News for hackers. Stuff that matters.

A comment on My DNS queries are being intercepted and altered in-flight. Parent comment

Re:My DNS queries are being intercepted and altered in-flight by aaronmdjones on Sunday November 30, 2014 @07:57AM (#8676717)
I did not know about GGC, and that seems cool (and similar to the Netflix approach of putting content servers inside ISP networks). However, this does not explain why I get an address pointing to my ISP network when I query via OpenDNS, which is definitely outside of my ISP network and is an intermediate recursor (so, from the perspective of the nameservers for google.com, the query is not coming from a Virgin Media address range).

EDIT: And from the GGC documentation, it does not seem as if the ISPs are required to serve content from the in-ISP nodes to customers outside the ISP, which is what this would look like.

[ Parent | on HN ]
Re:My DNS queries are being intercepted and altered in-flight by virtuallynathan on Sunday November 30, 2014 @08:14AM (#8676742)
OpenDNS uses edns-client-subnet, which passes the DNS client IP subnet (/24) with the recursion request. Google still knows you are on Virgin Media from behind OpenDNS.

http://www.afasterinternet.com/howitworks.htm

[ Parent | on HN ]
Re:My DNS queries are being intercepted and altered in-flight by aaronmdjones on Sunday November 30, 2014 @08:21AM (#8676761)
Now THAT, is amazing - and perfectly explains what's going on. I operate several nameservers of my own for various domains, some owned by me, some not, and I'd not heard of that. I am happy with your answer, thanks!
[ Parent | on HN ]
Re:My DNS queries are being intercepted and altered in-flight by rahimnathwani on Sunday November 30, 2014 @08:16AM (#8676748)
Yup. More info here: https://datatracker.ietf.org/doc/draft-ietf-dnsop-edns-clien...
[ Parent | on HN ]
Re:My DNS queries are being intercepted and altered in-flight by mrb on Sunday November 30, 2014 @08:15AM (#8676744)
Your command log shows you are not using OpenDNS, but Google's Public DNS (8.8.8.8). Are you confusing the two?
[ Parent | on HN ]
Re:My DNS queries are being intercepted and altered in-flight by AAronForMe on Sunday November 30, 2014 @08:35AM (#8676794)
I tried again with OpenDNS at the suggestion of someone else in this thread with the same results - see my other comments.
[ Parent | on HN ]