Upcoming DNS changes

[augie]

We are not currently blocking off-network traffic. If you are experiencing DNS trouble, then you should contact Technical Support.

[thulsa_doom]

We are not currently blocking off-network DNS traffic, and potentially we will continue to allow off-net DNS traffic and protect ourselves in other ways....

Can you explain what you mean by Sonic not currently blocking off-network DNS traffic?

I lost DNS on March 5th.

Around 2:30pm on the 6th we re-opened recursive DNS to queries from outside our network.

I do not believe we publicly announced this, partly because we intend to close them back off again once some issues with how that was implemented are ironed out. My suggestion is to not stay in the habit of using 208.201.224.11 or 208.201.224.33 if you are off-network.

[Guest]

Can this or something similar be re-implemented with regard to DNS? Such as a proxy? If http://proxydns.co/ can do it surely so can you?

I don't see us ever doing something like that.

We are not currently blocking off-network DNS traffic, and potentially we will continue to allow off-net DNS traffic and protect ourselves in other ways, but what you describe above is not something I can see us implementing.

I don't know but any "DNS" site that can't spell blocking correctly scares me. "bloking" and a few other grammatical errors.

[Guest]

For the past couple of weeks I've noticed off and on web pages either not completely loading or taking a long time to finish loading. This morning I decided to try one of the opt-out DNS servers with a newly opened tab and see if it made any difference. A page that not more than seconds before stalled at 90 percent, now loaded quickly and completely. I went back into Network properties and placed the .11 at the top of the DNS list and when the page was reloaded, it took much longer, but eventually did load.

I've tried this a couple of times and my impression is that there is a difference. The more complex the page, the more apparent the issue. I know there could be other variables at play and it could be all coincidental. I'm not sure what to make of this observation. Has anyone else noticed anything similar?

Thanks.

[augie]

For the past couple of weeks I've noticed off and on web pages either not completely loading or taking a long time to finish loading. This morning I decided to try one of the opt-out DNS servers with a newly opened tab and see if it made any difference. A page that not more than seconds before stalled at 90 percent, now loaded quickly and completely. I went back into Network properties and placed the .11 at the top of the DNS list and when the page was reloaded, it took much longer, but eventually did load.

I haven't heard any other reports like that.

What does your network look like? Are you one of many computers behind a firewall, or the only computer at home?

Do you observe the same behavior from other computers?

Do you see the same behavior with 208.201.224.33 ( ns2.sonic.net ) as you do with .11 ( ns1 )?

[bbusby]

I noticed it also, but it went away by switching to one of your un-battened hatches (old-school DNS) and Google's 8.8.8.8 as a backup. It started at the changeover with no network changes on my side.

[augie]

Do either of you feel confident in giving me a packet capture from when it is happening?

Or send me an e-mail ( [email protected] ) and maybe we can co-ordinate a time when I can be watching our DNS traffic for your IP address.

The opt-out servers are on the same hardware as the ns1/ns2 servers, so switching to the opt-out servers would just mean that you are not using the DNSSEC and RPZ features -- which should be protecting you from malicious activity.

[ankh]

Found 2 routers (2 different IP addresses in use here) both unable to connect with Firefox or Chrome this AM. Power cycled them and the problem's gone. Oddly, Adium stayed working on machines on both routers so I wonder if it's related to DNS. (didn't know about this DNS change, just poking around wondering what happened).

[mary]

I am not a technical person. All I know is when I recently changed my internet service I was suddenly blocked from accessing multiple websites that I have visited for years. My Internet provider insists it is my own computer settings. I never changed any settings. I keep getting that red mousetrap page. I have a mac. Is it my provider who should be assisting me? I post here because I get nowhere when I submit tickets to them. If I can get some information (that I can actually understand!) I can include that information in my next ticket.
Thank You

[mross]

Who is your internet provider?