Re: What DNS Is Not

2009-11-09 Thread Andrew Cox
not acceptable to some then that's their decision however as a part of our network this DNS 'tomfoolery' is something that both we and the end user see benefits from so I don't see it going away anytime soon. Regards, Andrew Cox AccessPlus HNA

Re: What DNS Is Not

2009-11-09 Thread Andrew Cox
Shouldn't such apps be checking the content they receive back from a server anyway? Regardless of if they think they're getting to the right server (due to a bogus non-NXDOMAIN response) there should be some sort of validation in place.. otherwise you're open in any sort of man-in-the-middle att

Re: What DNS Is Not

2009-11-19 Thread Andrew Cox
As a follow up to this, one of the large Australian ISP's has just introduced a DNS redirection "service" for all home customers. "/The BigPond-branded landing page provides BigPond customers with organic search results, sponsored links, display advertisements and intelligent recommendations,

Re: Testing Internet Speeds and Capacity

2009-11-19 Thread Andrew Cox
There was a thread on speed testing a little while back. http://www.merit.edu/mail.archives/nanog/msg01842.html Regards, Andrew Cox AccessPlus HNA shake righa wrote: Hi, how does one truly test internet speeds provided by your provider. Speed test sits give different results that one

Re: Breaking the internet (hotels, guestnet style)

2009-12-07 Thread Andrew Cox
d user was trying to authenticate to a mail server before determining where to forward the connection onto (Layer 7 stuff, gets a bit tricky) Regards, Andrew Cox AccessPlus Head Network Administrator Jared Mauch wrote: On Dec 7, 2009, at 5:29 PM, John Levine wrote: Will be interesting to s

Re: Breaking the internet (hotels, guestnet style)

2009-12-07 Thread Andrew Cox
ver port 25 is still a problem. Don't see how any system could examine that mail without causing certificate errors. Allowing it to pass to the original server based on the first packet being detected as a secure connection may be possible thou. On Tue, Dec 8, 2009 at 6:54 AM, Andrew Cox wrote

Re: Breaking the internet (hotels, guestnet style)

2009-12-08 Thread Andrew Cox
Sounds like a great idea in theory but would require OS support or a dual-hotspot setup that provided for both options until support was expected. Until such time it's simply unworkable. That and as mentioned in my previous post, the setup we have *just works* for users who don't have the perm

Re: Breaking the internet (hotels, guestnet style)

2009-12-08 Thread Andrew Cox
Yeah the iPhone changes were a bit of a pain, we had to build a second iPhone specific version of our login page because the iPhone "auto-login" feature won't allow more than 1 page to be loaded. We would normally redirect users to the page they've originally requested after they click the log

Re: Breaking the internet (hotels, guestnet style)

2009-12-08 Thread Andrew Cox
Owen DeLong wrote: On Dec 8, 2009, at 1:18 AM, Andrew Cox wrote: Sounds like a great idea in theory but would require OS support or a dual-hotspot setup that provided for both options until support was expected. Until such time it's simply unworkable. That and as mentioned in my pre

Re: Breaking the internet (hotels, guestnet style)

2009-12-08 Thread Andrew Cox
Owen DeLong wrote: Almost all of these systems require you to call support to get a MAC authentication Exception if you don't have a web browser on your device. Most of them grant exceptions on a not to exceed 30 day basis, too. Alternatively it's possible to offer both web-based and pppoe a