Re: dns question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Tim:
>> Or is it region-fenced?  Allowing local (to it) usage, not world-
wide.

Mike Wright:
> Could be.  But François is in France as is fdn.fr.

https://www.fdn.fr/renforcement-serveurs-dns-2025/

Auto-translation of that page comes up with this:

 ------------- begin paste ----------------

Reinforcement of protections for FDN open recursive DNS servers
    
      15 March 2025
      by Eric
    
In order to protect our DNS servers from Ongoing DDoS attack on our
network, we have just drastically strengthened their protection
measures. This enhanced protection will remain in place for an
indefinite period, while the attack will cease.

What are the consequences for people using our DNS services?

  None for members of the FDN and FFDN;
  None for people outside our networks using our DoT and DoH services;
  An unavailability of our DNS services for the rest of the world.

How can we continue to use our DNS services outside the FDN and FFDN 
networks? By configuring your routers, boxes or browsers to activate
the DoT and DoH services. See ours Configuration information.

What if that is not possible? We then invite you to use
other alternative open recursive DNS servers, a non-exhaustive list of
which is available on the Wiki from sebsauvage.net.

Thank you for your understanding.

 ----------------  end paste ------------  

So you may need to be some kind of member, or within a specific
network, to use some of their servers.  And open DNS server doesn't
have to be completely open to everyone.

DoH and DoT are not the traditional methods used to query DNS servers,
you'll need different configuration to use them.  I'm not sure what can
use *them* beyond a web browser.  And I have my misgivings about them
being the panacea some suggest they are.  For one thing, they
circumvent many protective measures we use at the moment.

My DNS server block some known problem domains, but they only block
regular DNS requests.  Likewise with ISP DNS servers.  So, if
protection is your want, you'd need to find a DoH server which offers
it.
 
-- 
 
uname -rsvp
Linux 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64
 
Boilerplate:  All unexpected mail to my mailbox is automatically deleted.
I will only get to see the messages that are posted to the mailing list.
 

-- 
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux