Transparent proxies and unblock-us

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Transparent proxies and unblock-us

sultanoswing

814 posts

Ultimate Geek

#111476 4-Nov-2012 22:59

For those of you suffering from your ISP's transparent proxy thwarting your unblock-us DNS servers, there is a simple solution, if you're using a router capable of dnsmasq: http://hackercodex.com/guide/how-to-stop-isp-dns-server-hijacking/. Stop the evil sods in their tracks!

I thought this would be useful to those of you so afflicted, but so endowed :)

freitasm

BDFL - Memuneh
76318 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#712007 5-Nov-2012 07:52

Hmmm. TelstraClear doesn't behave like that, so not much use perhaps?

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

Pluralsight

Learn cloud, mobile, security, data and web technologies with Pluralsight (affiliate link).

sultanoswing

814 posts

Ultimate Geek

#712027 5-Nov-2012 08:56

Perhaps not - but perhaps someone with TC will be able to check if this works. And hopefully someone with Vodafone, the other NZ ISP on unblock-usa's "blacklist".

freitasm

BDFL - Memuneh
76318 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#712029 5-Nov-2012 08:58

What I am saying is that on TCL you don't get the fake ping replies so how can you implement the dnsmask if you don't have the IP?

Please support Geekzone by subscribing, or using one of our referral links: Dosh referral: 00001283 | Sharesies | Goodsync | Mighty Ape | Backblaze

freitasm on Keybase | My technology disclosure

sultanoswing

814 posts

Ultimate Geek

#712033 5-Nov-2012 09:01

Ahh - I see what you mean :)

hard to believe they're transparent proxy is *that* transparent. Must be some way to check what's happening with your packets. What manual DNS settings to TC tell users to input into their routers? Would this help? Where's a hacking geek when you need one?

Bah - just move ISPs is the easier option perhaps (with a termination letter to them explaining why).

geekiegeek

2513 posts

Uber Geek
Inactive user

#712076 5-Nov-2012 09:52

sultanoswing: Ahh - I see what you mean :)

hard to believe they're transparent proxy is *that* transparent. Must be some way to check what's happening with your packets. What manual DNS settings to TC tell users to input into their routers? Would this help? Where's a hacking geek when you need one?

Bah - just move ISPs is the easier option perhaps (with a termination letter to them explaining why).

Or you could just use a VPN.

sultanoswing

814 posts

Ultimate Geek

#712080 5-Nov-2012 09:57

True. But there's overhead with a VPN which is not present with a DNS solution. And accepting the other benefits of encrypted VPN's.

Not that I use either, I have to confess! Hulu etc I don't have time to watch and Netflix steadfastly refuse to support Linux (via moonlight). And I don't have time to watch!

Klipspringer

2385 posts

Uber Geek
Inactive user

#712087 5-Nov-2012 10:07

sultanoswing: True. But there's overhead with a VPN which is not present with a DNS solution. And accepting the other benefits of encrypted VPN's.

Not that I use either, I have to confess! Hulu etc I don't have time to watch and Netflix steadfastly refuse to support Linux (via moonlight). And I don't have time to watch!

Have to agree. I switched to telstraclear from Snap when we moved house as there was no chorus connection. My Netflix stopped working with unblock-us due to the transparent proxies. I never had this issue with Snap before we moved. Sure a vpn is a solution, but try getting good speeds out of it for watching HDX movies. My VPN was averaging on only 3-5Mbit/second, not quiet enough for decent quality.

With unblock-us I am able to stream full HDX movies from Vudu.

In the end I scrapped my telestraclear connection, got the copper installed and am now back on Snap.

sultanoswing

814 posts

Ultimate Geek

#712094 5-Nov-2012 10:22

BraaiGuy: ...not quiet enough for decent quality...

You were having problems with signal-to-noise ratios ?