republican-creole
site Search:


 
   
story category
OpenDNS: We're Being Blocked By Verizon Wireless
Wants FCC to act on network neutrality protections
by Karl Bode Wednesday 24-Nov-2010 tags: fcc · business · security · privacy · net-neutrality · consumers
OpenDNS was founded in 2006 and quickly made a lot of fans around here due to their fast, reliable DNS servers and DNS services. It has been a profitable business; in 2008 it was estimated that OpenDNS generates a whopping $20,000 per day off of their DNS redirection relationship with Yahoo. Every DNS outage over the last four years effectively acted as an advertisement for OpenDNS, and the company has grown substantially -- now serving roughly 20 million users.

As ISPs slowly discovered that OpenDNS was eroding a possible revenue stream (redirection portal ads), many ISPs rushed to offer DNS redirection systems of their own -- with various degrees of success. Most ISPs were so blinded by the cash, they implemented the service without adding value, tools, or even informing users. A number of ISPs didn't bother to make sure the "opt out" process worked (cough, Embarq) and others didn't offer "clean" DNS servers for users who didn't want to participate.

Some ISPs may now begin taking a harder stance, if this Washington Post interview with OpenDNS founder David Ulevitch is any indication. According to Ulevitch, OpenDNS is being blocked by Verizon Wireless already, and Ulevitch is concerned that a growing number of landline broadband ISPs are going to begin doing this as well to protect their coffers:

They do not want to see DNS traffic, queries and data streams leaving them. In the way we have monetized domain name services, they want to do what we do. But they aren't an opt-in service like we are, and they can also block us, which is what we are concerned about. And they try to block us in crafty ways. There was a report of an ISP working group whose members said that for "security" reasons, they should block alternative DNS services.

This raises an interesting neutrality situation we'll need to keep an eye on, given that ISPs who block OpenDNS will certainly try to insist it's about security, not money (and will certainly have cherry picked data pie charts to "prove" it). Granted, OpenDNS could just do what companies like Skype and Google have been doing recently -- and throw their neutrality principles out the window in exchange for large bags of money and exclusive service partnerships.

view: topics flat text 
Post a:
page: 1 · 2

syslock
Premium
join:2007-02-03
Honolulu, HI
Reviews:
·Time Warner Cable
·Comcast

Not Cool

My cable provider has had many issues with DNS. My router at home is set to obtain DNS services from other DNS providers.
When their trash was down... I was still able to get to the sites
I needed!

If alternative sites are blocked there is no backup to be able to keep working. That's just wrong!

This practice needs to stop!

56403739
Less than 5 months left
Premium
join:2006-03-08
Naples, FL
kudos:2

Two words

Common Carrier.

The more this bullshit continues, the stronger the case for separating ISPs from the transport.

fifty nine

join:2002-09-25
Sussex, NJ
kudos:2

Re: Two words

said by 56403739:

Common Carrier.

The more this bullshit continues, the stronger the case for separating ISPs from the transport.

Comcast now owns a root server I think. While probably not a big deal, it's symbolic that ISPs basically own the internet.
openbox9
Premium
join:2004-01-26
japan
kudos:2

Re: Two words

said by fifty nine:

it's symbolic that ISPs basically own the internet.

ISPs own their respective networks which make up the Internet. Comcast managing a root server comes with great oversight that can more effectively keep Comcast inline than any government regulation ever will IMO.

fifty nine

join:2002-09-25
Sussex, NJ
kudos:2

Re: Two words

said by openbox9:

said by fifty nine:

it's symbolic that ISPs basically own the internet.

ISPs own their respective networks which make up the Internet. Comcast managing a root server comes with great oversight that can more effectively keep Comcast inline than any government regulation ever will IMO.

That same "oversight" allowed Verisign sitefinder. Yes, they removed it after a letter from ICANN, but they also sued ICANN. It didn't end there. The point was that ICANN didn't flat out say "no" and Verisign didn't listen to them. Comcast similarly sued the FCC to challenge its authority on network neutrality. They won.
openbox9
Premium
join:2004-01-26
japan
kudos:2

Re: Two words

said by fifty nine:

Comcast similarly sued the FCC to challenge its authority on network neutrality. They won.

