121–130 of 155 posts
Earlier quoted context omitted.
Ironically my ISP is using their DNS servers to block archive.is
Please name and shame.
Spark NZ, Vodafone NZ, and Vocus NZ, at least.
Earlier quoted context omitted.
I am having a hard time with the do not read email part here. Let me tell you why. 1. I do not use google for DNS 2. I do not use chrome. I use firefox with ad blocking 3. I only browse in private browsing mode 99% of the time. 4. I have a script that updates a block list of 10s of 1000s IPs for ad and tracking blocking, etc into my host file. So I order a box of cigars. Confirmation is to a gmail account. Next day I…
There’s a difference between saying we don’t scan the emails and saying we don’t track the metadata either. So if you bought from an online tobacconist rather than amazon they wouldn’t need to scan the contents.
Earlier quoted context omitted.
> 2. Such people usually include residential ip subnets by default, for no technical reason whatsoever. Are you talking about residential or about dynamic? Because there kinda is a reason for this for dynamic addresses (PC malware sending spam, and the impossibility to list the particular affected PC because it's constantly changing addreses, so you only can block all the addresses those PCs could be using). If you d…
> If you do have static addresses, whether residential or not, those should not be listed in dialup block lists. Indeed my residential internet connection has a static address but it still gets flagged for spam because it’s inside a residential subnet.
As in? I mean, what makes it a "residential subnet"? Have you tried talking to your ISP about this?
Earlier quoted context omitted.
> If you do have static addresses, whether residential or not, those should not be listed in dialup block lists. Indeed my residential internet connection has a static address but it still gets flagged for spam because it’s inside a residential subnet.
> because it’s inside a residential subnet. As in? I mean, what makes it a "residential subnet"? Have you tried talking to your ISP about this?
More people should be running their own mail servers, their own web servers, their own IRC servers, etc. But I don't think we are ever going back to that direction. The arguments and benefits for running one locally are not enough the trouble as well. Performance? Due to DNS caching at the resolver level, it is probably faster to use Google's 8.8.8.8 or CloudFlare's 1.1.1.1, than anything local (where all dns request…
Use DNS Crypt Proxy. It acts as a DNS forwarder, cache and ad blocker for your entire network whilst also encrypting your lookups to 8.8.8.8 and 1.1 (Fun fact: did you know 1.1 is short for CloudFlare 1.0.0.1 BTW?)
More people should be running their own mail servers, their own web servers, their own IRC servers, etc. But I don't think we are ever going back to that direction. The arguments and benefits for running one locally are not enough the trouble as well. Performance? Due to DNS caching at the resolver level, it is probably faster to use Google's 8.8.8.8 or CloudFlare's 1.1.1.1, than anything local (where all dns request…
Single data point, but I've been running a home DNS server (bind) for many years; it's set to be authoritative for the .local domain and caching for everything else (except for major tracking and advertising sites, which it blackholes). For hits that are in the cache (the usual case) it's obviously faster than going out to the 'net,. The black-holing combined with ad-blockers mean browsing is a lot faster and conside…
Mine forces me to use their DNS, would love to turn it off at a router level. I know I can buy a new router but I can't justify that right now.
Earlier quoted context omitted.
> 2. Such people usually include residential ip subnets by default, for no technical reason whatsoever. Are you talking about residential or about dynamic? Because there kinda is a reason for this for dynamic addresses (PC malware sending spam, and the impossibility to list the particular affected PC because it's constantly changing addreses, so you only can block all the addresses those PCs could be using). If you d…
Where do you rent the VPS? Example from personal experience: Yahoo and Hotmail block DigitalOcean IPs outright. At least they have the decency to reject your mail at delivery, not spamhole it. Practical DIY SMTP is a lost battle. Unless you're in it for the experience of the hosting itself.
Any one of the thousands of VPS hosters that are not one of the half dozen huge "cloud server" companies?
> Practical DIY SMTP is a lost battle. Unless you're in it for the experience of the hosting itself.
No, it's very much not, it works perfectly fine. Or at least well enough--arguably, you should be able to send directly from dialup hosts with a well-established domain and SPF, so things aren't as good as they could be, but far from what some people claim.
I live in NZ, and run my own DNS server. It's just unbound on pfsense, super simple. The good thing is when my ISP started blocking websites after the Christchurch attacks, I didn't even notice. (They were simple DNS blocks.)
Whats the difference between personal dns server, vs using google, and opendns? Arnt u resolving to that?
So even if you switch to 8.8.8.8, your ISP can still tamper it.
Earlier quoted context omitted.
My browsing habits are pretty regular, though: there’s half a dozen sites I visit regularly and the rest are random blogs/etc. I suspect about 20% of the domains I visit account for 80% of my browsing traffic and there would be enormous benefits from a dns speed perspective to a local caching resolver.
Maybe. Many sites use pretty short TTLs. So your sites may be dropping out of your cache more frequently than you think. Easy to test though. Run dnsmasq and enable query logging and see how often it’s having to forward requests. Then realize a recursing resolver is potentially having to go all the way to the TLDs for those requests.