Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#1

Post by kljensen » Fri, Mar 05, 2010, 5:15 PM UTC

This means DNS queries will not resolve for government employees if they point to Linode hosted machines.

I've verified this with USMC, USDA, & Sandia national lab. Heard that the top level domain linode.com was black holed due to its association with malicious activity as per a US-CERT Situational Awareness Report 10-015-01A UPDATE.

This is a big pain in butt for those of us that are grant funded or work with U.S. Government.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#2

Post by praeclarum » Fri, Mar 05, 2010, 5:47 PM UTC

The less the government sees of the internet, the less they interfere with it. I hope they blacklist the entire thing.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#3

Post by Slashed » Fri, Mar 05, 2010, 5:50 PM UTC

Heard that the top level domain linode.com was black holed due to its association with malicious activity [...]

Reading this sentence, reminded me of Google using Linode when that incident happened with Chinese hackers.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#4

Post by ww520 » Fri, Mar 05, 2010, 5:51 PM UTC

WTF. I host in Linode.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#5

Post by chaosmachine » Fri, Mar 05, 2010, 5:55 PM UTC

This reminds me of when I worked tech support for a big US ISP. I would get calls from users who couldn't connect to certain .mil sites because they had an IP ending in zero (x.x.x.0). The only solution was to reset their modem and hope the DHCP server would give them a new IP that didn't end in zero.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#6

Post by fadmmatt » Fri, Mar 05, 2010, 6:12 PM UTC

Can anyone check to see if http://matt.might.net/ is blocked?

I host it on a linode.

Thanks!

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#7

Post by wgj » Fri, Mar 05, 2010, 6:18 PM UTC

Set up a reverse proxy somewhere for your government friends to use.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#8

Post by fadmmatt » Fri, Mar 05, 2010, 6:33 PM UTC

fadmmatt wrote: post #6

Can anyone check to see if http://matt.might.net/ is blocked? I host it on a linode. Thanks!

My brother in the Army can still see it, so it's apparently not all government.

By the way, he can't get to Hacker News.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#9

Post by carl_ » Fri, Mar 05, 2010, 6:42 PM UTC

Do you have a direct link to this CERT awareness report? Google foo is failing me at present.

Re: Tell HN: U.S. gov't blacklisted all DNS entries pointing to Linode machines

#10

Post by nwinter » Fri, Mar 05, 2010, 7:00 PM UTC

wgj wrote: post #7

Set up a reverse proxy somewhere for your government friends to use.

Ugh, Linode is our reverse proxy.