[Nottingham] How ISP shenanigans hampers your browsing experience.

[Jason Irwin]

On 07/01/15 12:18, Martin wrote:
> Howto Abuse DNS to Blacklist/Block Sites
> http://nottingham.lug.org.uk/2012/06/howto-abuse-dns-to-blacklistblock-sites/3329

Mid-range consumer kit not run bind9, they use DD-WRT (or similar) and
dnsmasq.
There's a few guides around for doing simialr, mostly using the anti-ads
pack - https://github.com/aviadra/anti-ads-pack

Although I think the cron job (every hour) is a smidge excessive and I
am not sure why they inject a firewall rule to route to port 81 when
pixelserv is started on port 80. Given that pixelserv is also on its own
IP addy, the rule seems redundant to me.
But this is networking and, well, you know me and networking...

Obviously network-level blocks can stop sites working and there is no
longer local control over what to show/hide (no, allow ads from *that*
source on *this* site is possible). This means you could end up denying
revenue to sites you want to support.

It might also mess up Safari, although as we only notice the lag on WiFi
I think that it down to Safari/OS X being crap (something about DNS
pre-cache; I gave up trying to fix it).

-- 
╔═════════════╦══════════════════════════════════════════╗
║ Jason Irwin ║ OpenPGP (GPG/PGP) Public Key: 0xD0C592B1 ║
║             ║ Import from hkp://pgp.mit.edu            ║
╚═════════════╩══════════════════════════════════════════╝