[SLL] who is randomizing DNS source ports? deploying DNSSEC?

[Brian Hatch]

Relatively near to 2008-07-25 14:59 -0700, Derek Simkowiak alleged:

> I'm currently using OpenDNS, because my corporate clients want to 
> filter pr0n (mostly due to liability concerns).  OpenDNS is infinitely 
> better than NetNanny (and similar), and it also protects Outlook users 
> from phishing domains.  The web-based GUI tools are quick and easy, and 
> the price is right (it's free).

And it doesn't provide accurate domain resolution.

  $ host www.google.com 208.67.220.220
  www.google.com is an alias for google.navigation.opendns.com.
  google.navigation.opendns.com has address 208.67.216.230
  google.navigation.opendns.com has address 208.67.216.231

Do you want to relay all your searches through them?  Wonder
what they're doing with it.  Or injecting in it.  Wonder
what they'll hijack next week.


-- 
Brian Hatch                  Practice safe eating:
   Systems and                always use condiments.
   Security Engineer
http://www.ifokr.org/bri/

Every message PGP signed
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists2.linuxjournal.com/pipermail/linux-list/attachments/20080725/30dae2b1/attachment.sig