< Back to LISTSERV archives

NETMAN@LISTSERV.EDUCAUSE.EDU


View:

:

[

|

Previous Message

|

Next Message

|

]

:

[

|

Previous Message

|

Next Message

|

]

:

[

|

Previous Message

|

Next Message

|

]

:

Proportional Font

LISTSERV Archives

LISTSERV Archives

NETMAN Home

NETMAN Home

NETMAN  2013

NETMAN 2013

Subject:

Re: Blocking outside DNS servers

From:

Kevin Wilcox <[log in to unmask]>

Reply-To:

The EDUCAUSE Network Management Constituent Group Listserv <[log in to unmask]>

Date:

Mon, 9 Sep 2013 16:59:09 -0400

Content-Type:

text/plain

Parts/Attachments:

Parts/Attachments

text/plain (29 lines)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, Sep 09, 2013 at 10:12:30AM -0700, Mark Duling wrote:

> For those who block outbound DNS going to outside dns servers, which
> servers do you allow?  Google, OpenDNS, what else?

We even restrict those. All clients get an IP and primary, secondary and
tertiary DNS servers via DHCP. Each year we get a handful of users with
hard-coded DNS but they're sorted in short order. They're rarely for
Google DNS or OpenDNS, typically they're for an ISP "back home".

The amount of time spent helping all of them get sorted in an academic
year is less than the amount it takes to do clean-up on an infected
system because they're not using our DNS sinkhole.

kmw

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAlIuNpwACgkQsKMTOtQ3fKHHygCgplXytyItRMUkq1RQAYqaZowh
V1gAnjhLBbo5GWncm/bvhvva0KgC5/Dh
=6dmB
-----END PGP SIGNATURE-----

**********
Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Top of Message | Previous Page | Permalink


Options

Log In

Log In

Get Password

Get Password


Search Archives

Search Archives


Join or Leave NETMAN

Join or Leave NETMAN


Archives

2017
2016
2015
2014
2013
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
2002
2001
2000
1999
1998

ATOM RSS1 RSS2