Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #3832 > unrolled thread

What should I change my DNS to?

Back to article view | Back to comp.os.linux.networking

Contents

  What should I change my DNS to? F Volker <here@home.net> - 2016-09-06 06:32 +0700
    Re: What should I change my DNS to? Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-06 03:35 +0000
      Re: What should I change my DNS to? F Volker <here@home.net> - 2016-09-06 13:48 +0700
        Re: What should I change my DNS to? William Unruh <unruh@invalid.ca> - 2016-09-06 07:25 +0000
          Re: What should I change my DNS to? F Volker <here@home.net> - 2016-09-06 14:53 +0700
            Re: What should I change my DNS to? Dan Purgert <dan@djph.net> - 2016-09-06 09:40 +0000
            Re: What should I change my DNS to? William Unruh <unruh@invalid.ca> - 2016-09-06 10:35 +0000
              Re: What should I change my DNS to? Dan Purgert <dan@djph.net> - 2016-09-06 11:09 +0000
              Re: What should I change my DNS to? F Volker <here@home.net> - 2016-09-07 08:53 +0700
                Re: What should I change my DNS to? William Unruh <unruh@invalid.ca> - 2016-09-07 08:24 +0000
                  Re: What should I change my DNS to? "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 14:02 +0200
                  Re: What should I change my DNS to? F Volker <here@home.net> - 2016-09-08 06:42 +0700
                    Re: What should I change my DNS to? "Carlos E. R." <robin_listas@invalid.es> - 2016-09-08 03:10 +0200
                      Re: What should I change my DNS to? F Volker <here@home.net> - 2016-09-08 09:43 +0700
            Re: What should I change my DNS to?  (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-06 21:36 +0000
              Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 00:48 +0200
                Re: What should I change my DNS to? (combined response) William Unruh <unruh@invalid.ca> - 2016-09-07 08:18 +0000
                  Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 14:08 +0200
                    Re: What should I change my DNS to? (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-07 21:52 +0000
                      Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-08 00:52 +0200
              Re: What should I change my DNS to? (combined response) F Volker <here@home.net> - 2016-09-07 09:13 +0700
                Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 04:26 +0200
                  Re: What should I change my DNS to? (combined response) F Volker <here@home.net> - 2016-09-07 09:41 +0700
                    Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 14:11 +0200
                  Re: What should I change my DNS to? (combined response) F Volker <here@home.net> - 2016-09-07 10:59 +0700
                  Re: What should I change my DNS to? (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-07 06:53 +0000
                  Re: What should I change my DNS to? (combined response) Dan Purgert <dan@djph.net> - 2016-09-07 11:02 +0000
                    Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 14:21 +0200
                      Re: What should I change my DNS to? (combined response) Dan Purgert <dan@djph.net> - 2016-09-07 14:09 +0000
                        Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 21:53 +0200
                          Re: What should I change my DNS to? (combined response) Dan Purgert <dan@djph.net> - 2016-09-08 11:06 +0000
                            Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-08 15:22 +0200
                Re: What should I change my DNS to? (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-07 06:55 +0000
                  Re: What should I change my DNS to? (combined response) F Volker <here@home.net> - 2016-09-07 14:27 +0700
                    Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-07 14:28 +0200
                      Re: What should I change my DNS to? (combined response) Stefan Monnier <monnier@iro.umontreal.ca> - 2016-09-07 09:32 -0400
                    Re: What should I change my DNS to? (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-07 21:50 +0000
                Re: What should I change my DNS to? (combined response) William Unruh <unruh@invalid.ca> - 2016-09-07 08:29 +0000
              Re: What should I change my DNS to? (combined response) F Volker <here@home.net> - 2016-09-08 10:15 +0700
                Re: What should I change my DNS to? (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-08 19:34 +0000
                  Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-09 03:56 +0200
                    Re: What should I change my DNS to? (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-09 20:55 +0000
                      Re: What should I change my DNS to? (combined response) "Carlos E. R." <robin_listas@invalid.es> - 2016-09-10 02:47 +0200
                        Re: What should I change my DNS to? (combined response) Bit Twister <BitTwister@mouse-potato.com> - 2016-09-10 08:27 +0000
                          Re: What should I change my DNS to? (combined response) Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-10 22:53 +0000
        Re: What should I change my DNS to? "Carlos E. R." <robin_listas@invalid.es> - 2016-09-06 13:35 +0200
          Re: What should I change my DNS to? Aragorn <thorongil@telenet.be.invalid> - 2016-09-06 14:06 +0200
            Re: What should I change my DNS to? "Carlos E. R." <robin_listas@invalid.es> - 2016-09-06 14:27 +0200
              Re: What should I change my DNS to? Dan Purgert <dan@djph.net> - 2016-09-06 13:03 +0000
                Re: What should I change my DNS to? "Carlos E. R." <robin_listas@invalid.es> - 2016-09-06 17:01 +0200
                  Re: What should I change my DNS to? Dan Purgert <dan@djph.net> - 2016-09-06 16:25 +0000
                    Re: What should I change my DNS to? Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2016-09-06 21:37 +0300
                      Re: What should I change my DNS to? "Carlos E. R." <robin_listas@invalid.es> - 2016-09-06 23:42 +0200
          Re: What should I change my DNS to? F Volker <here@home.net> - 2016-09-07 09:26 +0700
        Re: What should I change my DNS to? Roger Blake <rogblake@iname.invalid> - 2016-09-06 12:54 +0000
          Re: What should I change my DNS to? F Volker <here@home.net> - 2016-09-07 09:28 +0700
            Re: What should I change my DNS to? William Unruh <unruh@invalid.ca> - 2016-09-07 08:25 +0000
          Re: What should I change my DNS to? Moe Trin <ibuprofin@painkiller.example.tld.invalid> - 2016-09-07 03:29 +0000

