Important: firewall changes may be required for Umbrella and OpenDNS users

Overview

The IP address of several Umbrella and OpenDNS domains and subdomains will be changing. Please note, these domains and IP addresses are always allowed in the tunnel and supersede any user-defined firewall rules in the Umbrella Dashboard's Firewall Policy for all customers. This change will affect users who lock down firewalls to specific IP addresses.

Details

Currently the following subdomains resolve to either 67.215.92.210 or to 146.112.255.155 (IPv4):

• api-ipv4.opendns.com
• api-ipv4.umbrella.com
• api.opendns.com
• cachecheck.opendns.com
• community.opendns.com
• dashboard-ipv4.opendns.com
• dashboard-ipv4.umbrella.com
• dashboard.opendns.com
• dashboard.umbrella.com
• dashboard2.opendns.com
• dashboard2.umbrella.com
• dns-o-matic.com
• dns-o-matic.net
• dns-o-matic.org
• dns-omatic.com
• dnsfeed.com
• dnso-matic.com
• dnsomatic.com
• dnsomatic.net
• dnsomatic.org
• domain.opendns.com
• dsn-o-matic.com
• dsnomatic.com
• exampleadultsite.com
• examplebotnetdomain.com
• examplemalwaredomain.com
• images.opendns.com
• internetbadgirls.com
• internetbadguys.com
• login.opendns.com
• login.umbrella.com
• netgear.opendns.com
• shared.opendns.com
• shared.umbrella.com
• tools.opendns.com
• tools.umbrella.com
• twilio.opendns.com
• updates.opendns.com
• updates.umbrella.com
• updatesdnsomatic.com
• www.dnsomatic.com
• www.exampleadultsite.com
• www.examplebotnetdomain.com
• www.examplemalwaredomain.com
• www.internetbadgirls.com
• www.internetbadguys.com

And currently the following subdomains resolve to 2620:0:cc1:115::210 (IPv6):

• api-ipv6.opendns.com
• api-ipv6.umbrella.com
• community.ipv6.opendns.com
• dashboard2.ipv6.opendns.com
• shared.ipv6.opendns.com
• twilio.ipv6.opendns.com

On or shortly after November 19 2019 they will resolve to:

67.215.92.210 or the CIDR range 146.112.255.152/29 (IPv4)

or to:

2620:0:cc1:115::210 or the CIDR range 2a04:e4c7:ffff::20/125 (IPv6)

We recommend that Umbrella and OpenDNS users allow the appropriate IP addresses in firewalls to ensure correct functionality.

(Note:  an earlier version of this announcement incorrectly stated that the IPv4 CIDR range would be 146.112.255.152/28; the correct IPv4 CIDR range is 146.112.255.152/29.)