[122412] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: dns interceptors

daemon@ATHENA.MIT.EDU (charles@knownelement.com)
Sun Feb 14 13:07:42 2010

To: "Larry Sheldon" <LarrySheldon@cox.net>, nanog@nanog.org
From: charles@knownelement.com
Date: Sun, 14 Feb 2010 18:06:59 +0000
Reply-To: charles@knownelement.com
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org

I run openvpn on my linux box to do exactly that. Already running apache/bind/postfix/xmpp with legacy Im bridges so adding openvpn was a logical next step. 


#protip run it on port 443. :) makes it much easier to get around firewalls. Even with deep packet inspection, SSL traffic is expected on that port. 

I have business class att dsl and 7 static ip addresses. I run a dell optiplex desktop 24x7 and it sips power. 

You could also just host services in a Colo for around 20.00 a month for dedicated virtual server. You would probably pay that anyway to a company who provided the services you mentioned. Lots of risk with being smtp relay for the world. Just ask yahoo/sbc who provide large swaths of southern California with net access. They provide dns and authenticated/encrypted smtp outbound and charge 14.95 a month for the cheap package. 


Sent via BlackBerry from T-Mobile


home help back first fref pref prev next nref lref last post