Page 1 of 3  [1] 2 3  Next page →

#3832 — What should I change my DNS to?

There are a number of DNS servers on the Internet that one can choose from:

Google Public DNS:
Primary: 8.8.8.8
Secondary: 8.8.4.4

OpenDNS:
208.67.222.222
208.67.220.220

Or signing up for Premium DNS
https://signup.opendns.com/premiumdns/

What do the experts here recommend?

[toc] | [next] | [standalone]

#3833

On Tue, 6 Sep 2016, in the Usenet newsgroup comp.os.linux.networking, in article
<nqkvau$t8n$1@gioia.aioe.org>, F Volker wrote:

>There are a number of DNS servers on the Internet that one can choose
>from:

Yeah, there are at least a dozen one can use - but what are you looking
for?  Are you concerned that the DNS of your ISP is spying on you?
Are you looking for possible speed improvements?   Are you worried about
censorship?

>What do the experts here recommend?

Depends on what you are looking for -  heck, you could even run your
OWN DNS server (search for a copy of the DNS-HOWTO) - but if you do,
be sure to restrict access to it so that it doesn't get abused by
free-loaders and bad-guys out on the Internet.

        Old guy

[toc] | [prev] | [next] | [standalone]

#3834

On 09/06/2016 10:35 AM, Moe Trin wrote:

[cut for brevity]

> Are you concerned that the DNS of your ISP is spying on you?
> Are you looking for possible speed improvements? Are you worried about
> censorship?

Yes, yes and yes (privacy is my main concern).

>> What do the experts here recommend?
>
> Depends on what you are looking for -  heck, you could even run your
> OWN DNS server (search for a copy of the DNS-HOWTO) - but if you do,
> be sure to restrict access to it so that it doesn't get abused by
> free-loaders and bad-guys out on the Internet.

I am not a technical person and wouldn't want to attempt running my own 
DNS server. Though I am using a paid VPN service mainly for p2p 
downloads am considering utilising the VPN service much more frequently.

The reason for my inquiry is I experienced something very peculiar 
yesterday...
I reside in a third world country within the SE Asia region. Power 
outages are regular events. An UPS is essential and it's working as 
expected. Connected to the UPS is a desktop computer, monitor and 
router. Before bedtime I shut down the computer and switch off the power 
supply for UPS. This ensures not to be awakened by the UPSs obnoxious 
alarm tone if a power outage occurs during the night .

The day before yesterday I added DNS 8.8.8.8,8.8.4.4. to my (Linksys) 
router (there weren't any other entries added before) and changed my 
Wireless password (pass phrase) and Gateway username/password (I have 
done this numerous times before). I rebboted and the new set-up seemed 
successful as I did not encounter any 'glitches' during the remainder of 
the day. I also accessed the configuration details of the router three 
times to make sure the new Gatway username/password is working.

When switching on the UPS yesterday the router led light indicating 
Internet connection turned 'red' as opposed to expected 'green'.

I booted the computer, rebooted, disconnected the power for the router 
but wasn't able to achieve an Internet connection.

It never occurred to my accessing the router settings!

I called the ISP explaining my plight; After a few minutes waiting their 
technical staff advised to reconfigure my router - an answer I did not 
expect.

Well, this is the part which concerns me - my Gateway password was 
rejected, I tried several times but without success. So, instead of 
entering my specific username/password I used 'admin' for both Gateway 
user name and Gateway password and at this very instant was able to 
access my router details. However, all my specific router configurations 
were gone (as someone or something had re-set the router) and I had 
start all over again.
I have no explanation for this occurrence and am sure my ISP would not 
want to comment on this issue.
Could it be that my router got hacked by my ISP? What can I do to avoid 
this from happening again? I am on Linux Mint 17.3 KDE.

[toc] | [prev] | [next] | [standalone]

#3835

On 2016-09-06, F Volker <here@home.net> wrote:
> On 09/06/2016 10:35 AM, Moe Trin wrote:
>
> [cut for brevity]
>
>> Are you concerned that the DNS of your ISP is spying on you?
>> Are you looking for possible speed improvements? Are you worried about
>> censorship?
>
> Yes, yes and yes (privacy is my main concern).
>
>>> What do the experts here recommend?
>>
>> Depends on what you are looking for -  heck, you could even run your
>> OWN DNS server (search for a copy of the DNS-HOWTO) - but if you do,
>> be sure to restrict access to it so that it doesn't get abused by
>> free-loaders and bad-guys out on the Internet.
>
> I am not a technical person and wouldn't want to attempt running my own 
> DNS server. Though I am using a paid VPN service mainly for p2p 
> downloads am considering utilising the VPN service much more frequently.
>
> The reason for my inquiry is I experienced something very peculiar 
> yesterday...
> I reside in a third world country within the SE Asia region. Power 
> outages are regular events. An UPS is essential and it's working as 
> expected. Connected to the UPS is a desktop computer, monitor and 
> router. Before bedtime I shut down the computer and switch off the power 
> supply for UPS. This ensures not to be awakened by the UPSs obnoxious 
> alarm tone if a power outage occurs during the night .
>
> The day before yesterday I added DNS 8.8.8.8,8.8.4.4. to my (Linksys) 
> router (there weren't any other entries added before) and changed my 
> Wireless password (pass phrase) and Gateway username/password (I have 
> done this numerous times before). I rebboted and the new set-up seemed 
> successful as I did not encounter any 'glitches' during the remainder of 
> the day. I also accessed the configuration details of the router three 
> times to make sure the new Gatway username/password is working.
>
> When switching on the UPS yesterday the router led light indicating 
> Internet connection turned 'red' as opposed to expected 'green'.
>
> I booted the computer, rebooted, disconnected the power for the router 
> but wasn't able to achieve an Internet connection.
>
> It never occurred to my accessing the router settings!
>
> I called the ISP explaining my plight; After a few minutes waiting their 
> technical staff advised to reconfigure my router - an answer I did not 
> expect.
>
> Well, this is the part which concerns me - my Gateway password was 
> rejected, I tried several times but without success. So, instead of 
> entering my specific username/password I used 'admin' for both Gateway 
> user name and Gateway password and at this very instant was able to 
> access my router details. However, all my specific router configurations 
> were gone (as someone or something had re-set the router) and I had 
> start all over again.
> I have no explanation for this occurrence and am sure my ISP would not 
> want to comment on this issue.
> Could it be that my router got hacked by my ISP? What can I do to avoid 
> this from happening again? I am on Linux Mint 17.3 KDE.
>

Sounds like your router reset itself. Hardware fault? Intrnal battery
failure-- if it has a battery?

Note that changing your dns does absolutely nothing to protect you from
your ISP, if that was the problem ( no idea how it could have been).
Your ISP is still the one that connects you to the internet. DNS is
simply a "name to address" translation service. It is like trying to
protect your house against breakins by changing the font of your
housenumbers on your house.

[toc] | [prev] | [next] | [standalone]

#3836

On 09/06/2016 02:25 PM, William Unruh wrote:

[cut]

> Sounds like your router reset itself.

I'd be truly relieved if this was be cause!

> Hardware fault?

Yes, this is not to be discounted - the Linksys WAG200G router is not a 
spring chicken anymore; An upgrade might be in order.

> Internal battery failure-- if it has a battery?

The motherboard is accommodating a battery which I change annually; I 
can't think of any other component containing a battery.

> Note that changing your dns does absolutely nothing to protect you from
> your ISP, if that was the problem ( no idea how it could have been).
> Your ISP is still the one that connects you to the internet. DNS is
> simply a "name to address" translation service. It is like trying to
> protect your house against breakins by changing the font of your
> housenumbers on your house.

Thanks for clarifying this.
Going back to my original question, which DNS server is preferred -
Google Public or OpenDNS?

[toc] | [prev] | [next] | [standalone]

#3837

F Volker wrote:
> On 09/06/2016 02:25 PM, William Unruh wrote:
>> [snip]
>> Internal battery failure-- if it has a battery?
>
> The motherboard is accommodating a battery which I change annually; I 
> can't think of any other component containing a battery.

If you're talking about your PC motherboard, those batteries last 3-5
years on average.  Not that it really matters though.

>
>> Note that changing your dns does absolutely nothing to protect you from
>> your ISP, if that was the problem ( no idea how it could have been).
>> Your ISP is still the one that connects you to the internet. DNS is
>> simply a "name to address" translation service. It is like trying to
>> protect your house against breakins by changing the font of your
>> housenumbers on your house.
>
> Thanks for clarifying this.
> Going back to my original question, which DNS server is preferred -
> Google Public or OpenDNS?

I've switched back and forth between them over the years.  They both
"just work"; it really comes down to whether or not you want Google
knowing your DNS lookups.


-- 
|_|O|_| Registered Linux user #585947
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| 

[toc] | [prev] | [next] | [standalone]

#3838

On 2016-09-06, F Volker <here@home.net> wrote:
> On 09/06/2016 02:25 PM, William Unruh wrote:
>
> [cut]
>
>> Sounds like your router reset itself.
>
> I'd be truly relieved if this was be cause!
>
>> Hardware fault?
>
> Yes, this is not to be discounted - the Linksys WAG200G router is not a 
> spring chicken anymore; An upgrade might be in order.
>
>> Internal battery failure-- if it has a battery?
>
> The motherboard is accommodating a battery which I change annually; I 
> can't think of any other component containing a battery.

I meant that the router might have an internal battery to keep the
settings alive through switchoffs. <i have no idea if they do.

>
>> Note that changing your dns does absolutely nothing to protect you from
>> your ISP, if that was the problem ( no idea how it could have been).
>> Your ISP is still the one that connects you to the internet. DNS is
>> simply a "name to address" translation service. It is like trying to
>> protect your house against breakins by changing the font of your
>> housenumbers on your house.
>
> Thanks for clarifying this.
> Going back to my original question, which DNS server is preferred -
> Google Public or OpenDNS?
>
For what purpose? Why not stay with your ISPs DNS server? What is the
switch supposed to accomplish for you? To first order there is not
difference between DNS servers. To second order there might be a reason
to use one over the other (eg if you are using a VPN and want to hide
your DNS queries from your ISP.) 

[toc] | [prev] | [next] | [standalone]

#3839

William Unruh wrote:
> [snip]
> I meant that the router might have an internal battery to keep the
> settings alive through switchoffs. <i have no idea if they do.

I've only seen this as a "feature" on ISP CPE devices that act as phone
gateways for their VoIP services.  Most off-the-shelf things (from
linksys, et. al.) don't seem to have this as an onboard feature.

> [snip]
> For what purpose? Why not stay with your ISPs DNS server? What is the
> switch supposed to accomplish for you? To first order there is not
> difference between DNS servers. To second order there might be a reason
> to use one over the other (eg if you are using a VPN and want to hide
> your DNS queries from your ISP.) 

Or, your ISP's servers are simply slow to respond (mine are / were, so I
went with rolling my own, and then forwarding to opendns).


-- 
|_|O|_| Registered Linux user #585947
|_|_|O| Github: https://github.com/dpurgert
|O|O|O| 

[toc] | [prev] | [next] | [standalone]

#3851

On 09/06/2016 05:35 PM, William Unruh wrote:

[cut]

> For what purpose? Why not stay with your ISPs DNS server? What is the
> switch supposed to accomplish for you? To first order there is not
> difference between DNS servers.

Although my technical knowledge is limited, I am trying to better myself 
by reading pertinent publications etc..
My reason for not staying with the ISPs DNS server is covered under: 
"Why Change Your Router's DNS Setting"
<http://m.setuprouter.com/router/linksys/wag200g/dns.htm>
The article does not explain the differences between the two options 
hence my inquiry here.
Be that as it may, I feel that the speed for accessing websites has 
increased ever so slightly but this may just be an imaginary impression.

> To second order there might be a reason
> to use one over the other (eg if you are using a VPN and want to hide
> your DNS queries from your ISP.)

Yes, a VPN service gives me comfort relating to privacy issues.
I just haven't figured out on avoiding security checks imposed by the 
e-mail accounts when switching from my regular ISP account to my VPN and 
access my e-mail accounts. This is a real PITA which I am going to bring 
up in an appropriate newsgroup/forum.

[toc] | [prev] | [next] | [standalone]

#3863

On 2016-09-07, F Volker <here@home.net> wrote:
> On 09/06/2016 05:35 PM, William Unruh wrote:
>
> [cut]
>
>> For what purpose? Why not stay with your ISPs DNS server? What is the
>> switch supposed to accomplish for you? To first order there is not
>> difference between DNS servers.
>
> Although my technical knowledge is limited, I am trying to better myself 
> by reading pertinent publications etc..
> My reason for not staying with the ISPs DNS server is covered under: 
> "Why Change Your Router's DNS Setting"
><http://m.setuprouter.com/router/linksys/wag200g/dns.htm>

A pretty lame article. And why should you be using the router's dns
onyour machines? While this may be "default" dhcp setting it is not
necessary. Also why would you use dhcp on your internal machines? Tell
the router to assign static addresses to your systems. And have the
systems assign their own dns. 

> The article does not explain the differences between the two options 
> hence my inquiry here.

Because there is none/

> Be that as it may, I feel that the speed for accessing websites has 
> increased ever so slightly but this may just be an imaginary impression.
>
>> To second order there might be a reason
>> to use one over the other (eg if you are using a VPN and want to hide
>> your DNS queries from your ISP.)
>
> Yes, a VPN service gives me comfort relating to privacy issues.
> I just haven't figured out on avoiding security checks imposed by the 
> e-mail accounts when switching from my regular ISP account to my VPN and 

Lets see, you want to operate a vpn for security, but object to security
for your emails? Strange.

> access my e-mail accounts. This is a real PITA which I am going to bring 
> up in an appropriate newsgroup/forum.

[toc] | [prev] | [next] | [standalone]

#3867

On 2016-09-07 10:24, William Unruh wrote:
> A pretty lame article. And why should you be using the router's dns
> onyour machines? While this may be "default" dhcp setting it is not
> necessary. Also why would you use dhcp on your internal machines?

Because it is easier :-)

-- 
Cheers,
       Carlos E.R.

[toc] | [prev] | [next] | [standalone]

#3878

On 09/07/2016 03:24 PM, William Unruh wrote:

[cut]

> A pretty lame article. And why should you be using the router's dns
> on your machines? While this may be "default" dhcp setting it is not
> necessary. Also why would you use dhcp on your internal machines? Tell
> the router to assign static addresses to your systems. And have the
> systems assign their own dns.

I would not able to judge the quality of the article's content nor would 
I know how to respond to your questions. But I appreciate your opinion.

>> The article does not explain the differences between the two options
>> hence my inquiry here.

> Because there is none/

Thanks, I am glad for asking.

>> Yes, a VPN service gives me comfort relating to privacy issues.
>> I just haven't figured out on avoiding security checks imposed by the
>> e-mail accounts when switching from my regular ISP account to my VPN and
>
> Lets see, you want to operate a vpn for security, but object to security
> for your emails? Strange.

No, you got it wrong and judge too soon. I welcome security checks but 
am unsure on the frequency of these checks.

When switching from my regular ISP account to my VPN connection and 
access my Thunderbird e-mail client this message will pop up:

"Microsoft account
Verify your account
We detected something unusual about a recent sign-in for the Microsoft 
account fr*****@outlook.com. For example, you might be signing in from a 
new location, device, or app.
To help keep you safe, we've blocked access to your inbox, contacts 
list, and calendar for that sign-in. Please review your recent activity 
and we'll help you take corrective action. To regain access, you'll need 
to confirm that the recent activity was yours.
Review recent activity
Thanks,
The Microsoft account team"

Only after accessing each of my accounts on web-mail and completing all 
security steps can I access my mail accounts again in Thunderbird.
This happens each and every time when switching to a vpn server and 
becomes a royal pain especially if you have several e-mail accounts.

I find it strange that my g-mail accounts don't behave this way but then 
again it may be an inferior e-mail provider.

[toc] | [prev] | [next] | [standalone]

#3879

On 2016-09-08 01:42, F Volker wrote:

> When switching from my regular ISP account to my VPN connection and
> access my Thunderbird e-mail client this message will pop up:
> 
> "Microsoft account
> Verify your account
> We detected something unusual about a recent sign-in for the Microsoft
> account fr*****@outlook.com. For example, you might be signing in from a
> new location, device, or app.
> To help keep you safe, we've blocked access to your inbox, contacts
> list, and calendar for that sign-in. Please review your recent activity
> and we'll help you take corrective action. To regain access, you'll need
> to confirm that the recent activity was yours.
> Review recent activity
> Thanks,
> The Microsoft account team"
> 
> Only after accessing each of my accounts on web-mail and completing all
> security steps can I access my mail accounts again in Thunderbird.
> This happens each and every time when switching to a vpn server and
> becomes a royal pain especially if you have several e-mail accounts.


Well, it is an obvious side effect of using an VPN. Your provider,
outlook.com, thinks that it is not you because it looks as if you are
accessing from a location very far away from the one you did last time.

Why you use an VPN to access your email, I don't understand. Unless you
think your provider is spying on you... but then you use a mail provider
from USA, which means that the NSA reads it, anyway.


> I find it strange that my g-mail accounts don't behave this way but then
> again it may be an inferior e-mail provider.

No, it is not. It is probably more clever at guessing. And uses other
methods, like oauth2. Gmail may in fact send an SMS to your phone to
check it is really you.

-- 
Cheers,
       Carlos E.R.

[toc] | [prev] | [next] | [standalone]

#3880

On 09/08/2016 08:10 AM, Carlos E. R. wrote:

[cut]

> Well, it is an obvious side effect of using an VPN.

Yes, a fair assessment. However, I did not realise the side effect is or 
would be selective.

> Your provider,
> outlook.com, thinks that it is not you because it looks as if you are
> accessing from a location very far away from the one you did last time.

So much for travelling fast to and from locations :)
When completing/confirming my last activity Microsoft ask among other 
things if "this devise is used frequently" which I respond to 'yes'. But 
it evidently does not 'remember' my [check mark].

> Why you use an VPN to access your email,

Absolutely no reason whatsoever! Sometimes I forget for being connected 
to the vpn server.

 > I don't understand.

These annoying incidents aroused my curiosity hence my inquiry.

> Unless you think your provider is spying on you...

IMHO, spying on e-mails is a concern and should not marginalised, taken 
likely or tolerated in any way alas it is in fact a realistic 
occurrence. Nobody I know would freely offer his/her e-mail address for 
me to read the content no matter how 'innocent' the pennings.

 > but then you use a
 > mail provider from USA, which means that the NSA reads it, anyway.

If I were still young and boisterous I'd use a different system, browser 
and e-mail provider (Tails, Tor and Proton spring into my mind).

>> I find it strange that my g-mail accounts don't behave this way but then
>> again it may be an inferior e-mail provider.
>
> No, it is not. It is probably more clever at guessing. And uses other
> methods, like oauth2. Gmail may in fact send an SMS to your phone to
> check it is really you.

Gmail does not have my phone number. If it can't be fixed then I just 
have to either switch to an other e-mail provider or discipline myself 
and remember on which server am currently connected and avoid accessing 
my e-mail accounts while connected to the vpn server.

[toc] | [prev] | [next] | [standalone]

#3848 — Re: What should I change my DNS to? (combined response)

On Tue, 6 Sep 2016, in the Usenet newsgroup comp.os.linux.networking, in article
<nqlslb$2ct$1@gioia.aioe.org>, F Volker wrote:

One reply to multiple posts

>> I am not a technical person and wouldn't want to attempt running my
>> own DNS server.

It's actually relatively simple.  I'm not experienced with Mint, but
both Debian and Ubuntu had a single package that did most of the work.

>> Though I am using a paid VPN service mainly for p2p downloads am
>> considering utilising the VPN service much more frequently.

I'd look to see if the VPN service offers DNS

>Connected to the UPS is a desktop computer, monitor and router.

Consider changing your DNS settings on the computer, rather than the
router.  Now, the computer is looking at the "DNS Server" (actually a
forwarder) on the router.  I wouldn't expect the router ON IT'S OWN to
be needing DNS - the router is merely forwarding IP packets.  Having a
"DNS Server" on the router is meant to make setting up the computers
on your LAN simpler (one place to screw up, not many) ;-)

>> When switching on the UPS yesterday the router led light indicating 
>> Internet connection turned 'red' as opposed to expected 'green'.

Router lost it's mind (configuration).

>> I called the ISP explaining my plight; After a few minutes waiting
>> their technical staff advised to reconfigure my router - an answer I
>> did not expect.

The usual problem - the customer has done "something" to the router, so
the ISP hell-desk people reach in (if they can) and reset things to the
factory defaults.   Not a reflection on you, but most customers haven't
any idea what they are doing, and resetting things to the factory default
will get things "running".  May not be safest, but is easiest for them.

>> So, instead of  entering my specific username/password I used 'admin'
>> for both Gateway user name and Gateway password and at this very
>> instant was able to access my router details. However, all my
>> specific router configurations were gone (as someone or something had
>> re-set the router) and I had start all over again.

Yup - all so standard

>> Could it be that my router got hacked by my ISP?

I wouldn't call it hacking - but a reset to a "known" working condition.

> What can I do to avoid this from happening again?

It may be time to replace the router - but the idea of the hell desk
being able to reset things is a cost saving measure.  An alternative
might be having a reset button on the router, and when things fail, the
help desk staff tells you to push that button.  Is that a better choice?
Maybe yes, maybe no.  They could also send out a tech to your house to
reset things, but that is sure to cost you more.

>I am on Linux Mint 17.3 KDE.

That's the computer, not the router.  The problem was on the router.
You do have to pay attention to that choice of router.   Over the past
month here (600 km East of Los Angeles), I've seen hundreds of attempts
to connect to a wireless router (made in China, massive security hole
discovered/reported three years ago, and never fixed). I wouldn't mind
so much, except that the router (Netcore) was mainly sold in China and
to a lesser extent, elsewhere in Southeast Asia - why would the idiots
be trying to hack something that was never here?

