Open Dns Has Gone

[webfact]

Since last night I can not use anymore openDNS. Despite it is configured in my router (Belkin)

and TCP/IP settings - DNS is shown in ipconfig as well - none of my DNS shortcuts work

nor does openDNS web site confirm I am using their DNS.

I am subscribed to CSLoxinfo SME ADSL with fixed IP (which seems to be a proxy).

I called Loxinfo helpdesk and was advised to use their DNS, but that's something I can not agree with.

What shall I do?

Thanks for your advise

[Guest Reimar]

Try to set your Router to Automatic and than try to use at the PC the Open DNS Servers while setting the PD's to fixed Network IP.

Cheers.

[Rice_King]

Since last night I can not use anymore openDNS. Despite it is configured in my router (Belkin)

and TCP/IP settings - DNS is shown in ipconfig as well - none of my DNS shortcuts work

nor does openDNS web site confirm I am using their DNS anymore.

Strange. I am on True in CM and I receive this message when I land on their homepage. "You're using OpenDNS. Thanks! You are now navigating the Internet safer, faster, smarter and more reliably than ever before."

[webfact]

Try to set your Router to Automatic and than try to use at the PC the Open DNS Servers while setting the PD's to fixed Network IP.

Cheers.

unfortunately I didn's solve the issue. ipconfig/all still shows openDNS, but when I check DNS here: http://www.doxpara.com/

this comes up

"Your name server, at 203.146.237.212, appears vulnerable to DNS Cache Poisoning".

On my PC/network there isn't a dns with 203.146... configured. Thats Loxinfos DNS!

Wrong PC/router configuration or is it originating from the provider side to use their DNS?

[Guest Reimar]

The DNS: The host name for 203.146.237.212 is slb-bkkct1.csloxinfo.net

That isn't Open DNS! Open DNS is: Primary: 208.67.222.222 and Secondary: 280.67.220.220

So you need to set your NIC/Computer to and static IP with that 2 DNS servers above!

What OS you use? XP or Vista?

Cheers.

[webfact]

The DNS: The host name for 203.146.237.212 is slb-bkkct1.csloxinfo.net

That isn't Open DNS! Open DNS is: Primary: 208.67.222.222 and Secondary: 280.67.220.220

So you need to set your NIC/Computer to and static IP with that 2 DNS servers above!

What OS you use? XP or Vista?

Cheers.

im using XP prof. May I ask you to give me a "3 step" advise for the set-up.

Thanks in advance

[Guest Reimar]

The DNS: The host name for 203.146.237.212 is slb-bkkct1.csloxinfo.net

That isn't Open DNS! Open DNS is: Primary: 208.67.222.222 and Secondary: 280.67.220.220

So you need to set your NIC/Computer to an static IP with that 2 DNS servers above!

What OS you use? XP or Vista?

Cheers.

im using XP prof. May I ask you to give me a "3 step" advise for the set-up.

Thanks in advance

For your computer:

click on Start ->Control Panel ->Network Connection ->[your NIC] ->Properties ->Internet Protocol (TCP/IP)

Check: Use the following IP address:

IP Address: 192.168.1.100 (example)

Subnet Mask: 255.255.255.0 (example)

Default Gateway: 192.168.1.1 (example)

Primary DNS Server: 208.67.222.222 (Open DNS)

Secandary DNS Server: 208.67.220.220 (Open DNS)

In your Router you need to enable DHCP and to delete the DNS Server from CS-Lox and set to Auto or key in the Open DNS Servers which may isn't possible.

More I can't tell you now because I don't know your Router.

Cheers.

PS: Change the (example) with your Network address settings.

[webfact]

The DNS: The host name for 203.146.237.212 is slb-bkkct1.csloxinfo.net

That isn't Open DNS! Open DNS is: Primary: 208.67.222.222 and Secondary: 280.67.220.220

So you need to set your NIC/Computer to an static IP with that 2 DNS servers above!

