3 ms·
Yeah, but isn't that laughably easy to block such a scheme? If a packet is destined for port 53 that isn't the ISPs DNS server, poof it's gone!
by sidewndr46 4y ago
Yeah, but isn't that laughably easy to block such a scheme? If a packet is destined for port 53 that isn't the ISPs DNS server, poof it's gone!
- Nextgrid 4y agoOr just redirect any outbound port-53 traffic to the ISP's DNS which will pretend to be the server you're talking to while silently applying the filtering.
- denton-scratch 4y agoYou're right; that's a very simple firewall rule. But if I can't access a working DNS server over the internet, then I don't have internet service, and whatever kind of provider I have, it's not an "internet service provider".
- sidewndr46 4y agoEach ISP get's to make its own rules, but its the norm where I've lived to have some services blocked. For example, my ISP blocks GRE. At least one in the past I had blocked inbound SMTP & DNS.
- denton-scratch 4y agoFine. I just don't call that "internet service". That's some kind of walled-garden internet-lite, conceptually the same as the old AOL.