The Comcast lawsuit was for a different reason and Comcast rightfully one the suit.
bn1221

join:2009-04-29
Cortland, NY

Re: Not Cool

What a crock no wonder my Blackberry and VZ Access card users can't connect anywhere anymore. Verizon's DNS servers suck and can't respond and my users got DNS timeouts

S_engineer
Premium
join:2007-05-16
Chicago, IL

If....

they want the FCC to act, they're in for a long wait. History is proving that this department should just be abolished. It's toothless, and beholdant. Waiting for the FCC to act on behalf of nuetrality is futile!
--
BF69~~~Please stop suffocating gerbils!

Quake110
Premium
join:2003-12-20
Ottawa, ON

Re: If....

Sounds like there CRTC here in Canada where the corrupt officials side with the big Companies.
Stojko
Premium
join:2007-10-20
St John's NL
said by S_engineer:

they want the FCC to act, they're in for a long wait. History is proving that this department should just be abolished. It's toothless, and beholdant. Waiting for the FCC to act on behalf of nuetrality is futile!

Sounds like Canada's CRTC.
old_wiz_60

join:2005-06-03
Bedford, MA
Reviews:
·Verizon FiOS
The FTC is a toothless joke. The telcos/cablecos own enough people in congress to ensure that nothing ever comes of "Net Neutrality", which to the telcos/cablecos is about the same as promoting terrorism. The people in congress will make sure the FTC does nothing real. Not to mention the people that work for the FTC are probably influenced also.

tu6r6ur6

@comcast.net

Re: If....

Easy for you to say, FiOS is in your area...

Linklist
Premium
join:2002-03-03
Longport, NJ
kudos:5

Solution: OpenDNS sue in Federal Court

OpenDNS can turn the heat up on Verizon Wireless claiming they are breaking anti-trust laws and restraining trade by suing in Federal Court. And I am sure they can corral a bunch of state Attny Generals to join the suit.

dsldude08
Premium,VIP
join:2008-01-03
La Crosse, WI
kudos:2

Re: Solution: OpenDNS sue in Federal Court

You are correct. And with all that money OpenDNS makes they can fight Verizon. This type of act by Verizon is childish. If Verizon had good DNS servers then maybe users wouldn't have to switch now would they?

KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK
Let me see.

Who has lawyers out the ying-yang? And who has money to counter (With all that they make on their free service?)

You can see where this option would lead.
--
"Fascism should more properly be called corporatism because it is the merger of state and corporate power." -- Benito Mussolini

GlennAllen

join:2002-11-17
Richmond, VA

Well,

it's not like your local ISP is used to having competition when it comes to providing service.
Walter Dnes

join:2008-01-27
Thornhill, ON
Reviews:
·TekSavvy DSL

Re: Well,

said by GlennAllen:

it's not like your local ISP is used to having competition when it comes to providing service.

s/having competition when it comes to //

it's not like your local ISP is used to providing service.
 

There... fixed it for ya.
amungus
Premium
join:2004-11-26
America

ugly

Between this and "bing" I am glad to be on a smaller carrier...

Curious how many people actually change their DNS on VZW.
Should still be allowed though, kind of weird that they'd bother to block this.

VerizonDNS

@alltel.net

Currently using OpenDNS

I am on Verizon Wireless and I am currently using OpenDNS I switched to OpenDNS whenever Verizon's crap network failed for days at time.

VerizonDNS

@alltel.net

Re: Currently using OpenDNS

I stand corrected, they are "secretly" redirecting my DNS requests now. I guess when I got grandfathered over fully it finally changed.

nslookup -vc www.opendns.com. 208.67.222.222

Server: resolver1.opendns.com
Address: 208.67.222.222

Non-authoritative answer:
Name: www.opendns.com
Address: 208.69.38.150

If your a customer and as angry as I am here is the contact page for our beloved "CEO" make sure you mention the outrageous caps.

