nanog mailing list archives

Re: dns interceptors


From: Bill Weiss <houdini+nanog () clanspum net>
Date: Sun, 14 Feb 2010 12:55:57 -0600

Larry Sheldon(LarrySheldon () cox net)@Sun, Feb 14, 2010 at 11:54:25AM -0600:
On 2/14/2010 11:42 AM, Patrick W. Gilmore wrote:
On Feb 14, 2010, at 12:37 PM, Jason Frisvold wrote:
On Feb 13, 2010, at 4:58 PM, Randy Bush wrote:
i am often on funky networks in funky places.  e.g. the wireless in
changi really sucked friday night.  if i ssh tunneled, it would multiply
the suckiness as tcp would have puked at the loss rate.

You can always run your own local resolver...  Or is there a reason that's unacceptable?

How does that help?  It still sends port 53 requests to the authorities, which will be intercepted.

I don't have access to a trustable network to tunnel to.  (Or at least I
don't know how to.)

http://www.cotse.net/ provides that kind of service at a pretty reasonable
price.

I have no financial interest in that service.  I know the guy who runs it,
and I've used the service before and been really happy with it.

-- 
Bill Weiss


Current thread: