Because you cannot ban it in both places at the same time. If you ban it in diversion, then it sounds like skynet is unable to resolve the address for canovel.com. This is especially true if you have your router setup as local DNS cache. Try removing it from diversion, and then adding it to skynet. Other wise, diversion is already sharing it with skynet in the shared lists and you cannot ban it twice.I tried to ban canovel.com from Skynet but it does work. I can ban it from Diversion, however.
Only the whitelist is shared between Diversion and Skynet.Because you cannot ban it in both places at the same time. If you ban it in diversion, then it sounds like skynet is unable to resolve the address for canovel.com. This is especially true if you have your router setup as local DNS cache. Try removing it from diversion, and then adding it to skynet. Other wise, diversion is already sharing it with skynet in the shared lists and you cannot ban it twice.
So then it sounds like the user has "local caching resolver" enabled. Which means Diversion is blocking skynets attempt to locally resolve the IP address of canovel.com. In this scenario, the user needs to choose where they wish to block at. IfOnly the whitelist is shared between Diversion and Skynet.
canovel.com
is creating a firewall level concern, then block there instead of diversion. If you are concerned about not wanting to be able to resolve canovel.com
, then block with diversion.can you please confirm that you have "Wan: Use local caching DNS server as system resolver" set to no please, like the image below demonstrates.I did not ban on both Skynet and Diversion. I just tested to see what works. I just tried some popular sites like nytimes.com. I can ban it from the router's firewall (AC68u 386.11 FW), or from Diversion but cannot ban it from Skynet. Can someone test it on your own router?
Which page is the setting located please? I can't find the setting under the WAN -> Internet Connection page. Thanks.can you please confirm that you have "Wan: Use local caching DNS server as system resolver" set to no please, like the image below demonstrates.
View attachment 51636
And then try doing what you are doing?
What is your wan DNS 1 and wan DNS 2 set to? And can you also please share a screenshot of your skynet menu?I found it now. It's under Tools -> Other Settings. It was set "no" the whole time. I did not change it.
View attachment 51638
canovel.com
is just one domain that utilizes these CDN IP addresses, other services may also share these same IP addresses which may break your future access to Content Delivery Networks simply for blocking this one domain at the firewall.So, just block 'em with diversion then. You don't really want to mess with the CDNwhitelisting feature of skynet because it will break other things as well that you may consider important if you turn it off.@SomeWhereOverTheRainBow
Thank so much for helping.
I am using the DNS from my ISP (Comcast).
I tried Google's before. It did not work either.
Skynet not able to ban many different domain nytimes.com, espn.com, etc. I can block them from the router URL Filter or Diversion black list.
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!