>Going back to my original question, which DNS server is preferred -
>Google Public or OpenDNS?

Both "work" - but understand that the sole reason for the existence of
google is to provide "targeted" advertising, based on what they learn
about you.   OpenDNS is less obvious, but you're not getting something
for nothing.   From a privacy standpoint, it doesn't really matter that
much - your ISP (or VPN provider) can still see who you are looking for
and/or connecting to.

        Old guy

[toc] | [prev] | [next] | [standalone]

#3850 — Re: What should I change my DNS to? (combined response)

On 2016-09-06 23:36, Moe Trin wrote:


> Consider changing your DNS settings on the computer, rather than the
> router.  Now, the computer is looking at the "DNS Server" (actually a
> forwarder) on the router.  I wouldn't expect the router ON IT'S OWN to
> be needing DNS - the router is merely forwarding IP packets.  Having a
> "DNS Server" on the router is meant to make setting up the computers
> on your LAN simpler (one place to screw up, not many) ;-)

That is so.

But there are some minor uses for a DNS by the router itself. For
instance, my router queries a time server to get the current time. The
time server is defined by name. Or the router may be configured to use
dyndns or similar, also by name.


>>> I called the ISP explaining my plight; After a few minutes waiting
>>> their technical staff advised to reconfigure my router - an answer I
>>> did not expect.
> 
> The usual problem - the customer has done "something" to the router, so
> the ISP hell-desk people reach in (if they can) and reset things to the
> factory defaults.   Not a reflection on you, but most customers haven't
> any idea what they are doing, and resetting things to the factory default
> will get things "running".  May not be safest, but is easiest for them.

Ah, I did not consider that one.



-- 
Cheers,
       Carlos E.R.

[toc] | [prev] | [next] | [standalone]

#3862 — Re: What should I change my DNS to? (combined response)

On 2016-09-06, Carlos E. R. <robin_listas@invalid.es> wrote:
> On 2016-09-06 23:36, Moe Trin wrote:
>
>
>> Consider changing your DNS settings on the computer, rather than the
>> router.  Now, the computer is looking at the "DNS Server" (actually a
>> forwarder) on the router.  I wouldn't expect the router ON IT'S OWN to
>> be needing DNS - the router is merely forwarding IP packets.  Having a
>> "DNS Server" on the router is meant to make setting up the computers
>> on your LAN simpler (one place to screw up, not many) ;-)
>
> That is so.
>
> But there are some minor uses for a DNS by the router itself. For
> instance, my router queries a time server to get the current time. The

Either a bad idea or a really bad idea. Some routers are incompetently
programmed and hammer away on the time server. And why does your router
need to have accurate time? 

> time server is defined by name. Or the router may be configured to use
> dyndns or similar, also by name.
>
>
>>>> I called the ISP explaining my plight; After a few minutes waiting
>>>> their technical staff advised to reconfigure my router - an answer I
>>>> did not expect.
>> 
>> The usual problem - the customer has done "something" to the router, so
>> the ISP hell-desk people reach in (if they can) and reset things to the
>> factory defaults.   Not a reflection on you, but most customers haven't
>> any idea what they are doing, and resetting things to the factory default
>> will get things "running".  May not be safest, but is easiest for them.
>
> Ah, I did not consider that one.

Except that having your router open to "resetting" from outside is a
HUGE security hole, since they can do so much more than just resetting.
>
>
>

[toc] | [prev] | [next] | [standalone]

#3870 — Re: What should I change my DNS to? (combined response)

On 2016-09-07 10:18, William Unruh wrote:
> On 2016-09-06, Carlos E. R. <robin_listas@invalid.es> wrote:


>> That is so.
>>
>> But there are some minor uses for a DNS by the router itself. For
>> instance, my router queries a time server to get the current time. The
> 
> Either a bad idea or a really bad idea. Some routers are incompetently
> programmed and hammer away on the time server. And why does your router
> need to have accurate time? 

Not accurate time. Just "time". Not hammering, just a single shot. Once.
Because if it doesn't, then the logs are dated 1970, simple as that.


>> time server is defined by name. Or the router may be configured to use
>> dyndns or similar, also by name.
>>
>>
>>>>> I called the ISP explaining my plight; After a few minutes waiting
>>>>> their technical staff advised to reconfigure my router - an answer I
>>>>> did not expect.
>>>
>>> The usual problem - the customer has done "something" to the router, so
>>> the ISP hell-desk people reach in (if they can) and reset things to the
>>> factory defaults.   Not a reflection on you, but most customers haven't
>>> any idea what they are doing, and resetting things to the factory default
>>> will get things "running".  May not be safest, but is easiest for them.
>>
>> Ah, I did not consider that one.
> 
> Except that having your router open to "resetting" from outside is a
> HUGE security hole, since they can do so much more than just resetting.

