switch. If you are turning it off, you can choose whether to do so temporarily or permanently in the menu which appears.
Quote taken from Avast FAQ :slight_smile:

Always perform a custom install.

polonus

The issue is not turning it off…I know how to disable that feature in the settings. I won’t be able to turn it off on a guest computer that connects to my network. … Im trying to block that feature from bypassing my router settings.

and the answer was given to you at OpenDNS support … as seen in my post above

Hi magdiel1975 :slight_smile:

You are asking this in the wrong place. Better ask on a forum like https://www.dslreports.com/forums/all

Greetz, Red.

What answer are you referring to? - That post you mentioned above just talks about disabling the Secure dns feature at the computer level… that’s not the answer because I cannot disable it on someone else’s computer and I wouldn’t want to either… I should not have to go to anybody’s computer to mess with their settings…specially if they are guests at my house.

What answer are you referring to?
The answers given in user comments at the bottom of the page. https://support.opendns.com/entries/57943894-Avast-2015-Security-Suite-Secure-DNS-and-OpenDNS

You must have seen it? … there is one asking the same question as you and using same forum name as you are using here so i assume it is you?

Also read this thread:
https://support.opendns.com/entries/23553235-How-do-I-Disable-OpenDNS-Completely-

polonus

YES!!.. that is me… I had to also ask on that forum because noone here has an answer on how to block Avast DNS from bypassing the router… you keep referring me to the post I made on OpenDns forum, but that does NOT ANSWER MY QUESTION…the only answer I have gotten so far is … “it can’t be done unless I block Avast IPs”… so that is why I came to THIS forum to get AN ANSWER from AVAST since they are the culprit.

magdiel1975,

Did you read my previous post ? Your question is router related, not Avast! related.
You will get better help on a forum with support for routers :slight_smile:

Greetz, Red.

Yes… I read the previous post… I came from othe router forums and I was told that the ONLY way to be able to block AVAST DNS is to block Avast’s DNS IP… BUT… in order to block those, I NEED THOSE IPs… AND THE ONLY way to get those IPs is FROM AVAST!!!

Not sure how many times Im gonna have to say that… it seems that you guys are the ones NOT reading previous posts.