[Itpolicy-np] Re: [NepSecure.com] Re: NTC Blocking external DNS for ADSL clients?

[Bipin Gautam]

> fyi:
> OpenDNS launched "FamilyShield", a service designed to filter out
> sites with pornographic content. The service uses the DNS addresses
> 208.67.222.123 and 208.67.220.123
>

GLAD, it works now........ :) Thankyou all who EMAILED TO NTC!!!

OpenDNS (or similar foss architecture) provides both FamilyShield and
DNSSEC. Glad we wont be missing the features now... (ref [1] for
details)


Regardless of how our typical "government" is/works, Thank You NTC
support for your prompt action. Wow are they working on eCRM...
sumthin'?

My Respect with Best Regards,
-bipin


[1] ---------------------------------------------------------------------------------------------------------
dig @208.67.222.123 google.com

; <<>> DiG 9.7.0-P1 <<>> @208.67.222.123 google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38817
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;google.com.			IN	A

;; ANSWER SECTION:
google.com.		226	IN	A	209.85.153.104

;; Query time: 130 msec
;; SERVER: 208.67.222.123#53(208.67.222.123)
;; WHEN: ------------------
;; MSG SIZE  rcvd: 44

--------------

How to install DNSCurve on your authoritative name server

DNSCurve has been hyped vaporware promoted for nearly two years while
DNSSEC finally enjoys steady deployment and interoperable
implementations. Now that OpenDNS announced the adoption of DNSCurve
and many twits were tweeted about how OpenDNS uses “DNSCurve today,
not DNSSEC tomorrow“, I wanted to find out how ready and usable
DNSCurve really is today.

I won’t go into any of the aesthetic and operational problems of the
DNSCurve design. I just wanted to make it work. Now.

To install the (so far) only available DNSCurve prototype by Matthew
Dempsky, you need the DNSCurve forwarding proxy for authoritative
servers and a DNSCurve patch for dnscache from the djbdns package.
Both require the NaCl library to compile.

For easier installation, I built my own Ubuntu DNSCurve repository:

    apt-get install daemontools djbdns dnscurve-forward

(Read More: http://bd.hauke-lampe.de/dnssec/how-to-install-dnscurve.html )

...

OpenDNS : http://www.enterprisenetworkingplanet.com/netos/article.php/3727951/How-Does-OpenDNS-New-Competition-Stack-Up.htm

OpenDNS includes some fancy features for its users' domains. They can
configure OpenDNS to block Web sites, based on the criteria they
specify, for all of their client machines. This includes adult sites,
social networking sites, and whatever else they specify.

OpenDNS also allows remote sites to configure a custom redirection
page, so users aren't just blindly redirected to some foreign site
with no rationale. Couple that functionality with the DNS activity
reports OpenDNS also provides, and OpenDNS is a clear winner.
...
OpenDNS today announced it has adopted DNSCurve to secure DNS
http://www.mail-archive.com/ietf@ietf.org/msg45416.html

-------------------------------------------------------------------------------------------------------------------