»aboutus.vzw.com/leadership/execu···dam.html

Noah Vail
Son made my Avatar
Premium
join:2004-12-10
Lorton, VA
kudos:2
Reviews:
·Bright House

Re: Currently using OpenDNS

said by VerizonDNS :

I stand corrected, they are "secretly" redirecting my DNS requests now.

I'm a little lost. Why do you think you're being redirected?

You sent a query to an OpenDNS server for www.opendns.com
You got a response back from OpenDNS's DNS server, providing the IP.

What am I missing here?

NV
--
Any Goal that is Driven by Animosity, is Empowered through Deceit.
unoriginal

join:2000-07-12
San Diego, CA

Sprint wireless

Can't use OpenDNS with my Sprint smartphone or wireless card either. I don't know if they are blocking either but I've never been able to use anything other than Sprint's dns servers while on their network.

AVD
Respice, Adspice, Prospice
Premium
join:2003-02-06
Onion, NJ
kudos:1

Re: Sprint wireless

said by unoriginal:

Can't use OpenDNS with my Sprint smartphone or wireless card either. I don't know if they are blocking either but I've never been able to use anything other than Sprint's dns servers while on their network.

As far as I can tell, they redirect all DNS requests to their own servers. There is a workaround, but this is the default behavior.
--
standard disclaimers apply.

OneEye

join:2006-04-15
Peachtree City, GA

Lets try something different than the Courts.

Maybe consumers can make their voices heard for Net Neutrality by using their pocket book.

Most consumers have at least two choices for their ISP provider. In my neighborhood, it's AT&T and Comcast.

If one ISP were to become the preferred ISP and all consumers were to switch leaving the other with no customers, fairness would soon rule.

The real question is: How do we get all consumers on board?

Blockfire
Sarcasm is my native tongue

join:2010-02-11
Wichita, KS
kudos:1

Re: Lets try something different than the Courts.

fairness wouldn't rule, it would become a yo-yo effect where one ISP would price hike/gouge and then everyone would go to the other and vice-versa.

OneEye

join:2006-04-15
Peachtree City, GA

Re: Lets try something different than the Courts.

So?

It's for sure the government is not on the side of consumers; the same goes for the courts.

Consumers only choice is "pocketbook rule".

So what if it takes a "yo-yo effect" to get control of the ISPs.

AnonymousGuy

@dslgb.com

Re: Lets try something different than the Courts.

"So what if it takes a "yo-yo effect" to get control of the ISPs."

Sure, that worked very well with with getting political parties to care about voters instead of companies.
VerizonCynic

join:2006-10-25
Lakewood, CA

I support "dumb pipes"

I was on fios with Open DNS. had some ONT issues lately so went back to VZ DNS. I am going to change back soon. None of the techs had anything bad to say about Open DNS.

The fact that "open" google and vz are teaming up makes me veryy worried. I think the google motto of "dont be evil" or some such motto is nonsense. Profit and evil tend to go hand in hand.

Look at how open number portability made wireless a little more competitive. Consumers need and want choice.

KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK

WTH would they pick OpenDNS

An extremely useful service that doesn't threaten them at all.

You can see the future. Without Net Neutrality, we're all in the same boat. I think it's called the Titanic.
--
"Fascism should more properly be called corporatism because it is the merger of state and corporate power." -- Benito Mussolini
devnuller

join:2006-06-10
Cambridge, MA

Re: WTH would they pick OpenDNS

said by KrK:

An extremely useful service that doesn't threaten them at all.

Shot across the bow to see how people react. Verizon would like to see net neutrality apply to all EXCEPT for them. Is it OK for them to block vonage or skype over wireless broadband? What about other Internet services? Why VZW and not FiOS?

Does it matter if it "threatens" them or not? Broadband is broadband is broadband. Wired or wireless. Charge for it what the market will accept, but don't manage it.

KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK

Re: WTH would they pick OpenDNS

It's always about greed.

