SECURE DNS

[bob3160]

@magdiel1975 post:20

@Rednose post:19

magdiel1975,

Did you read my previous post ? Your question is router related, not Avast! related.
You will get better help on a forum with support for routers

Greetz, Red.

Yes… I read the previous post… I came from othe router forums and I was told that the ONLY way to be able to block AVAST DNS is to block Avast’s DNS IP… BUT… in order to block those, I NEED THOSE IPs… AND THE ONLY way to get those IPs is FROM AVAST!!!

Not sure how many times Im gonna have to say that… it seems that you guys are the ones NOT reading previous posts.

Submit a support ticket via here https://support.avast.com/Tickets/Submit

[lukor]

Hi guys,
I understand the trouble here - but this is exactly what SecureDNS is supposed to do. If there is a device or configuration on the network (e.g. router) that modifies DNS resolves (such as instead of a porn site returns a blocked-page, or instead of your bank site returns a scam page), SecureDns is supposed to give you the right IP. What I see here is that it is working correctly. It is very hard to tell these two cases apart on our side - unless we would also provide the parental control part of the service.

Please, write me an email and I can (most probably) provide you with the current list of IPs used for Secure DNS at this moment - but this is a dynamic service, we add and remove servers based on their load, so it is not a static list.

It also shows, that any application that really needs to visit certain sites can do that, no matter what DNS server you have configured on the router. If we are talking about the computers you own and manage, then it seems to be that the best solution is really uninstalling SecureDNS. If we are talking about computers that you don’t own and anyone can install any software on it (avast or other) - then blacklisting our IPs on the router would only help against SecureDNS, other methods of obtaining the DNS address similar to ours would still go through.

Lukas.

[system]

@lukor post:22

Hi guys,
I understand the trouble here - but this is exactly what SecureDNS is supposed to do. If there is a device or configuration on the network (e.g. router) that modifies DNS resolves (such as instead of a porn site returns a blocked-page, or instead of your bank site returns a scam page), SecureDns is supposed to give you the right IP. What I see here is that it is working correctly. It is very hard to tell these two cases apart on our side - unless we would also provide the parental control part of the service.

Please, write me an email and I can (most probably) provide you with the current list of IPs used for Secure DNS at this moment - but this is a dynamic service, we add and remove servers based on their load, so it is not a static list.

It also shows, that any application that really needs to visit certain sites can do that, no matter what DNS server you have configured on the router. If we are talking about the computers you own and manage, then it seems to be that the best solution is really uninstalling SecureDNS. If we are talking about computers that you don’t own and anyone can install any software on it (avast or other) - then blacklisting our IPs on the router would only help against SecureDNS, other methods of obtaining the DNS address similar to ours would still go through.

Lukas.

Thanks Lukas… I sent you a PM.

[lukor]

Hi guys,

as I have just described in greater detail to magdiel in pm, I’ve consulted this with the backend team and have found out that the server list for secureDNS is very dynamic and is shared with many other services in avast. Some of these are unrelated to the secureDNS functionality and are essential for correct behavior. Therefore I wasn’t able to provide magdiel any list suitable for blocking on the router. Sorry for the confusion.

The only suggestion here is to uninstall SecureDNS provider on the machines and prevent reinstallation with proper admin rights setup and/or password protection of the avast UI.

Lukas.

[system]

Thanks, but that suggestion is only for computers I have control of, not anyone else’s that connects to my network. I feel this feature of Avast very intruding. Iknow it’s purpose is to “protect” the user, but it should NOT intrude on another network.

This is like letting guests in your house, then some of them are snorting cocaine in your bathroom or some place I can’t see them.
I welcome folks to my house, but I want to have control of what they can do IN MY HOUSE… same applies to the internet access I provide to them… I want to have control since I am the provider of it.

[lukor]

The same applies to other software any visitor might be using on his PC that also bypasses your dns based protection, such as browsing through a VPN or http proxy.

[Bob4]

Starting last week, the internet connection from my personal workstation to my Outlook Web App account for work (https:/owa.shsst.edu) began to be blocked. I tracked the block to Secure DNS. Unlike other AVAST! shields, I cannot configure exclusions. My interim approach is to turn off Secure DNS. Any alternative suggestions?

[Pondus]

@Bob4 post:27

Starting last week, the internet connection from my personal workstation to my Outlook Web App account for work (https:/owa.shsst.edu) began to be blocked. I tracked the block to Secure DNS. Unlike other AVAST! shields, I cannot configure exclusions. My interim approach is to turn off Secure DNS. Any alternative suggestions?

Is there a message from avast? … if so what does it say

[bob3160]

@Bob4 post:27

Starting last week, the internet connection from my personal workstation to my Outlook Web App account for work (https:/owa.shsst.edu) began to be blocked. I tracked the block to Secure DNS. Unlike other AVAST! shields, I cannot configure exclusions. My interim approach is to turn off Secure DNS. Any alternative suggestions?

As suggested by Avast, uninstall Secure DNS.

[Bob4]

Reply to Pondus and bob3160,

Pondus: Just the standard “Server not found” browser message.

bob3160: Thanks for the suggestion. I’ll uninstall/reinstall w/o Secure DNS next time I’m doing some maintenance on the machine.

[bob3160]

@Bob4 post:30

Reply to Pondus and bob3160,

Pondus: Just the standard “Server not found” browser message.

bob3160: Thanks for the suggestion. I’ll uninstall/reinstall w/o Secure DNS next time I’m doing some maintenance on the machine.

Simply go to programs and features, select avast and then select change. Uncheck what you don’t want, when the reboot the system after the operation finishes.