| reply to nycdave
Re: DNSCrypt for Windows - Work on FiOS? said by nycdave:Are you using Verizon DNS servers? If you are already using OpenDNS, Verizon isn't doing any DNS redirects, etc....
No port filtering is done on dynamic accounts, except port 25.
Verizon does do a redirect to a search page for failed DNS lookups. |
|
 More FiberPremium,MVM
join:2005-09-26
West Chester, PA
kudos:28 | said by tennisman94:Verizon does do a redirect to a search page for failed DNS lookups. That's only if you're using VZ's DNS servers.
The OP is using OpenDNS's servers.
--
There are 10 kinds of people in the world; those who understand binary and those who don't.
|
|
| said by More Fiber:said by tennisman94:Verizon does do a redirect to a search page for failed DNS lookups. That's only if you're using VZ's DNS servers. The OP is using OpenDNS's servers. I see it now. I misread nycdave's post. I didn't even consider that it would be possible for Verizon to manipulate DNS requests to alternate servers, but I guess that's why DNScrypt was created in the first place. |
|
| said by tennisman94:said by More Fiber:said by tennisman94:Verizon does do a redirect to a search page for failed DNS lookups. That's only if you're using VZ's DNS servers. The OP is using OpenDNS's servers. I see it now. I misread nycdave's post. I didn't even consider that it would be possible for Verizon to manipulate DNS requests to alternate servers, but I guess that's why DNScrypt was created in the first place. No, I don't think Verizon can manipulate DNS requests to alternate servers. DNSCrypt is to make it harder to read your DNS requests. It makes it harder for people to read what sites your accessing and it is harder for attackers to manipulate your requests, like making man-in-the-middle attacks harder. |
|
More FiberPremium,MVM
join:2005-09-26
West Chester, PA
kudos:28 | said by mnl1121:I don't think Verizon can manipulate DNS requests to alternate servers. VZ does in fact manipulate DNS responses.
If you lookup a non-existent domain, VZ's DNS servers will return a VZ hosted search page instead of correctly returning a 404 error. You can disable that behavior by changing the last octet of the DNS server address from .12 to .14 (or by using another DNS provider such as OpenDNS).
--
There are 10 kinds of people in the world; those who understand binary and those who don't.
|
|
| said by More Fiber:said by mnl1121:I don't think Verizon can manipulate DNS requests to alternate servers. VZ does in fact manipulate DNS responses. If you lookup a non-existent domain, VZ's DNS servers will return a VZ hosted search page instead of correctly returning a 404 error. You can disable that behavior by changing the last octet of the DNS server address from .12 to .14 (or by using another DNS provider such as OpenDNS). Yeah, but I meant if your using OpenDNS servers VZ doesn't manipulate DNS requests/responses. Or am I mistaken? |
|
