fcisler
Premium
join:2004-06-14
Riverhead, NY | reply to Safemaster
Re: OPENDNS
Except they (opendns) also redirect invalid DNS lookups.
Try it. I won't use ANY DNS which returns ANYTHING but
"NOT VALID" on a lookup of afiaf8wq8r23.com (or any invalid domain). Opendns will return 208.69.32.130.
Nope...sorry... |
|
tdwr
@faa.gov
| what you been smoking?
Results for psychobabbleafiaf8wq8r23.com
United States
New York, New York, USA Palo Alto, California, USA
DID NOT RESOLVE DID NOT RESOLVE
Seattle, Washington, USA Washington, DC, USA
DID NOT RESOLVE DID NOT RESOLVE
Europe
London, England, UK
DID NOT RESOLVE
None of our locations could resolve this domain.
Try "Refresh the cache" first. That will fix problem #1 below.
Four possibilities:
Domain was recently moved and the new address has not propagated.
Domain does not exist in DNS.
Domain's nameservers have problems, temporary or otherwise.
There is a problem with a record on OpenDNS servers. |
|
tyscoj
join:2002-06-17
Fort Pierce, FL
| reply to fcisler
said by fcisler  :Except they (opendns) also redirect invalid DNS lookups. Try it. I won't use ANY DNS which returns ANYTHING but "NOT VALID" on a lookup of afiaf8wq8r23.com (or any invalid domain). Opendns will return 208.69.32.130. Nope...sorry... This is a setting that you have enabled for your network. It can be turned off via the OpenDNS site...along with a few other options. |
|
quatrix
Premium
join:2005-02-11
Davie, FL
1 edit | reply to fcisler
EDIT: tyscoj beat me to it.
Have you tried this?
»www.opendns.com/faq/#change_prefs
How do I turn off phishing protection or typo correction?
Create a free account to manage your network preferences. |
|
fcisler
Premium
join:2004-06-14
Riverhead, NY | Nope....i prefer not to rely on such a hack as this (and it IS a hack, as it's got to check my account to get my IP, and then put my IP on i guess a "safe list") blah blah blah....
I just run my own DNS server and cache from 4.2.2.1. |
|
koolkid1563
Premium,MVM
join:2005-11-06
Powell, WY
clubs:
 ·Bresnan Online
| said by fcisler :and it IS a hack, as it's got to check my account to get my IP So, what you are saying is that EVERY website (including this one) hacks into your account to grab your IP...not true |
|
fcisler
Premium
join:2004-06-14
Riverhead, NY
1 edit | Wow...way to completely misread my post. No, I don't think or assume that. I also didn't say "HACKS", as in the sense I'm going to assume that you mean - I said hack. Here's a definition:
1. Originally, a quick job that produces what is needed, but not well.
Perfect definition in this case.
It IS a hack as there is NO, read it, NO, means for authentication via DNS. In otherwords - when I request a result from OpenDNS - it is identical to YOUR request, with the exception of our IP address'.
Now...it IS a hack that they will then have THEIR DNS SERVER check a database to find MY IP to find that I OPTED OUT of their bogus domain forwarding.
You are completely off in your assumption - I don't see OpenDNS as having ANY OTHER WAY to "fix" the results than those steps posted. If you have any other inside info - please post it.....but I don't ever recall seeing ANY OTHER DNS do that, unless specifically designed to. |
|
davidu
join:2006-12-28
San Francisco, CA
| said by fcisler :It IS a hack as there is NO, read it, NO, means for authentication via DNS. In otherwords - when I request a result from OpenDNS - it is identical to YOUR request, with the exception of our IP address'. Now...it IS a hack that they will then have THEIR DNS SERVER check a database to find MY IP to find that I OPTED OUT of their bogus domain forwarding. You are completely off in your assumption - I don't see OpenDNS as having ANY OTHER WAY to "fix" the results than those steps posted. If you have any other inside info - please post it.....but I don't ever recall seeing ANY OTHER DNS do that, unless specifically designed to. There's more than just your IP address. There's the query_id mux'd in there along with some other request-specific bits that make it hard to forge a reply from us. That said, this is NO different from the way any other DNS server works. UDP is stateless and that's the name of the game.
That said, we do base preferences on your src_addr. It works very very well. It's not at all a hack just because it's new to you. It was far from a quick job and it does the job well. So well in fact that others are trying to figure out how to emulate it, including BIND.
-david |
|
