Welcome Guest ( Log In | Register )

Outline · [ Standard ] · Linear+

 It seems TM Unifi has finally implemented, transparent DNS proxy

views
     
SUSdattebayo
post Sep 5 2024, 12:24 AM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


QUOTE(kwss @ Sep 5 2024, 12:01 AM)
Yes it is...
If TM DNS block the domain just use lowyat.net or cloudflare.com IP address in your HOST file.
*
it won't work this way

Cloudflare IPs are dynamic from time to time

sometimes you connected to KUL server, sometimes SIN server, depending on latency



SUSdattebayo
post Sep 5 2024, 12:30 AM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


QUOTE(zerorating @ Sep 5 2024, 12:26 AM)
you can always do /32 static route what. small inconvenience are acceptable  laugh.gif
*
modern CDN networks are having dynamic IPs

at one moment you connect to LYN at 1.2.3.4, 10 minutes later it will resolved to 4.5.6.7

not to mention cloudflare and other CDNs are sharing the same IP for other customers like AirAsia as well, we won't know

so how to block LYN using archaic /32 IP block, without sacrificing AirAsia in the process?

This post has been edited by dattebayo: Sep 5 2024, 12:31 AM
SUSdattebayo
post Sep 5 2024, 12:40 AM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


QUOTE(zerorating @ Sep 5 2024, 12:35 AM)
cant comment further, the company i work have dedicated IP per CDN site which we can access most of our endpoint. the only differentiating factor is them SNI.
*
that is not cheap man

but when you mention things like SNI it suggests that the same IP probably been shared across multiple users dy


SUSdattebayo
post Sep 5 2024, 12:42 AM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


QUOTE(zerorating @ Sep 5 2024, 12:41 AM)
actually they did IP block before during covid, it just to conserve bandwidth as most people stay at home. once bukkake they release it lel.
*
its futile as more and more workloads are on cloud these days

just click a few buttons and the IPs already changed

one can configure AWS global accelerator to use US IP, but the backend is still SG/MY region

i dare MCMC to block entire AWS US IP block, essentially 2/3 of the IPs would be blacklisted KEK

This post has been edited by dattebayo: Sep 5 2024, 12:43 AM
SUSdattebayo
post Sep 5 2024, 11:30 AM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


i tried in Apple platform
if you removed all DNS servers in the network connections

iOS will route all DNS queries to iCloud private relay laugh.gif

so when would FuckMe Madani block iCloud network? whistling.gif
SUSdattebayo
post Sep 5 2024, 11:44 AM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


to check what's your effective DNS servers currently are

go to https://dnsleaktest.com/

This post has been edited by dattebayo: Sep 5 2024, 11:45 AM
SUSdattebayo
post Sep 6 2024, 03:14 PM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


QUOTE(headache @ Sep 6 2024, 03:00 PM)
They are not blocking the whole Cloudflare just their famous and Public DNS server, same with Google. There are other DNS servers on Cloudflare that are not so Public.

smile.gif
*
no you can't connect to them directly, those are backend servers in cloudflare and they don't allow connections from outside cloudflare

the only front end is 1.1.1.1 which has been blocked by Unifi

good move, Fahmi

PAS will get my vote next GE


SUSdattebayo
post Sep 9 2024, 03:06 PM

Look at all my stars!!
*******
Senior Member
5,366 posts

Joined: Aug 2005


QUOTE(haya @ Sep 9 2024, 07:51 AM)
The official party line (before u-turn): https://thesun.my/local-news/mcmc-assures-d...ites-NN12975293
MCMC assures DNS redirection will safeguard access to legitimate websites
    07-09- 2024 10:02 PM

CYBERJAYA: The Malaysian Communications and Multimedia Commission (MCMC) has assured that its directive to Internet Service Providers (ISPs) to redirect domain name system (DNS) traffic using third-party DNS servers back to their servers will not affect, disrupt, or block users from accessing legitimate websites.

Chief network security officer Datuk Dr. Mohamed Sulaiman Sultan Suhaibuddeen stated that the websites affected by this action are those that violate Malaysian law, thereby resulting in restrictions to prevent access for Malaysians.

“Websites that do not contain harmful content and have no issues can still be accessed as usual. The execution of this directive aims to protect users from accessing websites with dangerous online content.

“The blocking of illegal websites is not a new practice; it has been in place for many years. What is being done now is a strengthening of measures to prevent access to content that is unlawful,“ he said during a briefing on the DNS redirection here today.

For instance, Mohamed Sulaiman said MCMC has blocked 24,277 websites since 2018, for various violations such as online gambling (39 percent), pornography/obscene content (31 percent), copyright infringement (14 percent), and unlawful investments/scams (2 percent).

DNS is a system designed to turn website addresses into numeric IP addresses to locate websites on the internet. ISPs typically operate their own DNS servers, which can be configured to block access to certain websites or domains based on their content. This is a common method used to protect users from harmful content.

Commenting on perceptions and concerns regarding user privacy being compromised due to the implementation of the directive, Mohamed Sulaiman emphasised that MCMC does not have visibility over Internet browsing activities, nor will this action affect Internet speed.

“This redirection involves the respective ISPs; there is no connection to MCMC. For example, if someone is a customer of Telekom Malaysia ™, they will be redirected to TM. We are not involved, and we do not have any information.

“Regarding speed, DNS functions by converting website addresses into numerical IP addresses to find and connect to the websites being accessed. It is not related to Internet speed issues,“ he said.

The directive, which is set to take effect on Sept 30, has led some to view the given timeframe as too short. However, Mohamed Sulaiman noted that ISPs were informed of the matter last year.

“The ISPs were briefed at the end of last year, and they have also conducted pilot tests. We have given them until the end of this month to carry out the final implementation,“ he said.

Mohamed Sulaiman stated that although the measure is to take effect at the end of this month, improvements can still be made continuously, as the main objective is to protect the public, particularly vulnerable groups, from harmful online content.

When asked about the necessity of the DNS redirection directive, particularly in light of Malaysia’s upcoming enforcement of social media licensing in January next year, Mohamed Sulaiman explained that harmful and illegal content is present in various formats and platforms, with the majority found on social media.

“However, we also find such content on websites that need to be blocked to protect vulnerable groups,“ he added.

He clarified that the definition of harmful content is not solely determined by the MCMC but also depends on the relevant jurisdiction owners, such as copyright laws under the Ministry of Domestic Trade and Cost of Living.

“They will evaluate and have their own experts. When they find a website with illegal content, they will make the decision. For example, the Ministry of Health can examine the sale of unregistered or harmful drugs. Each entity has its authority and its own laws,“ he explained.
*
kebodohan yang tanpa batas



 

Change to:
| Lo-Fi Version
0.0197sec    0.75    7 queries    GZIP Disabled
Time is now: 20th December 2025 - 11:43 PM