[Dshield] OpenDNS

[Jason D. Montgomery]

Gah, accidentily hit the quick-send key combo...let me start over...
 
I've been using OpenDNS at home for a while now - it's much more then just a DNS service.
 
I highly recommend it for the following reasons:
 
1. They provide Filtering with White-lists and blacklists, topic filters, etc.
      a. Adult Site Filter
      b. Blocks known Phishing Sites 
      c. Custom Domain blocking
      d. Blocks known Anonymizer/Proxy
2. They provide historical stats with an easy 'block' interface
3. They have a very large cache which can often 
4. Typo Correction - so when you mistype google you don't end up somewhere unpleasent
5. Custom Logo and error text that shows up.
6. SIMPLE setup for corporate filtering, or on your home, Firewall Router, or local system....
7. Free  - when you hit a site that's been blocked, you a page with Google Ads. Domain typos take you to a branded google search page with Google Ads - it's like using Google anyway, so in my mind it's no different then normal.
 
When AT&T's DNS servers go down (which seems to happen on a somewhat regular basis), this keeps chugging away.
 
What _may_ concern some would be the fact that someone else is keeping stats on your DNS lookups....
later,
jason
----------------------------------
j. montgomery <jason at atgi.com>
Sr. Software Specialist/Security Specialist
CISSP, GSEC, GNET, MCAD, MCSA
ATGi
E8548FA88CABD7C170F36AA7AB23E536

________________________________

From: Jason D. Montgomery
Sent: Wed 2/13/2008 10:17 PM
To: General DShield Discussion List; General DShield Discussion List
Subject: RE: [Dshield] OpenDNS


I've been using OpenDNS at home for a while now. I'd recommend it.
 
OpenDNS does much more then just server up DNS - they take 
 
later,
jason
----------------------------------
j. montgomery <jason at atgi.com>
Sr. Software Specialist/Security Specialist
CISSP, GSEC, GNET, MCAD, MCSA
ATGi
E8548FA88CABD7C170F36AA7AB23E536

________________________________

From: list-bounces at lists.dshield.org on behalf of WebMaster at commerco.net
Sent: Wed 2/13/2008 2:07 PM
To: General DShield Discussion List
Subject: Re: [Dshield] OpenDNS



Jon,

I guess the first question that I would ask about your post is why
would you even want to go there?

Most every ISP should have private resolvers their users can use
directly as a normal part of their business.  Using the ISP resolvers
is a great idea for home users and smaller non-technical business
users, if only for the accountability factor.  Setting up your own
private resolver is easy enough and you don't have to think twice
about malicious servers which may not resolve in ways you would like or expect.

Now, if you are speaking of a DNS service to provide an authoritative
answer for your domain(s), then there are several reasonably priced
and excellent paid services that can back up your own authoritative
DNS servers or can even serve directly as the responding
authoritative servers for your domain(s).  Again, setting up servers
to manage your own authoritative answers is really not all that difficult.

As Janet Jackson and Luther Vandross seem to suggest and from my own
experience, the best things in life are not always free.

Of course, I could be entirely missing the boat, which is never
something I dismiss as a possibility ;-)

AlanM
The Commerce Company
TZ.Com - Travel Zippy

At 11:01 AM 2/13/2008, you wrote:
>Hi,
>
>Anyone have any experience with OpenDNS? Good/Bad/Indifferent?
>
>Would you recommend it as the forwarder for a small or medium sized
>corporation? Why or why not?
>
>How about a home user?
>
>Also, their site says that they make money by advertising in
>searches. Does this mean that they hijack searches and insert ads?
>How does this work?
>
>TIA!
>
>Jon Kibler
>--
>Jon R. Kibler
>Chief Technical Officer
>Advanced Systems Engineering Technology, Inc.
>Charleston, SC  USA
>o: 843-849-8214
>m: 843-224-2494
>
>
>
>
>==================================================
>Filtered by: TRUSTEM.COM's Email Filtering Service
>http://www.trustem.com/
>No Spam. No Viruses. Just Good Clean Email.
>
>
>
>_________________________________________
>SANS Security 2008 in New Orleans!! January 11-19 2008. Why freeze
>up north if you can be in New Orleans.  http://www.sans.org/info/15826


_________________________________________
SANS Security 2008 in New Orleans!! January 11-19 2008. Why freeze up north if you can be in New Orleans.  http://www.sans.org/info/15826