What OS you use? XP or Vista?

Cheers.

im using XP prof. May I ask you to give me a "3 step" advise for the set-up.

Thanks in advance

For your computer:

click on Start ->Control Panel ->Network Connection ->[your NIC] ->Properties ->Internet Protocol (TCP/IP)

Check: Use the following IP address:

IP Address: 192.168.1.100 (example)

Subnet Mask: 255.255.255.0 (example)

Default Gateway: 192.168.1.1 (example)

Primary DNS Server: 208.67.222.222 (Open DNS)

Secandary DNS Server: 208.67.220.220 (Open DNS)

In your Router you need to enable DHCP and to delete the DNS Server from CS-Lox and set to Auto or key in the Open DNS Servers which may isn't possible.

More I can't tell you now because I don't know your Router.

Cheers.

PS: Change the (example) with your Network address settings.

Thanks for your help. I'll give it a try later this day. I'll let you know the result.

anyway my Router is "Belkin wireless G Router - model: F5D7633-4"

[webfact]

The DNS: The host name for 203.146.237.212 is slb-bkkct1.csloxinfo.net

That isn't Open DNS! Open DNS is: Primary: 208.67.222.222 and Secondary: 280.67.220.220

So you need to set your NIC/Computer to an static IP with that 2 DNS servers above!

What OS you use? XP or Vista?

Cheers.

im using XP prof. May I ask you to give me a "3 step" advise for the set-up.

Thanks in advance

For your computer:

click on Start ->Control Panel ->Network Connection ->[your NIC] ->Properties ->Internet Protocol (TCP/IP)

Check: Use the following IP address:

IP Address: 192.168.1.100 (example)

Subnet Mask: 255.255.255.0 (example)

Default Gateway: 192.168.1.1 (example)

Primary DNS Server: 208.67.222.222 (Open DNS)

Secandary DNS Server: 208.67.220.220 (Open DNS)

In your Router you need to enable DHCP and to delete the DNS Server from CS-Lox and set to Auto or key in the Open DNS Servers which may isn't possible.

More I can't tell you now because I don't know your Router.

Cheers.

PS: Change the (example) with your Network address settings.

Thanks for your help. I'll give it a try later this day. I'll let you know the result.

anyway my Router is "Belkin wireless G Router - model: F5D7633-4"

Raimar, thanks, your advise did work and brought at least openDNS back to my PC! I got the confirmation from their web site

"..using openDNS"

but if I run the DNS test on the web site mentioned earlier in my posting the nagging CSloxinfo DNS still pops up instead of 208.67....

"Your name server, at 203.146.237.237, appears vulnerable to DNS Cache Poisoning".

Any clue? I tested with 2 router brands (Belkin, Linksys) with same results!

[Insight]

^ Are you browsing through a proxy? If so, the site might be picking up the domain server used by the proxy, not your PC.

[Veazer]

Has anyone ever thought to ask the question "Why should we trust OpenDNS?" I use them myself, but this thought just occurred to me recently.

If someone asked you if they could install a device to keep a record of every site/domain you ever connected to, regardless of browser or application, most people would obviously decline but this is exactly what we're doing. Who are they, and what are they doing with this staggering amount of information?

[niller74]

Has anyone ever thought to ask the question "Why should we trust OpenDNS?" I use them myself, but this thought just occurred to me recently.

If someone asked you if they could install a device to keep a record of every site/domain you ever connected to, regardless of browser or application, most people would obviously decline but this is exactly what we're doing. Who are they, and what are they doing with this staggering amount of information?

To put it this way: I trust OpenDNS more than I trust CAT, TOT, TT&T or any other ISP running a DNS server in this country.

[Veazer]

To put it this way: I trust OpenDNS more than I trust CAT, TOT, TT&T or any other ISP running a DNS server in this country.

I absolutely agree, but in my home country I use a very small ISP and know the owner personally. Would i use OpenDNS instead of his DNS servers? I don't know. They're great for me as a web designer because DNS changes propagate to them very quickly, but other than that I could get by with the default DNS servers just fine.

At the very least, you must admit that the amount of information they can collect about internet usage is astounding.

[Guest Reimar]

Raimar, thanks, your advise did work and brought at least openDNS back to my PC! I got the confirmation from their web site

"..using openDNS"

but if I run the DNS test on the web site mentioned earlier in my posting the nagging CSloxinfo DNS still pops up instead of 208.67....

"Your name server, at 203.146.237.237, appears vulnerable to DNS Cache Poisoning".

Any clue? I tested with 2 router brands (Belkin, Linksys) with same results!

You're still using the CS-Lox server as first gateway or as the last when the data came back to you. No way to avoid that because it's your ISP!

But the possible way to attack your system is more limited.

Glad to hear you back on "normal" work!

Cheers.

[Prasert]

Do a test to see if traffic to OpenDNS is blocked or filtered by CSLoxinfo. No need to change settings.

Open a cmd box (start -> run -> cmd <enter>)

Type: nslookup <enter>

Type: server 208.67.222.222 <enter>

Type: www.hotmail.com <enter>

If traffic is not filtered or blocked, you should get an almost instant reply on your screen. If nothing seems to happen and you finally get an error message, it's probably filtered.

Example output of the commands above:

C:\>nslookup

> server 208.67.222.222

Default Server: resolver1.opendns.com

Address: 208.67.222.222

> www.hotmail.com

Server: resolver1.opendns.com

Address: 208.67.222.222

Non-authoritative answer:

Name: www.hotmail.aate.nsatc.net

Address: 67.72.4.94

Aliases: www.hotmail.com, www.hotmail.com.nsatc.net

>

[webfact]

Do a test to see if traffic to OpenDNS is blocked or filtered by CSLoxinfo. No need to change settings.

Open a cmd box (start -> run -> cmd <enter>)

Type: nslookup <enter>

Type: server 208.67.222.222 <enter>

Type: www.hotmail.com <enter>

If traffic is not filtered or blocked, you should get an almost instant reply on your screen. If nothing seems to happen and you finally get an error message, it's probably filtered.

Example output of the commands above:

C:\>nslookup

> server 208.67.222.222

Default Server: resolver1.opendns.com

Address: 208.67.222.222

> www.hotmail.com

Server: resolver1.opendns.com

Address: 208.67.222.222

Non-authoritative answer:

Name: www.hotmail.aate.nsatc.net

Address: 67.72.4.94

Aliases: www.hotmail.com, www.hotmail.com.nsatc.net

>

Perfect! Now I have proof I am using open DNS. Thanks a lot.

[niller74]

To put it this way: I trust OpenDNS more than I trust CAT, TOT, TT&T or any other ISP running a DNS server in this country.

I absolutely agree, but in my home country I use a very small ISP and know the owner personally. Would i use OpenDNS instead of his DNS servers? I don't know. They're great for me as a web designer because DNS changes propagate to them very quickly, but other than that I could get by with the default DNS servers just fine.

At the very least, you must admit that the amount of information they can collect about internet usage is astounding.

Both yes and no. Most people dont register at OpenDNS and even fewer know how to make their dynamic DNS stuff work. The majority of end-users are on dynamic IPs so what information would they really have? A list of DNS requests for a dynamic IP somewhere in the cloud?

If they required some authentication before you could actually use their service, it would be another story, but you can use anonymous just fine.

EDIT: readability

[niller74]

I could fear that the ISPs would block port 53 to everything else than their own DNS server as they they have done with smtp (port 25). They could do this to do simple banning of certain sites/services. As we know, this is a big deal with the current Thai government.

It would be a lot harder to work around the DNS block than the SMTP block, since most SMTP servers accept incoming connection on alternative ports. I haven't heard of DNS services listening on other ports than 53.

Just wait and see they can and will make it hel_l for us.

[vagabond48]

Check: Use the following IP address:

IP Address: 192.168.1.100 (example)

Subnet Mask: 255.255.255.0 (example)

Default Gateway: 192.168.1.1 (example)

In your Router you need to enable DHCP and to delete the DNS Server from CS-Lox and set to Auto or key in the Open DNS Servers which may isn't possible.

More I can't tell you now because I don't know your Router.

Cheers.

PS: Change the (example) with your Network address settings.

Hi.

This is the 1st that I have heard about Open DNS servers.

I have a laptop and currently connect to either my GH wifi or another free wifi location with faster broadband. Since I don't control either of the routers, can I assume that it is unlikely that I will be able to take advantage on this?

[niller74]

Check: Use the following IP address:

IP Address: 192.168.1.100 (example)

Subnet Mask: 255.255.255.0 (example)

Default Gateway: 192.168.1.1 (example)

In your Router you need to enable DHCP and to delete the DNS Server from CS-Lox and set to Auto or key in the Open DNS Servers which may isn't possible.

More I can't tell you now because I don't know your Router.

Cheers.

PS: Change the (example) with your Network address settings.

Hi.

This is the 1st that I have heard about Open DNS servers.

I have a laptop and currently connect to either my GH wifi or another free wifi location with faster broadband. Since I don't control either of the routers, can I assume that it is unlikely that I will be able to take advantage on this?

On almost all networks you can take advantage of openDNS, unless as I mentioned above the provider restrict DNS traffic to only their own servers, which I haven't experienced yet though.

[vagabond48]

Check: Use the following IP address:

IP Address: 192.168.1.100 (example)

Subnet Mask: 255.255.255.0 (example)

Default Gateway: 192.168.1.1 (example)

PS: Change the (example) with your Network address settings.

I just have one follow-up question. As I wrote, I use Intel pro-set wi-fi connection and don't want to guess, so where do I find my network address?

Thanks.

[Veazer]

Hi.

This is the 1st that I have heard about Open DNS servers.

I have a laptop and currently connect to either my GH wifi or another free wifi location with faster broadband. Since I don't control either of the routers, can I assume that it is unlikely that I will be able to take advantage on this?

1. Start > Settings > Network Connections
   (or Start > Run > "ncpal.cpl")
   
2. Right-click your network adapter and choose 'Properties'
   
3. Scroll down through the list of network protocols and double-click Internet Protocol (TCP/IP)
   
4. Change "Obtain DNS server address automatically" to "Use the following DNS server addresses" and enter the DNS servers mentioned before, 208.67.222.222 and 208.67.220.220
   

[Prasert]

I could fear that the ISPs would block port 53 to everything else than their own DNS server as they they have done with smtp (port 25). They could do this to do simple banning of certain sites/services. As we know, this is a big deal with the current Thai government.

It would be a lot harder to work around the DNS block than the SMTP block, since most SMTP servers accept incoming connection on alternative ports. I haven't heard of DNS services listening on other ports than 53.

Just wait and see they can and will make it hel_l for us.

Creating a DNS block would be pretty hard for the Thai engineers. Since every dns recursively looks up the addresses at the authoritative nameserver, an open connection (on port 53 udp) is required to every single nameserver on the internet.

Some Thai ISPs do indeed add blacklisted websites to their dns zones, which is totally against the internet regulations. But Thaivisa doesn't allow discussions about (illegal) government-blocking-strategies.........

[vagabond48]

1. Start > Settings > Network Connections
   (or Start > Run > "ncpal.cpl")
   
2. Right-click your network adapter and choose 'Properties'
   
3. Scroll down through the list of network protocols and double-click Internet Protocol (TCP/IP)
   
4. Change "Obtain DNS server address automatically" to "Use the following DNS server addresses" and enter the DNS servers mentioned before, 208.67.222.222 and 208.67.220.220
   

Thanks but Reimar's DNS server address instructions were clear. What I didn't understand is where do I find my network address settings, to change my IP address and default gateway?