If some third party company makes a small amount of money providing a useful service, they want that money too, without any of the aforementioned useful service. So they move to just shut them out and down, without consent or considering the wishes of their existing captive users.

America is being destroyed at every level by rampant greed.
--
"Fascism should more properly be called corporatism because it is the merger of state and corporate power." -- Benito Mussolini

FreedomBuild
Well done is better than well said
Premium
join:2004-10-08
Rockford, IL
As long as our system (trusted elected official) are bought and paid for, Its the good ship lolly pop...

Or so they say
Kermee
Premium
join:2006-04-28
Seattle, WA

It's not always black & white...

As a Network Architect for more than a decade... I would be surprised if this would fall under 'network neutrality', even more so since the FCC really doesn't have that much "bite" anyway. Least with the current laws and policies in the United States.

There are many reasons to "block" the use of 3rd party and external DNS servers from an ISP standpoint which includes security (i.e. walled garden, DNS proxying TXT records data, etc.) and forcing a user to use a particular set of DNS servers.

Don't get me wrong... I'm sure VZN is blocking OpenDNS for 'monetary' reasons and not 'security' reasons. But I certainly hope that laws and policies don't over-correct the other way around.

Cheers,
Kermee

MooJohn

join:2005-12-18
Milledgeville, GA
Reviews:
·Windstream

Re: It's not always black & white...

What's next? Requiring the use of only their email service? You can visit sites only hosted by them? Who do they think they are -- 1993 AOL?

I say Don't touch my (DNS) junk!!

If I want to communicate with a remote server over a standardized protocol I should be able to regardless of my ISP.
--
John M - Cranky network guy
chuckkk

join:2001-11-10
Warner Robins, GA
Reviews:
·Cox HSI

Re: It's not always black & white...

"Requiring the use of only their email service"
Cox already does this to many users by blocking common ports used for Email to other than Cox's Email servers. The ports are related to sending email. It's almost a game, in that alternate ports can be used until Cox decides to block them also.

dslcreature
Premium
join:2010-07-10
Seattle, WA
said by Kermee:

As a Network Architect for more than a decade... I would be surprised if this would fall under 'network neutrality'

There are many reasons to "block" the use of 3rd party and external DNS servers from an ISP standpoint which includes security (i.e. walled garden, DNS proxying TXT records data, etc.) and forcing a user to use a particular set of DNS servers.

No sane operator in their right mind uses DNS to implement a walled garden because it does not prevent access to the underlying network and using DNS to implement a captive portal is a non-starter because the CPE, OS and browsers all cache name records. This only causes users to be pissed after they've authenticated and still can't access their favorite web site because of a bogus cached DNS entry that will linger for some time. (Assuming the lowest possible TTL)

If you limit DNS as part of an access control to prevent the user from accessing the outside network.. I don't see how this would still be relevant to this topic regarding what Verizon is doing? What is the reason for still blocking DNS *after* they are granted full access to the Internet?

The only "security" reasons for I see for doing this is a half-assed attempt at mitigating spoofed DNS replies. Reasonable ACLs at the ISP ingress would seem to me to be just as effective, the ISPs name cache can be spoofed just as easily as the clients resolver.

I'm not asserting valid reasons don't exist... I just have no idea what one would actually look like.
brawney
Premium
join:2002-03-02
Frederick, MD

I use the filtering provided by OpenDNS

I use the free filtering service to block unwanted sites for every user in my house. It happens to be free, but they have paid services too. So why should my ISP (Comcast) be allowed to block my access to a service provided by OpenDNS? Is Comcast going to provide the same filtering service for me, for the same price (free)? I know we're not talking about Comcast blocking here, but apparently there is a fear that land line providers will start blocking OpenDNS too.

This is crazy. Its a paid or free opt-in service. Next thing you know the ISP will be able to block my access to YouTube or Flickr or something else.

PapaMidnight

join:2009-01-13
Baltimore, MD

Alternative from Google

I use OpenDNS as my primary DNS servers personally, but just so everyone is aware, Google does provide alternative free dns services for public usage - I happen to use them as my dns backup in case OpenDNS goes down (which it has in the past).

