Re: China blocking DNS servers

["H. Morrow Long" <morrow.long () YALE EDU>]

We had the same problem here in the fall of 2003 starting around
September.

Our DNS servers couldn't talk to some of the .cn DNS servers (and vice
versa).

Our President (who was making a trip to China) initiated talks at a
fairly high
diplomatic level and the problem (mysteriously) disappeared shortly
after.

This was a topic of discussion on the CSG/virtnet list.

- H. Morrow Long
  Dir. InfoSec
  Yale Univ., ITS

On Jan 6, 2004, at 8:58 AM, Liudvikas Bukys wrote:
> My university and a number of others are apparently having
> some DNS server traffic blocked by some Chinese ISPs.
>
> There is an excellent summary of the situation at:
>   <http://cyber.law.harvard.edu/filtering/china/>
> (this includes a real-time test interface that unfortunately,
> at the moment, seems to classify all results as "indeterminate")
> and there are related recent articles at:
>   <http://www.mail-archive.com/ip () v2 listbox com/msg00290.html>
>
> <http://www.politechbot.com/pipermail/politech/2003-November/
> 000212.html>
>
> It was noticed here because there were some complaints from
> potential Chinese applicants, followed by a remarkably low number
> of Chinese applicants on a particular deadline.  For any of our
> institutions seeking Chinese applicants, this is a business-critical
> outage.
>
>
> For the workgroups:
>
> * One technical countermeasure is to beef up secondary DNS servers,
>   particularly with high-volume DNS services (Akamai or UltraDNS?)
>   that may be less likely to be blocked.  Has anyone looked into
>   this angle?
>
> * (Short-term measures could include migrating DNS servers to
>   unblocked IP addresses -- an annoying and messy shell game.)
>
> * Are the EDUCAUSE .edu operators aware of this issue?
>   Any recommendations from them?  (How does one contact them?)
>
> **********
> Participation and subscription information for this EDUCAUSE
> Discussion Group discussion list can be found at
> http://www.educause.edu/cg/.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.

Attachment: smime.p7s
Description: