Slashdot Mirror

You're telling me that I have no understanding of this??? What is the DNS propagation time for dynamic DNS changes? What is the expected gap in coverage when your IP changes relative to your expected consumer audience? Do you actually run dynamic DNS or did you just google that to throw it in my face?

Apparently not because again, it takes 5 fucking second to look this up and read that it has a propagation time of less than a minute: https://dyn.com/dns/
Given that the update is initiated from the client side in practice it is actually less most of the time. I have used it, colleagues and friends have used it, it is not that damn complicated. Stop acting like an ass because you got called out. I've implemented networking interfaces and equipment for MULTIPLE Fortune 500 customers so just shut up before you make yourself look like a bigger fool.

Then why does hardly anyone take the time to actually do it?

Pretty sure I addressed the exact reasons why people are not doing it all the time in my first post. Not really sure what you're getting at here. You're also vastly overestimating the complexity of such an endeavor. I have worked with and on build teams of no more than about 3 engineers that implemented a much more complex solution and the deployment times were approaching less than a day before I left. After learning WiX now myself, the deployment could actually have been a single installer if the team had taken the time. Not to mention, once it is done and stable there is this thing called imaging that works really nicely to create exact copies...

You need to step out of your bubble for a minute and consider: What percentage of people on this planet (or your country of choice if you like) are even aware of what a Raspberry Pi is? I'd bet it's less than 5% Of the people who are aware, what percentage would be even remotely capable of attempting what OP proposes? Again, I'd argue maybe 5%. So when .25% of a given population is capable of doing what OP proposes, I find it offensive to pretend like it's common knowledge, say it's easily achieved, or act incredulous that nobody is doing it. I for one believe that the remaining 99.75% of the worlds population should be equally able to achieve a similar level of information independence.

I'm speaking from experience here: I've tried, and I'm totally incapable of creating an independent, cross-platform, interoperable and secure software product that large amounts of people wish to use. If only I had a team of hundreds, perhaps thousands of software developers who were willing to help me build this product, and to do so without pay or adequate recognition.

I never tried to say this is common knowledge or that the initial setup is super easy either. Hell I agreed with you that doing it as the OP suggests is impractical as hell and even mentioned the solutions were not optimal. Redeployment once created could be easy if people took the time and trusted the source of said deployment though, which was the second major point I was getting at.

If they're unrelated, why does http://dyndns.org/ redirect to http://dyn.com/?

Because Renesys was acquired by Dyn, do I really have to spell out everything?

How about http://dyn.com/secondary-dns/ ?

Dyndns.org is unrelated to dyn.com

If they're unrelated, why does http://dyndns.org/ redirect to http://dyn.com/? DynDNS is just an obsolete brand name for the same service from the same company, which now refers to itself simply as Dyn.

I've had nothing but a good, solid experience with dyn.com, but they're certainly not the cheapest

Seconded. Dyn is amazing and has been nothing but stable for me over the years.

They do not charge you extra if you host your own DNS or point it to another provider. They just charge the $15 per domain and (I believe) $10 for secret registration if you opt for that.

For hosting I've been using Digital Ocean.

You have to know your way around a Linux machine (they offer FreeBSD too) to configure the firewall and enable swap, selinux, etc. The default Ubuntu and CentOS VMs leave something to be desired in terms of security safe guards, but nothing that can't be remedied in an hour.

That said, their value proposition is great. $10 a month gets you 1GB ram, 1 CPU core, 40GB of SSD HDD (insane speed) and 2TB of outgoing bandwidth (traffic IN doesn't count).

While this is purely speculation, could China be aiming to offer itself as a global (or even regional) interconnect? Or is the the ability to play NSA-like games on international traffic within home-borders just not a realistic possibility anymore?

I'm thinking of how a "Chinese" error (in Germany) caused traffic between two Russian cities to be directed out-of-country (see http://research.dyn.com/2014/1... ).

I can take the tin-foil hat off anytime I want to, but I really do like the propeller beanie.

To me, the takeaway message from all of this is that, if you value privacy above all else in your email exchanges, you can't trust a company, because either they'll sell you up the river for a song, or they'll shutter themselves to avoid government pressure. So here's my question: why don't more people simply run their own mail servers? It's certainly not difficult. There are a few problems, of course, namely, needing an always-on computer, sorting out the issue of dynamic IP (dyndns is a great, free solution), and the issue of small mail servers flagging spam blacklists. I also seem to remember various residential ISPs (like Comcast) having running a mail server be against their TOS, but I can't find anything to back that up, so I might be remembering incorrectly. In any case, none of these problems are insurmountable, and I really wonder if this is the solution for the privacy-paranoid among us.

I like Dyn's Internet Guide.

It works like this:
You set yourself up with one of their dynamic hosts (using a client on your machine/router, $20/year.)
You add Dyn Internet Guide to your account (free.)
In the Dyn Internet Guide, you select what categories of traffic you wish to prohibit (or allow.) They've partnered with Barracuda on this, so the lists are pretty good. You may also add specific hosts to black/white lists.
In the Dyn Internet Guide, you set it to protect your dynamic host (so they know which traffic is coming from you.)
Then you set your machine to use their DNS servers, or your router to hand out their DNS servers to your network (DHCP option 6.)

Any time a host on your network requests DNS for a site that's been blocked, it returns a Dyn IP, and usually displays a little "this page has been disallowed" page. For pages that include mixed content, the error is displayed in the prohibited content's space.