Thanks.

[Prasert]

Thanks but Reimar's DNS server address instructions were clear. What I didn't understand is where do I find my network address settings, to change my IP address and default gateway?

Thanks.

Changing your IP and/or default gateway is not needed! This would probably disconnect you from your network / the internet.

[cclub75]

Do a test to see if traffic to OpenDNS is blocked or filtered by CSLoxinfo. No need to change settings.

Open a cmd box (start -> run -> cmd <enter>)

Type: nslookup <enter>

Type: server 208.67.222.222 <enter>

Type: www.hotmail.com <enter>

Great.

Could you please enlight me.

With your trick, I've got :

Non-authoritative answer:

Name: e1534.b.akamaiedge.net

Address: 125.252.246.102

Aliases: www.hotmail.com.corp.net, dotzup.sm.edgekey.net

And... since a few weeks, from time to time... I can get a webpage type "parking webpage" from Dotzup, even though I type a correct web address.

It's really annoying.

[Prasert]

nslookup is not a trick, actually every program does exactly the same when you type in a hostname instead of an ip address.

In this case it looks like you have *something* on your computer that plays tricks with the name resolving. Can be a virus / trojan / script that does not belong on your computer. Virusscanners might not find this one if it's a script. But I'm afraid I can't help you much further. If you're unable to find and solve the source, a re-install is probably the way to get rid of it.

[mortenaa]

Why someone would use OpenDNS while living in Thailand is a riddle..

OpenDNS:

Pinging 208.67.222.222 with 32 bytes of data:

Reply from 208.67.222.222: bytes=32 time=280ms TTL=46

Reply from 208.67.222.222: bytes=32 time=279ms TTL=46

Reply from 208.67.222.222: bytes=32 time=279ms TTL=46

Reply from 208.67.222.222: bytes=32 time=281ms TTL=46

True:

Pinging 203.144.207.49 with 32 bytes of data:

Reply from 203.144.207.49: bytes=32 time=30ms TTL=248

Reply from 203.144.207.49: bytes=32 time=28ms TTL=248

Reply from 203.144.207.49: bytes=32 time=29ms TTL=248

Reply from 203.144.207.49: bytes=32 time=28ms TTL=248

I think maybe the latter is faster...

[niller74]

Why someone would use OpenDNS while living in Thailand is a riddle..

OpenDNS:

Pinging 208.67.222.222 with 32 bytes of data:

Reply from 208.67.222.222: bytes=32 time=280ms TTL=46

Reply from 208.67.222.222: bytes=32 time=279ms TTL=46

Reply from 208.67.222.222: bytes=32 time=279ms TTL=46

Reply from 208.67.222.222: bytes=32 time=281ms TTL=46

True:

Pinging 203.144.207.49 with 32 bytes of data:

Reply from 203.144.207.49: bytes=32 time=30ms TTL=248

Reply from 203.144.207.49: bytes=32 time=28ms TTL=248

Reply from 203.144.207.49: bytes=32 time=29ms TTL=248

Reply from 203.144.207.49: bytes=32 time=28ms TTL=248

I think maybe the latter is faster...

Of course your ISPs DNS will be faster, but is the resolved hostname you are getting from them correct/reliable. Do their DNS run all the time?

I know for a fact that the responses I have been getting in the past from TOT have been crap on many occations.

Furthermore I prefer to use a common DNS since running on a multi wan router will force you to switch DNSs every time one of the connections fail. Using a common DNS let me totally ignore this issue.

[cclub75]

In this case it looks like you have *something* on your computer that plays tricks with the name resolving. Can be a virus / trojan / script that does not belong on your computer. Virusscanners might not find this one if it's a script. But I'm afraid I can't help you much further. If you're unable to find and solve the source, a re-install is probably the way to get rid of it.

Thanks. I was thinking about that, but I ran many anti virus/spywares softwares... with no result.

So I guess, I can't avoid the pain of a fresh reinstall...