 seropith Rou Premium join:2002-11-12 El Paso, TX clubs:  1 edit | DNS Server Broken
Can Embarq run a second set of servers I can configure my system to use that does not redirect failed queries. This is breaking functionality for some services I run on my home system. |
|
 robertfl Premium join:2005-10-10 Mary Esther, FL 1 edit | Re: DNS Server Hijacking
put 4.2.2.3 and 4.2.2.2 in your DNS servers. You all should refuse to use any ISP's DNS servers especially since they are screwing up with connectivity.
(why we need network neutrality)
-Rob |
|
 seropith Rou Premium join:2002-11-12 El Paso, TX clubs:  | Can you give me some more information on those addresses? Are those L3's official name servers? (could not find anything on the L3 site) |
|
 broadjon
join:2004-08-09 Sebring, FL | reply to seropith Its fast! |
|
 sestrada
join:2008-01-01
·Embarq
| reply to seropith Can Embarq run a second set of servers I can configure my system to use that does not redirect failed queries. A number of posters like myself have been trying to pursuade the Embarq folks for the last couple of months to do that, but their representatives here so far have been silent to the requests - suggesting the answer is no.
You may want to check out some of the servers listed here »www.baddns.com/public.html - and file a complaint - »www.consumeraffairs.com/news04/2···rch.html - since we don't have an effective way to opt out.
|
|
 scooper
join:2000-07-11 Youngsville, NC
| reply to seropith Good grief people - if you don't like the DNS redirects - you have several options.
#1 - find another source of network ones - like www.opendns.com, the 4.2.2.x series (x = 1,2,3,4).
#2 - run your own DNS server. Not too hard to do with Windows server since Windows 2000. Linix PCs can also work as DNS servers.
#3 - theres at least one utility out there that lets your PC act like a DNS server. |
|
 seropith Rou Premium join:2002-11-12 El Paso, TX clubs: 
·Embarq
1 edit | said by scooper :Good grief people - if you don't like the DNS redirects - you have several options. #1 - find another source of network ones - like www.opendns.com, the 4.2.2.x series (x = 1,2,3,4). #2 - run your own DNS server. Not too hard to do with Windows server since Windows 2000. Linix PCs can also work as DNS servers. #3 - theres at least one utility out there that lets your PC act like a DNS server. But why? When I can ask the service to run a good DNS for me. I am the customer, right? I don't think my request was so much out of line as to elicit a "good grief people".
If I don't like DNS redirects, I can ask the folks I pay the money to change.
Thanks. |
|
 sestrada
join:2008-01-01
·Embarq
| reply to scooper Good grief people - if you don't like the DNS redirects - you have several options. Maybe today we have options - but maybe not tomorrow.
It's becomeing pretty clear to me that Embarq doesn't value us as customers, but rather sees us as marketing tools to exploit.
Laws that say they have to serve the public good seem meaningless these days, and living here in Mayberry with the only broadband choice being Embarq - gives them all the power they need to do whatever they want with the absence of enforcement of those laws.
That's why competition and net neutrality are very important. |
|
  gatorkram Spelling and Grammer impared Premium join:2002-07-22 Winterville, NC clubs:
·Embarq
·linode
1 edit | reply to seropith The solution to all these DNS issues lies in my post here:
»Middle finger to the man...
And if you didn't already, you might want to offer your feedback in this thread:
»We demand true and correct DNS servers
edit: Added second link
-- Give me bandwidth or give me death! »/testhistory/661871/4f240 |
|
 DrData Premium join:2004-12-31 Apopka, FL
·Embarq
| reply to seropith You could just run Bind (a DNS server) on your computer and never have to worry about what the ISP does. Its easy to install the Windows port of the software. It uses almost no system resources or memory.
If there is enough interest Id be happy to make a zip file and write instructions so anyone can install it. |
|
  gatorkram Spelling and Grammer impared Premium join:2002-07-22 Winterville, NC clubs:
·Embarq
·linode
| said by DrData :You could just run Bind (a DNS server) on your computer and never have to worry about what the ISP does. Its easy to install the Windows port of the software. It uses almost no system resources or memory. If there is enough interest Id be happy to make a zip file and write instructions so anyone can install it. I guess you didn't look at the link I posted in the other topic? -- Give me bandwidth or give me death! »/testhistory/661871/4f240 |
|
  espaeth Digital Plumber Premium,MVM join:2001-04-21 Minneapolis, MN
·voip.ms
·Vitelity VOIP
·Callcentric
·VoiceStick
·ViaTalk
·Comcast
·Embarq
1 edit | said by gatorkram :said by DrData :You could just run Bind (a DNS server) on your computer and never have to worry about what the ISP does. Its easy to install the Windows port of the software. It uses almost no system resources or memory. I guess you didn't look at the link I posted in the other topic? If you're going to recommend running your own server, you should probably mention the caveat that it will slow down your DNS resolution times by several hundred milliseconds.
They're called caching DNS resolvers for a reason. Every DNS record has a Time To Live (TTL) that determines how long the records can be cached. While many A records have values of 3600 seconds (1 hour), sites with lots of redundancy will drop their TTL values down so they can stop sending traffic to a dead network within a few minutes rather than having to wait an hour for the record to time out. For example:
Google 300 second TTL Amazon 60 second TTL Yahoo 300 second TTL DSLR/BBR 3600 second TTL
Why does this matter? Bind, by default, gets aggressive in how it maintains its cache. It starts deleting parent records from the cache after they have no children; so when all sub records of dslreports.com (ie, www) time out Bind will scrap the resolution for the NS records as well. If you go to DSLReports and walk away for an hour, the next time you do a DNS fetch you're going to have to ask the gtld root about the servers for dslreports.com, and then ask those servers for www.dslreports.com. You're going to take a couple hundred milliseconds to do a standard query, whereas sending the request to a busy resolver would only take 20-60ms if it's already in cache.