I run my own DNS for my home, but set Bind to use Dyn's DNS servers as forwarders. Any zonefiles I have do resolve locally, but all other requests are forwarded to Dyn. I don't have any children in my house, but I set my Dyn account to block Advertisement and Popups, Conficker Worm, Phishing, Spam, and Spyware categories. It seems pretty robust, and It works well. I like it.

Oh yes, well i have that and recently recieved this email from them ANYWAYS:

----
Dear Dyn Customer:

Your Dyn account '???????????', has DynDNS free hostname(s) that are due
to expire in 5 days. Note that DynDNS free hostnames are deleted after 30
days of inactivity.

You can prevent your hostname(s) from expiring here:

https://account.dyndns.com/confirm/????????????????

If you wish to keep your hostname(s) active and not risk missing email
notifications like this one, purchase a DynDNS Pro upgrade today.

http://dyn.com/dns/dyndns-pro/

If you no longer need your hostname(s) or don't know what this email is
for, you may simply allow expiration.

Thanks,
dyn.com
twitter.com/dyninc

*** Please do not reply to this email. If you have additional questions,
please visit http://dyn.com/support/ ***
-----

And this domain is updated daily by my pfsense. No big deal, its just a backup incase my regular dns goes down. But i have had the domain since something stupid like 1999 so i am somewaht attached. Not 20$/yr+++ attached mind you.

It may be possible that my client wasnt working(we'll see if i get another one next month), but do you want to take that risk with only a 5 day grace period in which to realize your error?

Their entire home page seems more inclined to make money now. There is one tiny link for support. No account page or anything. Pfsense is good because i can switch to about 9 different dynamic dns providers, but still annoying. Wikipedia also says that dyndns was originally released as an "open system" with many home router companies signing on. In that case, it wasnt as if these home router companies were freeloading, as some have sugested in earlier posts.

Oh yes, well i have that and recently recieved this email from them ANYWAYS:

----
Dear Dyn Customer:

Your Dyn account '???????????', has DynDNS free hostname(s) that are due
to expire in 5 days. Note that DynDNS free hostnames are deleted after 30
days of inactivity.

You can prevent your hostname(s) from expiring here:

https://account.dyndns.com/confirm/????????????????

If you wish to keep your hostname(s) active and not risk missing email
notifications like this one, purchase a DynDNS Pro upgrade today.

http://dyn.com/dns/dyndns-pro/

If you no longer need your hostname(s) or don't know what this email is
for, you may simply allow expiration.

Thanks,
dyn.com
twitter.com/dyninc

*** Please do not reply to this email. If you have additional questions,
please visit http://dyn.com/support/ ***
-----

And this domain is updated daily by my pfsense. No big deal, its just a backup incase my regular dns goes down. But i have had the domain since something stupid like 1999 so i am somewaht attached. Not 20$/yr+++ attached mind you.

It may be possible that my client wasnt working(we'll see if i get another one next month), but do you want to take that risk with only a 5 day grace period in which to realize your error?

Their entire home page seems more inclined to make money now. There is one tiny link for support. No account page or anything. Pfsense is good because i can switch to about 9 different dynamic dns providers, but still annoying. Wikipedia also says that dyndns was originally released as an "open system" with many home router companies signing on. In that case, it wasnt as if these home router companies were freeloading, as some have sugested in earlier posts.

As far as I know, the rules are the same.

For the free hostname, you have to submit an update at least once every 30 days, even if your IP address hasn't changed. Otherwise, the free account will be deleted.

If you send updates *too often*, you'll get blocked for abuse. "Too often" isn't defined anywhere that I find easily, but more than once every several days or so is a good threshold to use. You'll get an email if this happens. Also, the "too often" limit only applies if your IP address hasn't actually changed -- legit updates get a different scale.

I update every 15 days, and have never had an issue.

Since you mention your model is having intermittent trouble anyway, it sounds like the problem is just crappy modem software. There's a lot of that out there. (LinkSys's DNS update client was broken for *years*, and they're one of the biggest SOHO router vendors.) I'd suggest disabling DNS update on your modem and using a known-good client on a PC behind your modem.

http://dyn.com/support/clients/

DynDNS, they have maintained their lead only via a proprietary interface and a market lead.

Dyn has submitted their HTTP update API as an IETF draft:

http://tools.ietf.org/id/draft-jennings-app-dns-update-02.txt

So it's not proprietary (limited to or owned by them). You might call it non-standard, but if that draft was accepted it would be on the IETF standards track.

Also, Dyn *does* offer DNS UPDATE support, but only for paying customers:

http://dyn.com/support/clients/dynamic-dns-updates-via-tsig/

I would recommend using an auto updater such as the one recommended on the dyndns.org site. http://dyn.com/support/clients/

Our CEO Jeremy Hitchcock wrote a welcome letter to EveryDNS customers here http://dyn.com/dd-welcome-everydns that explains a little bit more about our plans for EveryDNS.

I honestly do not have an answer for your specific question, but as of right now there will be no changes to the EveryDNS service in the short term as our welcome letter states.

I work for DynDNS. Our basic Dynamic DNS service has always been free when using one of our hostnames (such as example.dyndns.org). DynDNS has never stopped offering our free Dynamic DNS service and will not stop offering it.

I recommend reading our CEO's welcome letter for information on our plans for EveryDNS. http://dyn.com/dd-welcome-everydns