On Sat, 2012-10-20 at 04:08 -0400, Bob Goodwin - Zuni, Virginia, USA
wrote:
> Ok, this is what I see. What is it telling me?
> 
>     We detected the 2 DNS servers listed below.
> 
>     WARNING: If you are connected to an anonymity/privacy service and
>     ANY of the servers listed below are from your ISP then your DNS is
>     leaking. (You should be able to recognize them based on the hostname
>     and location).
> 
>     IP:         184.63.128.68
>     Hostname:   184.63.128.68
>     ISP:        Wildblue Communications
>     Country:    United States
> 
>     IP:         184.63.128.69
>     Hostname:   184.63.128.69
>     ISP:        Wildblue Communications
>     Country:    United States
> 
> DNS should be set for opendns 208.67.220.220 and 222. The dns address 
> they provided me six years ago is 12.189.32.61. I don't see either
> here, just a Wildblue address,different from the one my router thinks
> it is connected to [WAN IP: 184.20.151.17].

Going from what I read of their site, that means that they've figured
out the DNS servers you're getting answers from are the ones listed
above, not the ones that you're hoping to use.  Therefore, your ISP is
acting as a transparent proxy, intercepting all your DNS requests and
answering them, themselves, no matter what you do.

In my case, it comes back with my public IP address.  Which, kind of,
makes sense.  I run my own DNS servers, on my LAN, which is behind a
router doing NAT.

I'd like to know how they're doing their discovery.

I can understand why ISPs might do proxying, though I don't think it's a
brilliant idea (likewise with HTTP proxying).  There's customers that
badly configure their computers, so intercepting is a simplistic way to
work around that.  Some ISPs might try protecting their users from
malicious content on the internet, though they could do that with their
own servers without proxying, allowing you to make your own mind up to
use their censored servers or your own choice of servers.  And some ISPs
are obligated to censor children's access, again they could do that
other ways.




-- 
[tim@localhost ~]$ uname -rsvp
Linux 3.6.2-4.fc17.x86_64 #1 SMP Wed Oct 17 02:43:21 UTC 2012 x86_64

All mail to my mailbox is automatically deleted, there is no point
trying to privately email me, I will only read messages posted to the
public lists.



-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org

Reply via email to