5

The first question is: How it works?

And the main question is how to remove spying and traffic sniffing things from the Mac.

enter image description here

I've uninstalled Microsoft Corporate Portal, restarted, but it didn't change anything.

Clearly, we see that when I open a browser and navigate to http://pornhub.com (NSFW, obviously) it sends a request to 146.112.61.106:80, this is the problem.

I didn't configure any DNS settings:

enter image description here

macOS Catalina 10.15.1

  • 4
    Flixbus is providing traveling servicies. Are you accessing the Internet from one of their buses (or have you used one of them recently)? – nohillside Nov 28 at 15:53
  • I'd call this an off-topic. It's not relevant to Macs at all (obviously). – poige Nov 28 at 16:00
  • 2
    @poige This is totally on topic. Using a mac makes this on topic. Feel free to ask on Ask Different Meta if you’re not sure about what’s on or off topic. – bmike Nov 28 at 18:13
  • If I use SSH from Mac to Solaris feel free to answer questions about Solaris here — it's perfectly valid. Using Mac makes it! – poige Nov 28 at 23:36
  • 3
    Is at all possible to not use porn as the example? – D. Ben Knoble Nov 29 at 4:37
3

Your assumption that the mac is blocking this could be incorrect. It also could be a VPN software like Cisco AnyConnect which uses OpenDNS servers to ignore the local DNS servers and settings.

By the screen shot, Your mac is trusting the router 192.168.1.1 to filter all your traffic, and that router is the item that’s configured to filter some sites.

If you can’t find some network software that installs a kernel extension or uses VPN hooks / network filtering in Catalina, the next step is to look at the group that runs your network setup? You will need to discuss with them how they’re configured the filters that direct traffic.

Lucky for you, they left a calling cart there in the block page - it-security@flixbus.com

Perhaps they have a log in process to ensure you’re not a minor. Think of this like mailing a package. If your mail service goes through a company that checks each address and blocks delivery to some, you would need to either get them to change their rules for your packages or choose another company.

In net-neutrality terms - you need a VPN or different agreement or a different DNS provider.

If this filtering is likely legally mandated in your country, check with your lawyer before you try to get around a content filter block for minors. We are not lawyers and can’t be your lawyer, but this is a very topical subject about freedom, censorship and the internet. Good on you for learning about how your privacy works. If you’re not a minor - vote for net neutrality and better transparency from your IT setup team. If you are a minor, get ready to vote and this is what algorithms and surveillance looks like in the 21st century.

  • 2
    The issue was in the Cisco AnyConnect Secure Mobility Client. I forgot that some time ago I needed it once. Now I didn't find a way how to keep it installed but disabled, so I simply uninstall it completely from the system using Cisco uninstaller and then CleanMyMac utility. It works like a charm! Now I'm happy pornhub user :) – ieXcept Nov 28 at 18:03
  • @ieXcept So I was totally wrong - I’ve edited this to explain how Cisco (which owns OpenDNS now) doesn’t even use the displayed DNS server and tunnels your traffic to their filtering servers. The block wasn’t on your mac, but the software that channeled all your lookups to the blocking party was installed locally. – bmike Nov 28 at 18:12
3

DNS stands for Domain Name System. It takes your human-readable URL (e.g. google.com) and converts it to a numerical IP address for your computer to read (e.g. 172.217.11.14).

It looks like the DNS settings on your router are pointing to OpenDNS servers. OpenDNS is a free content-filtering service that prevents access to adult/malicious sites and is not a spying/sniffing tool (in reference to your second question). Basically, when your computer tells OpenDNS "Hey, look up this website for me," OpenDNS compares the website against a list of adult/malicious sites and if it is on the list, it tells your computer "no, you can't access that website."

To no longer use OpenDNS:

If you have access to your router's configuration page, you can change the DNS settings to point to other DNS servers (e.g. 8.8.8.8 and 8.8.4.4 are Google's free DNS servers you can use.)

If you don't have access to your router's configuration page, and as long as there are no rules on the router to prevent it, you should be able to enter a different DNS server address in your Mac DNS settings (which you have pulled up in your last screenshot). Click on the "+" button and put in the two Google DNS servers mentioned above.

  • OpenDNS is now owned by Cisco and can be non-free / paid - everything you wrote is correct. Rather than edit your answer I put one up - there may be legal issues at hand if this is state sponsored / legal filtering and not a parent (where there are familial issues for sure around pornography). – bmike Nov 28 at 15:51

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .