Re: [tor-relays] Don't use Google's DNS server

[Tristan]

Pulse (OVH) is already over-used in the Tor network, and very tolerant.
Hostwinds seemed to be fine with it as long as I responded to abuses
quickly. I haven't gotten any abuse on DigitalOcean yet, but they are very
clear that YOU are responsible for any and all abuses. Not sure how far
they'll go before they terminate you.

On Fri, Jul 29, 2016 at 11:04 AM, Sean Greenslade 
wrote:

> On July 28, 2016 2:50:40 PM EDT, ITechGeek  wrote:
> >On Thu, Jul 28, 2016 at 2:34 PM, Tristan 
> >wrote:
> >
> >> I really wish VPS services wouldn't use Google DNS by default. If not
> >for
> >> this e-mail, I would have been on Google's DNS for a while before I
> >found
> >> out.
> >
> >
> >I actually haven't seen that before, what VPS provider do you use?
>
> Many, many of the super-cheap low end VPS providers (e.g. lowendbox.com)
> just use Google DNS. Most of these providers are very tor-intolerant,
> however, and will terminate your server at the first abuse notice.
>
> --Sean
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>



-- 
Finding information, passing it along. ～SuperSluether
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Don't use Google's DNS server

[Sean Greenslade]

On July 28, 2016 2:50:40 PM EDT, ITechGeek  wrote:
>On Thu, Jul 28, 2016 at 2:34 PM, Tristan 
>wrote:
>
>> I really wish VPS services wouldn't use Google DNS by default. If not
>for
>> this e-mail, I would have been on Google's DNS for a while before I
>found
>> out.
>
>
>I actually haven't seen that before, what VPS provider do you use?

Many, many of the super-cheap low end VPS providers (e.g. lowendbox.com) just 
use Google DNS. Most of these providers are very tor-intolerant, however, and 
will terminate your server at the first abuse notice.

--Sean

___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Don't use Google's DNS server

[Tristan]

Right now I'm using Digital Ocean, but my previous provider experiences
Hostwinds and Pulse (OVH) also have Google DNS as the default.

On Thu, Jul 28, 2016 at 1:50 PM, ITechGeek  wrote:

>
> On Thu, Jul 28, 2016 at 2:34 PM, Tristan  wrote:
>
>> I really wish VPS services wouldn't use Google DNS by default. If not for
>> this e-mail, I would have been on Google's DNS for a while before I found
>> out.
>
>
> I actually haven't seen that before, what VPS provider do you use?
>
>
>
> ---
> -ITG (ITechGeek)  |  i...@itechgeek.com 
> https://keybase.io/itechgeek  |  https://itg.nu/
> Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
> http://fb.me/Jbwa.Net
>
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>
>


-- 
Finding information, passing it along. ～SuperSluether
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Don't use Google's DNS server

[ITechGeek]

On Thu, Jul 28, 2016 at 2:34 PM, Tristan  wrote:

> I really wish VPS services wouldn't use Google DNS by default. If not for
> this e-mail, I would have been on Google's DNS for a while before I found
> out.


I actually haven't seen that before, what VPS provider do you use?


---
-ITG (ITechGeek)  |  i...@itechgeek.com 
https://keybase.io/itechgeek  |  https://itg.nu/
Google Voice: +1-703-493-0128 / Twitter: ITechGeek / Facebook:
http://fb.me/Jbwa.Net
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Don't use Google's DNS server

[Tristan]

I really wish VPS services wouldn't use Google DNS by default. If not for
this e-mail, I would have been on Google's DNS for a while before I found
out.

Maybe the Tor devs could add a warning if an exit is using Google DNS?
Would that be acceptable?

On Thu, Jul 28, 2016 at 12:59 PM, Toralf Förster 
wrote:

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA256
>
> On 07/28/2016 07:50 PM, nusenu wrote:
> > If you run an exit and find your relay fingerprint next to a Google AS
> If only a subset from the whole list is meant it would be helpful to
> provide an appropriate subset of that file for the purpose of this email
> (topic) IMO.
>
> - --
> Toralf
> PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v2
>
> iF4EAREIAAYFAleaSA4ACgkQxOrN3gB26U594wD+PP/E9d5yh35mbcP6b72jFFgx
> THk4+5tznWPW8JQmYw4BAIY7B8q6435LSlm8Z0KpdQiz6v2eVnG5R5nFqZnQsduV
> =jefL
> -END PGP SIGNATURE-
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>



-- 
Finding information, passing it along. ～SuperSluether
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Don't use Google's DNS server

[Toralf Förster]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 07/28/2016 07:50 PM, nusenu wrote:
> If you run an exit and find your relay fingerprint next to a Google AS
If only a subset from the whole list is meant it would be helpful to provide an 
appropriate subset of that file for the purpose of this email (topic) IMO.

- -- 
Toralf
PGP: C4EACDDE 0076E94E, OTR: 420E74C8 30246EE7
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iF4EAREIAAYFAleaSA4ACgkQxOrN3gB26U594wD+PP/E9d5yh35mbcP6b72jFFgx
THk4+5tznWPW8JQmYw4BAIY7B8q6435LSlm8Z0KpdQiz6v2eVnG5R5nFqZnQsduV
=jefL
-END PGP SIGNATURE-
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Don't use Google's DNS server

[nusenu]

phw released some scan data.

If you run an exit and find your relay fingerprint next to a Google AS
name on the list linked below you might want to change your DNS server
settings.

Note this list is based on data from May 2016 (so it does not
necessarily represent the current situation).

https://gist.githubusercontent.com/nusenu/3b346031a88fb24d0e8b662f3e13697e/raw/0dfcb59e22caf69de992e4276af7d7c8079b2966/resolverAS_FP.maxmind.txt



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

Re: [tor-relays] Don't use Google's DNS server

[Petrusko]

Nice software.
But you have to trust the public/open DNSCrypt resolvers ?
Or may be it's possible to build your own resolver, but it has to
resolve DNS queries with DNS roots servers, or another DNS resolver you
will trust?
Humm, the cat chasing its tail


Le 17/05/2016 01:51, Jesse V a écrit :
> On 05/16/2016 05:11 PM, Petrusko wrote:
>> But I've read on some tutorials, ISP and others "men-in-the-middle" can
>> intercept DNS queries, and answer to your server... so this solution
>> can't be 100% secure, like any DNS solution.
> 
> Not if you're using DNSSEC, but querying DNS root servers is slow.
> https://www.dnscrypt.org/ can also be useful for preventing interception.
> 
> 
> 
> ___
> tor-relays mailing list
> tor-relays@lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 

-- 
Petrusko
PubKey EBE23AE5
C0BF 2184 4A77 4A18 90E9 F72C B3CA E665 EBE2 3AE5



signature.asc
Description: OpenPGP digital signature
___
tor-relays mailing list
tor-relays@lists.torproject.org
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays