<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 12 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:#1F497D;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link="#0563C1" vlink="#954F72"><div class=WordSection1><p class=MsoNormal><span style='color:#1F497D'>Hi Cory,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>We do use OPLIN’s OpenDNS subscription, and have an Active Directory environment. In an AD environment, I would avoid changing the individual domain member computers’ DNS settings to OpenDNS, for the reason you said –it breaks the client-server domain relationship. I leave all client computers DNS settings pointing to the server hosting DNS for that domain. Instead, set OpenDNS as the only DNS servers on your edge device (any kind), and configure your OpenDNS account to point to your public IP. Your computers inside the domain (and the AD servers) will still be filtered by OpenDNS, since the Internet is coming through that edge device.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>In order to stay CIPA-compliant (for E-rate purposes, etc), but avoid filtering becoming a problem for staff, I set up an override code that can disable filtering using a setting in OpenDNS’s dashboard. I then give this code to the staff, so they can turn filtering off for their workstation as needed. The override is cookie-based, so it can persist on staff machines, but will be automatically deleted from patron workstations at the end of the user session. (Ideal!) I set the code to expire and be updated periodically.<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Hope that helps,<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Jessica D. Dooley<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>IT Specialist<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>Adams County Public Library<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>937-587-2085<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'>dooleyje@oplin.org<o:p></o:p></span></p><p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> oplinlist-bounces@lists.oplin.org [mailto:oplinlist-bounces@lists.oplin.org] <b>On Behalf Of </b>Cory Dahlinghaus<br><b>Sent:</b> Wednesday, June 18, 2014 1:27 PM<br><b>To:</b> oplinlist@lists.oplin.org<br><b>Subject:</b> [OPLINLIST] FW: OpenDNS Question<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Hello,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>How many libraries are using OpenDNS provided by OPLIN?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>If so, are you filtering all computers or just certain workstations? <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>The wifi computers was easy to set up since I could just add the OpenDNS servers to the router.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>I’m having trouble coming up with a way to filter our PCReservation computers since they are connected to the domain. I only need to filter 9 domain computers so I can’t add the forwarders to the DNS or all get blocked. If I change the DNS settings locally on the workstation, then the workstation won’t resolve with the domain. Maybe I am just making it to difficult.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Any suggestion?<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'> <o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Cory Dahlinghaus<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:12.0pt;color:black'>Wright Memorial Public Library<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p></div></body></html>