[AusNOG] MS Exchange issues with Telstra

[Alastair Waddell]

This is a great chance to plug DNSCrypt

https://github.com/opendns/dnscrypt-proxy

which is a simple and permanent fix for DNS privacy without any big hit on
performance. It uses UDP 443 by default and picks one of OpenDNS' (or a
selection of other providers') caches. I *think* its smart about location
but I've not debugged (I don't have any issue with the resolution time).

It has one single knob (on OS X) to workaround captive portals (which does
allow a MITM to forcibly downgrade security which is why I have the knob
unset and deal with captive portals manually).

Regards,



On Thu, Mar 5, 2015 at 11:31 AM, Ben Cooper <ben at zeno.io> wrote:

> side note: telstra block using any DNS but their on NextG as well, had to
> make scripts to switch off DNS settings when using telstra.
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
>


-- 

Alastair Waddell

Legion Internet

Australia
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20150305/e5457a33/attachment.html>