[122380] in North American Network Operators' Group
Re: dns interceptors
daemon@ATHENA.MIT.EDU (Bill Thompson)
Fri Feb 12 19:53:09 2010
Date: Fri, 12 Feb 2010 16:52:28 -0800
From: Bill Thompson <Billt@Mahagonny.com>
To: nanog@nanog.org
In-Reply-To: <655DABFD-EE56-4D7D-8987-7A03AE3FE5DB@puck.nether.net>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Sig_/Xj0k=0YCZueVfcEafn/sJpX
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable
On Fri, 12 Feb 2010 17:32:33 -0500
Jared Mauch <jared@puck.nether.net> wrote:
>=20
> On Feb 12, 2010, at 5:15 PM, Randy Bush wrote:
>=20
> > i just lost ten minutes debugging what i thought was a server
> > problem which turned out to be a dns trapper on the wireless in the
> > changi sats lounge. this is not the first time i have been caught
> > by this.
> >=20
> > what are other roaming folk doing about this?
> >=20
> > randy
>=20
> I typically VPN out of broken networks whenever possible.
>=20
> Operate a VPN/PPTP/IPSEC/squid-proxy/ssh on tcp/80/443 to work around
> the issues.
>=20
> - Jared
>=20
Yep, this is what I do as well. It's a little disappointing that you
have to tunnel into a trusted network in order to prevent shenanigans
like that, but it seems to be the way things are.
--=20
Bill Thompson
BillT@Mahagonny.com
--Sig_/Xj0k=0YCZueVfcEafn/sJpX
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: This is a secure digital signature. See http://www.gnupg.org for details.
iQEcBAEBCAAGBQJLdffMAAoJEPYku/5QPHX+UCoIAL7N6jJyYgbVGSVwxFfVULTx
DhbbO+QUdsYIJ3xMJ08ndmtKRn72u91ebeQnv9ILpOSzmlUHvvA/a1ux35gtvhFr
86i55lzUAUl0vdKdeDw6a4pA1HdssezVanocRjttw/M5liIH4Lkg2/Q5EnQEB+m5
iyhk9wPeEWlUr9Or4BlRbnvKqhhEkKdPcP6OUbkkx08dsMVSiiHTVaiLZNK4ORxz
K/x+cXYAgV//7ODa5rXzBJKhzEszYQinprXCh0BYnAN9JwmqhqQGtbi+TBN/63sW
wlLOd/7ZtmVWQM0R9ZQYA49aaxvYM4317x6eSx2714alw5fhAKaaE+uePHqGPso=
=t6ML
-----END PGP SIGNATURE-----
--Sig_/Xj0k=0YCZueVfcEafn/sJpX--