They are:
8.8.8.8
8.8.4.4

»code.google.com/speed/public-dns···ing.html

TamaraB
Question The Current Paradigm
Premium
join:2000-11-08
Da Bronx
Reviews:
·Optimum Online
·Clearwire Wireless

Re: Alternative from Google

I simply use a local bind server on my linux box. It's faster and not prone to any ISP dns outages, snooping, or redirection. Coupled with my always-on VPN, I have achieved true network neutrality for myself.

Bob
--
Would you ever go over to Czechoslovakia, and marry me daughter for me?"

cvrefugee
Premium
join:2003-09-15
Riverside, CA
kudos:7
I've been having slow web browsing for days and I just figured out that AT&T's DNS servers were the culprit. I switched over to Google DNS and everything is much faster. One of my mom's Facebook games will actually load now, lol.

beck
Premium,MVM
join:2002-01-29
On The Road
kudos:1
Reviews:
·Stablehost.com

No wonder

The DNS servers for Verizon wireless are timeout nightmares. I've had to revert to them since I couldn't get OpenDNS to work at all the past month or so.

This really tics me off. IF they can block us using another DNS service, then they can make servers that actually WORK!!!!!

Stupid greedy a**holes.
--
Some people are like slinkies - not really good for much.
But they bring a smile to your face when pushed down the stairs.

dmca 512 i

@sonnet.com

Many ISPs will soon block 3rd party DNS servers

Some of the IPv6 migration solutions require DNS servers to intercept requests, and return forged responses to the ISPs 4to6 proxies. The responses are coordinated with the proxy, so that the proxy knows where the actual IPv6 destination is. 6to4 might do the same thing, certainly the reverse variation would be useful for IPv6-only users to access IPv4 sites.

But the key to the whole thing is that DNS requests have to be thru the ISPs DNS server.

Verizon Wireless may be in the beginning stages of this implementation.
Ulmo

join:2005-09-22
San Jose, CA

Not pure Internet if DNS blocked

It's not pure Internet if the DNS is blocked. Since they are editing the connection, they are no longer Common Carriers, and also, they have changed the terms of service of the connection and therefore you have no ETF if you quit the contract. (Be sure to send a USPS letter in writing to customer service AND the corporate office and get a certified return receipt, then follow up in 10 days by phone to cancel service "per the letter to avoid ETF", and don't wait any longer for cancellation of service, and if they don't respond, followup with another letter stating that you're not waiting for them to follow the law and you will only send what is due until they received the original letter.)

I have an app on my Android called "AdFree" that updates the software on the phone itself to block advertisements. So, therefore, we can go one step closer to block Verizon's ads. (That program requires root access to your Android.)

Also, OpenDNS can use encrypted UDP or TCP protocol to serve queries. A tcp protocol would just keep an open channel or two between the device and OpenDNS's servers the whole time the device is on (a second channel would be used if the first doesn't respond quickly, thus short-circuiting the delay retries with TCP; the normal DNS protocol -> TCP engine can round-robin those queries, slowly bringing up new TCP connections and reaping old ones as needed). It could be on port 443 or whatever. OpenDNS can rent IP#s from various other ISPs to mask their servers.

ComcastIL

@comcast.net

Don't like Open DNS

Actually I found Open DNS slower in Ping response and had more issues with Domain's then Comcast's own DNS servers. I think this is probably due to Open DNS and their rapid expansion. My advise is too just use your ISP's DNS default unless you find a issue with it.
Personally I think way too many people give the advice of switching to a separate DNS to solve problems not related to a DNS issue.

syslock
Premium
join:2007-02-03
Honolulu, HI
Reviews:
·Time Warner Cable
·Comcast

Re: Don't lBike Open DNS

I did find a problem with it. That's why I stopped using the big C's junk when they had all those massive DNS outages a few years back.

Burn me once shame on you....
You are not going to burn me twice.

You can spin it now all you want....
That was then... This is Comcast.
Same Old Same Old from Philly and the departments that
fight with another in West Chester.

