Live data from Hacker News

AT&T updates firmware to block access to 1.1.1.1

dslreports.com

71–80 of 382 posts

Re: AT&T updates firmware to block access to 1.1.1.1

#71
I'd say there is a 98% chance this is a bug in some firmware and a 2% chance AT&T is intentionally trying to block Cloudflare DNS.

I get why people are paranoid about ISPs blocking content and net neutrality, but let's not cry wolf prematurely. The technical details here strongly suggest a bug rather than intentional blocking of 1.1.1.1 DNS traffic.

Re: AT&T updates firmware to block access to 1.1.1.1

#73
post #69

My guess is this is just incompetence and not intentionally made to block CloudFlare. I have one of those routers, and I couldn't use 1.1.1.1 because it was routing to an internal interface on the router. I confirmed this with ping, I was getting microsecond response times from 1.1.1.1. Under the new firmware, 1.1.1.1 is just dead. So it's probably still connected to the local interface, and nothing is listening.

They started blocking 1.0.0.1 and CF ipv6 DNS too. This has to be intentional.

Re: AT&T updates firmware to block access to 1.1.1.1

#74

Earlier quoted context omitted.

Are they blocking 8.8.8.8? Why do you think they're blocking 1.1.1.1?

Because users were able to connect and after the firmware update they are not? And also because they didn't even let you change this setting to begin with. There is not enough data to attribute this to malice yet, but it does not look good (see CloudFlare's tweet).

And they singled out this one instead of Google’s, which has been around since well before NN existed and is far more well-known, because...? I remember seeing talk about this on dslreports a couple weeks ago, IIRC it’s not a deliberate block, they were using this IP or a range internally.

Re: AT&T updates firmware to block access to 1.1.1.1

#75
This is likely due to incompetence, not malice.

FWIW, it’s possible to bypass AT&T’s router:

https://github.com/jaysoffian/eap_proxy

That said, I tried 1.1.1.1 and found I had to switch back to Google DNS since Cloudflare intentionally doesn’t support EDNS Client Subnet which was causing my AppleTV’s to have trouble loading content.

Re: AT&T updates firmware to block access to 1.1.1.1

#76

As a consumer, you are free to switch to a different provider. I'm not saying what they're doing is ok, but let's not neglect the opportunity to vote with our $$$.

Only if you're in the 42% minority of people who have access to more than one ISP.

Re: AT&T updates firmware to block access to 1.1.1.1

#79
post #69

My guess is this is just incompetence and not intentionally made to block CloudFlare. I have one of those routers, and I couldn't use 1.1.1.1 because it was routing to an internal interface on the router. I confirmed this with ping, I was getting microsecond response times from 1.1.1.1. Under the new firmware, 1.1.1.1 is just dead. So it's probably still connected to the local interface, and nothing is listening.

They started blocking 1.0.0.1 and CF ipv6 DNS too. This has to be intentional.

Hmmm that's a fair point. But then why not also block 8.8.8.8?
Post reply on HN