<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I'd suggest changing IP as this practice is<br>
<br>
a) a violation of trust, forcing you to use a potentially
compromised resource you have no control over<br>
b) a clear violation of net-neutrality<br>
c) a violation of standards (as it's probably one of those that
instead of returning NXDOMAIN as required sends you to an
advertising page.<br>
)<br>
I'm pretty sure you /can/ configure BIND to work like that. I should
imagine you could set up forwarders to TCP-based DNS servers.<br>
<br>
The other option is to get a DNS server set up on a VPS and tunnel
your requests to it via IPSEC.<br>
<br>
Alex<br>
<br>
<div class="moz-cite-prefix">On 30/06/16 18:21, Chris Horry wrote:<br>
</div>
<blockquote
cite="mid:07807287-64ab-50f8-1f2d-65fa7a823883@gmail.com"
type="cite">
<pre wrap="">Hello,
My ISP have started forcing DNS queries to pass through their own DNS
server, which appears to have many issues (can't resolve twitter.com for
one). I won't bore the list with my conversations with them over that part.
They are not actively blocking TCP DNS queries so I have a workaround.
Recognising that DNS over TCP is not an ideal solution....
1. Can Squid be configured to use TCP by default for DNS inquiries? If
not consider this a feature request :)
2. Is there a DNS caching server that can do this instead (BIND9 doesn't
seem to have it as an option)
Any help appreciated.
Thanks,
Chris
</pre>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
squid-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
<br><pre>
--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.
This email is not intended to, nor should it be taken to, constitute advice.
The information provided is correct to our knowledge & belief and must not
be used as a substitute for obtaining tax, regulatory, investment, legal or
any other appropriate advice.
"Transact" is operated by Integrated Financial Arrangements Ltd.
29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608 5300.
(Registered office: as above; Registered in England and Wales under
number: 3727592). Authorised and regulated by the Financial Conduct
Authority (entered on the Financial Services Register; no. 190856).
</pre><br>
</body>
</html>