Having a backup way to be able to stay on line when
things go down is important to me.
scooper

join:2000-07-11
Youngsville, NC
kudos:2
Reviews:
·Time Warner Cable
·Embarq Now Centu..

Re: Don't like Open DNS

Actually - my usual advise is to use several different ones - openDNS as one, my ISP's DNS as another, Google's as another, the 4.1.1.x as yet another. The idea here is to have seamless transition to different DNS. Obviously - you would want to put your fastest DNS servers as the first ones to goto. Steve Gibson has a tool to help determine that on his site (grc.com).

And yes - I have in the past run my own caching DNS servers . It's a really great idea especially if you go to the same sites over and over (such as DSLReports ). But until your cache is built, it's not much better than going to the root servers.

Selenia
I love Debian
Premium
join:2006-09-22
Lanesboro, MA
kudos:2

Has David gone off the deep end?

I use OpenDNS daily over Verizon Wireless and never an issue. Even the landing page of OpenDNS works when you typo. Tested over phone and laptop(phone is AT&T, but running over Verizon Wireless Mifi2200, just like the laptop).
--
The new Sony rootkit-Using the ability to remove features you paid for. What's next? Boycott Sony products »[Rant] ps3 update = no more Linux

Linklist
Premium
join:2002-03-03
Longport, NJ
kudos:5

Re: Has David gone off the deep end?

said by Selenia:

I use OpenDNS daily over Verizon Wireless and never an issue. Even the landing page of OpenDNS works when you typo. Tested over phone and laptop(phone is AT&T, but running over Verizon Wireless Mifi2200, just like the laptop).

The Washington Post story was updated to show claim by Verizon that they are not blocking OpenDNS.

update: A Verizon Wireless spokeswoman said Monday its network engineers "see no issue from our end" and that the service isn't being blocked.


Linklist
Premium
join:2002-03-03
Longport, NJ
kudos:5

Another Net Neutrality "violation" debunked.

Another Net Neutrality "violation" debunked.

»www.digitalsociety.org/2010/11/a···ebunked/

In yet another case of a made-up conspiracy like the Craigslist blocking incident to drum up support for Internet regulation, OpenDNS founder David Ulevitch is misleading the public about Verizon Wireless supposedly blocking OpenDNS servers. Ulevitch claims that Verizon Wireless is blocking OpenDNS which is an ad-supported Domain Name Service (DNS).

I’ve asked various people to test OpenDNS blocking who have access to Verizon Wireless and I’ve gotten a response from someone within Verizon. He tested his Verizon Wireless data service from a PC tethered to his Droid (Android OS) phone and verified that OpenDNS is not blocked. To verify this personally, I went to a Verizon Wireless store and tested a netbook with built-in Verizon 3G access. I successfully queried an OpenDNS server using the “nslookup” command proving that Verizon Wireless was not blocking access to OpenDNS. I also bought a 2-year contract with free MiFi device and tested it on my own computer from home and OpenDNS still works perfectly fine.

So what in the world could Ulevitch be complaining about? Is it the Android OS based phones which has nothing to do with the network? I quick Google search on Android OS DNS settings is that it’s easy to set in Wi-Fi but the setting is less exposed in the mobile network interface (3G). But the 5th search result pointing to a forum post at XDA-Developers indicates that the setting can be configured with the “setprop” command in Android OS (which is a Linux based operating system).

Furthermore, the bigger threat and alternative to OpenDNS is Google DNS which is a faster DNS service because Google owns more servers that are distributed across the Internet. So it’s Google that Mr. Ulevitch should be concerned about and not some imaginary blocking at Verizon Wireless.

avgbowler6

join:2005-08-10
Venice, CA

It Appears that Verizon Fios in Cali is Also....

It appears that Verizon Fios is doing something to screw with people using Open DNS. When I switched my DNS this weekend, everything started slowing down. I went back to my old settings, and my speeds are going back up.

Sunday, 19-May 10:21:04 Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo
over 13.5 years online © 1999-2013 dslreports.com.