Not from outside, but by the ISP personnel and from the ISP office. A
limited set of people. Makes sense for the huge majority of customers
that have no idea how to manage a router, even less update it.

-- 
Cheers,
       Carlos E.R.

[toc] | [prev] | [next] | [standalone]

#3876 — Re: What should I change my DNS to? (combined response)

On Wed, 7 Sep 2016, in the Usenet newsgroup comp.os.linux.networking, in article
<ojc5ad-4hl.ln1@minas-tirith.valinor>, Carlos E. R. wrote:

>William Unruh wrote:

>> Carlos E. R. <robin_listas@invalid.es> wrote:

>>>> The usual problem - the customer has done "something" to the router,
>>>> so the ISP hell-desk people reach in (if they can) and reset things
>>>> to the factory defaults.   Not a reflection on you, but most
>>>> customers haven't any idea what they are doing, and resetting things
>>>> to the factory default will get things "running".  May not be safest,
>>>> but is easiest for them.

>>> Ah, I did not consider that one.

>> Except that having your router open to "resetting" from outside is a
>> HUGE security hole, since they can do so much more than just resetting.

Depends - but many manufacturers go further, giving administrative access
from outside.  Quoting from TWO YEAR OLD web-page from TrendMicro.com:

   Routers manufactured by Netcore, a popular brand for networking
   equipment in China have a wide-open backdoor that can be fairly
   easily exploited by attackers.  These products are also sold under
   the Netis brand name outside of China. This backdoor allows
   cybercriminals to easily run arbitrary code on these routers,
   rendering it vulnerable as a security device.

   What is this backdoor?  Simply put, it is an open UDP port listening
   at port 53413.  This port is accessible from the WAN side of the
   router.  This means that if the router in question has an externally
   accessible IP address (i.e., almost all residential and SMB users),
   an attacker from anywhere on the Internet can access the backdoor.

   This backdoor is "protected" by a single hardcoded password located
   in the routers's firmware.  Netcore/Netis routers appear to have the
   same password.  This "protection" is essentially ineffective, as
   attackers can easily log into these routers and users cannot
   modify or disable this backdoor.

Can we all slap our foreheads and say "DUH!!!"   (Shadowserver.org says
a ZMap scan found most of the 2 million-plus devices are in China, but
they're also found in Korea, Taiwan, Nepal, Pakistan, Hong Kong, and
elsewhere.)  In August, I saw hundreds of such connection attempts here
in Arizona.  "Duh!!!", indeed.

>Not from outside, but by the ISP personnel and from the ISP office.

And how exactly is such access restricted to ONLY the ISP office?  Do
you really think the ISP has put a filter that knows the IP of the
office systems on each and every router/modem/what-ever?   I don't
think so!  Perimeter firewalls can filter access "from the world" but
what about the skript-kiddiez and wanna-be's who are customers of that
ISP (or others who have r00ted/zombied some idiot customer of the ISP)?
And as pointed out elsewhere, there are a terrifying number of systems
out there with a "secret" username/password of admin and admin.

You may want to look at recent issues of the Digest of the "A.C.M. Forum
on Risks to the Public in Computers and Related Systems" (the Usenet
newsgroup "comp.risks").   As stupid governments are NOT learning, an
open back-door for "them" is an open back-door for all.

        Old guy

[toc] | [prev] | [next] | [standalone]

#3877 — Re: What should I change my DNS to? (combined response)

On 2016-09-07 23:52, Moe Trin wrote:
> On Wed, 7 Sep 2016, in the Usenet newsgroup comp.os.linux.networking, in article
> <ojc5ad-4hl.ln1@minas-tirith.valinor>, Carlos E. R. wrote:


>> Not from outside, but by the ISP personnel and from the ISP office.
> 
> And how exactly is such access restricted to ONLY the ISP office?  

Because that office has a known fixed IP, and the router comes
configured to only allow access to the special administrative interface
to packets coming from that IP (which perhaps can be faked).

These routers are only sold/installed by that ISP. If sold by a
different ISP, then that remote configuration interface has a different
configuration.

And yes, my current router came with a different admin password for each
client. The ISP keeps a database of those passwords somewhere. In some
cases these passwords were generated by an algorithm and people found
out how to generate the same password, perhaps tied to the phone number.
But they know this was done, and I hope this iteration they did it well,
not so easy to hack a password. I don't know for sure.

But that is not the case for the OP, his router is older.

-- 
Cheers,
       Carlos E.R.

[toc] | [prev] | [next] | [standalone]

Page 1 of 3  [1] 2 3  Next page →

Back to top | Article view | comp.os.linux.networking

csiph-web