The advantage of large caching servers is that you're benefiting from the statistical probability that someone else in the world has queried the name you want to resolve within the TTL interval. With popular services like Google, on large caching servers this is a sure thing.
There are many options for resolving DNS servers, with OpenDNS being one of my favorites. By default they do redirection to ad pages to pay for the service just like Embarq does, but if you sign up for a free account you can fully customize everything about how their servers function. They offer unique options like AdultBlocker which will deny access to sites inappropriate for kids, or Phishing blocker which will keep you safe so that even if you accidentally click on a link from a phishing email you won't end up at the website intended to steal your information. Additionally if you want to use the name correction but exclude names that are on your local LAN, they offer the control panel options for that as well. It determines how to apply your configuration based on source IP address, but if you have a dynamic IP you can use their DNS-O-Matic service to make sure OpenDNS gets updated with your current IP address. I personally use OpenDNS on all of my mail servers because they also worked out caching for RBL lookups, so I've seen as much as a 50% reduction in RBL checking duration compared to when I was querying spamcop, spamhaus, and others directly.
If you don't like OpenDNS, I put together a list of various other alternatives here: »Re: We demand true and correct DNS servers
-Eric |
|
  gatorkram Spelling and Grammer impared Premium join:2002-07-22 Winterville, NC clubs:
·Embarq
·linode
| The only time I notice much difference in the resolving speed, is if my upstream is saturated doing something else.
I agree the solution of running your own server, isn't the best solution, but it is the best solution if you want things to work how you expect.
I figured if people were advanced enough to care about setting up their own server, they'd understand how the whole system works, so I didn't feel the need to talk much about the extra steps. I think I did in a different post.
This really goes back to the fact our ISPs should be doing things correctly, so we the end users don't have to do their jobs for them. -- Give me bandwidth or give me death! »/testhistory/661871/4f240 |
|
 sestrada
join:2008-01-01
·Embarq
| I agree the solution of running your own server, isn't the best solution, but it is the best solution if you want things to work how you expect.
Ever hear of cognitive dissonance? »en.wikipedia.org/wiki/Cognitive_dissonance
Comcast can almost get away with their packet injection stunt claiming it's to protect their network from p2p bandwith hogs ruining it for the rest of their customers.
If we all start hitting root servers for untained dns info, what's to stop Embarq from intercepting that traffic, and redirecting it to their own dns - to protect their network by claiming outbound traffic on their level 3 backbones skyrocketed to mutiples of what it used to be, or some other excuse - so to make sure everyone doesn't suffer, they set up their own dns servers - and are redirecting all our dns queries to them, whether we like it or not.
And we're right back where we started.
Let Embarq get away with messing with dns today, and I'm almost certain they'll be messing with more of our internet experience tomorrow.
It's our internet - not theirs. |
|
  gatorkram Spelling and Grammer impared Premium join:2002-07-22 Winterville, NC clubs:
·Embarq
·linode
| If you haven't seen my fight against what they are doing, you just aren't reading the forums..
That said, in the meantime, I plan to keep doing what I am doing, which is doing my own DNS lookups, and to keep saying they should fix their DNS...
I doubt they really give two craps about what we have to say. -- Give me bandwidth or give me death! »/testhistory/661871/4f240 |
|
 hazezilla
join:2006-02-19
| reply to seropith sestrada
You are in control of the DNS you use.
You want the government to control your Internet. Personally I want the government out of my face. I cannot think of anything they have "made better".
If Level3 does not want you to use there DNS you would not have access to it.
But for th 99 out of 100 customers who use the service they do not care about DNS as long as it works. ISPs are going to redirect. It generates money for them.
|
|
 seropith Rou Premium join:2002-11-12 El Paso, TX clubs:  | I just desire Embarq to run a set a clean DNS servers so I don't have to use ones I'm not technically authorized to use (level 3). I wonder if the Embarq techs can speak to this? |
|
  espaeth Digital Plumber Premium,MVM join:2001-04-21 Minneapolis, MN
·voip.ms
·Vitelity VOIP
·Callcentric
·VoiceStick
·ViaTalk
·Comcast
·Embarq
| said by seropith :I just desire Embarq to run a set a clean DNS servers so I don't have to use ones I'm not technically authorized to use (level 3). Then use a set that you are openly encouraged to use:
OpenDNS (requires "typo correct" disabled, or defined exclusions for home machines) 208.67.222.222 208.67.220.220
Tiggee (DNSMadeEasy) DNS resolvers No redirection by default 205.234.170.215 205.234.170.217 |
|
 lycwolf
join:2008-02-08 Marysville, OH
| reply to seropith Re: DNS Server Broken
I found this:
»search.embarq.com/prefs.php
When it take you to the search site there i an option for Opt-Out, but i couldn't click on it, bad code or something. But I got to the link and it lets you disable the redirect. |
|
 seropith Rou Premium join:2002-11-12 El Paso, TX clubs:  1 edit | I see it, but as far as I can tell , this only works for the browser. Queries issued by other programs are still redirected, as it were. |
|