Transparent proxies and unblock-us

sultanoswing

275 posts

Ultimate Geek

Topic # 111476 4-Nov-2012 22:59
For those of you suffering from your ISP's transparent proxy thwarting your unblock-us DNS servers, there is a simple solution, if you're using a router capable of dnsmasq: http://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/. Stop the evil sods in their tracks! I thought this would be useful to those of you so afflicted, but so endowed :)

BDFL
44226 posts

Uber Geek

Administrator

Trusted

Geekzone

Subscriber

Reply # 712007 5-Nov-2012 07:52
Hmmm. TelstraClear doesn't behave like that, so not much use perhaps? Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) Geekzone Price comparison \| Amazon Kindle order page \| How to get the best out of Geekzone \| New Zealand IT Jobs \| Geekzone News \| Jinglebugs

275 posts

Ultimate Geek

Reply # 712027 5-Nov-2012 08:56
Perhaps not - but perhaps someone with TC will be able to check if this works. And hopefully someone with Vodafone, the other NZ ISP on unblock-usa's "blacklist".

BDFL
44226 posts

Uber Geek

Administrator

Trusted

Geekzone

Subscriber

Reply # 712029 5-Nov-2012 08:58
What I am saying is that on TCL you don't get the fake ping replies so how can you implement the dnsmask if you don't have the IP? Mauricio Freitas (Geekzone Admin, Devil's Advocate, my blog, technology disclosure, my tweets, Web Performance Optimization) Geekzone Price comparison \| Amazon Kindle order page \| How to get the best out of Geekzone \| New Zealand IT Jobs \| Geekzone News \| Jinglebugs

275 posts

Ultimate Geek

Reply # 712033 5-Nov-2012 09:01
Ahh - I see what you mean :) hard to believe they're transparent proxy is that transparent. Must be some way to check what's happening with your packets. What manual DNS settings to TC tell users to input into their routers? Would this help? Where's a hacking geek when you need one? Bah - just move ISPs is the easier option perhaps (with a termination letter to them explaining why).

1130 posts

Uber Geek

Trusted

Reply # 712076 5-Nov-2012 09:52
sultanoswing: Ahh - I see what you mean :) hard to believe they're transparent proxy is that transparent. Must be some way to check what's happening with your packets. What manual DNS settings to TC tell users to input into their routers? Would this help? Where's a hacking geek when you need one? Bah - just move ISPs is the easier option perhaps (with a termination letter to them explaining why). Or you could just use a VPN. "Political correctness is a doctrine fostered by a delusional, illogical minority, and rabidly promoted by an unscrupulous mainstream media which holds forth the proposition that it is entirely possible to pick up a turd by the clean end." My thoughts are my own and are in no way representative of my employer.

275 posts

Ultimate Geek

Reply # 712080 5-Nov-2012 09:57
True. But there's overhead with a VPN which is not present with a DNS solution. And accepting the other benefits of encrypted VPN's. Not that I use either, I have to confess! Hulu etc I don't have time to watch and Netflix steadfastly refuse to support Linux (via moonlight). And I don't have time to watch!

1384 posts

Uber Geek

Subscriber

Reply # 712087 5-Nov-2012 10:07
sultanoswing: True. But there's overhead with a VPN which is not present with a DNS solution. And accepting the other benefits of encrypted VPN's. Not that I use either, I have to confess! Hulu etc I don't have time to watch and Netflix steadfastly refuse to support Linux (via moonlight). And I don't have time to watch! Have to agree. I switched to telstraclear from Snap when we moved house as there was no chorus connection. My Netflix stopped working with unblock-us due to the transparent proxies. I never had this issue with Snap before we moved. Sure a vpn is a solution, but try getting good speeds out of it for watching HDX movies. My VPN was averaging on only 3-5Mbit/second, not quiet enough for decent quality. With unblock-us I am able to stream full HDX movies from Vudu. In the end I scrapped my telestraclear connection, got the copper installed and am now back on Snap. Offense can never be given, only taken ...

275 posts

Ultimate Geek

Reply # 712094 5-Nov-2012 10:22
BraaiGuy: ...not quiet enough for decent quality... You were having problems with signal-to-noise ratios ?