Main

December 3, 2009

Google "Public DNS" to compete against OpenDNS

Google have launched their "Public DNS" service - a similar service to the OpenDNS public dns resolvers. It is going to be interesting to see how much competition occurs. It is usually faster to use the OpenDNS public dns resolvers than one's upstream ISP's one. Not sure when Google will start adding additional features like OpenDNS like blocking access to malware sites, ability to see how many DNS queries you are making, etc.

If you want a non-filtered service at this point in time use the Google Public DNS servers (they are using Level3 for their upstream connectivity):

8.8.8.8 and 8.8.4.4

And if you like filtered DNS results you would want to use the OpenDNS ones:

208.67.222.222 and 208.67.220.220

UPDATE:

Quick stat from doing DNS queries against Google, IS and OpenDNS's cache servers:

Google: 546ms and 243ms
IS: 303ms and 36ms
OpenDNS: 432ms and 297ms

Looks like all three cache the results on their anycast clusters.

December 5, 2006

ps pipe grep

ps pipe grep » surveying all the processes

The guys at Joyent, where this website resides with their TextDrive division, do a pod cast called "ps pipe grep", which I've been rather enjoying.

Basically it's Dave (youngobungo), Jason (the hoff) and Ben (benr) and they've been talking about everything from Mongrel, Apache, Amazon Web Services, Solaris, Joyent Core, SFTPDrive, virtualization, Sun Blackbox, and a truck load more things relating to how the web hosting industry has been changing over the years.

April 7, 2006

D-Link abuses public NTP server

Picked up from Ask Bjørn Hansen:

Poul-Henning Kamp wrote an open letter to D-Link as a last-ditch attempt at getting them to show any interest in resolving the mess their badly configured software has caused (and is still causing).

I'm not entirely surprised, but still disappointed that they didn't learn from Netgears mistake in 2003.

I worry that the NTP Pool will get a similar problem at some point. I'd like the pool to be able to help the vendors (better than them abusing random servers!), but I need to setup a process and a system for vendors to use the pool in a way we can monitor and eventually disable (or point back to their own servers) if it ends up being a problem. One of these days ...

February 8, 2006

Insanity now with silly Verizon

Heard the latest? Verizon is trying to make more revenue by charging Google for sending data to their users who are paying them for connectivity. Quite outrageous as the end users are already paying them for connectivity.

Verizon Tries to Hit Google Between the O's:

The Senate Commerce Committee is holding a meeting today to consider whether Web access providers -- the phone and cable companies behind broadband networks -- can charge content providers like Google and Yahoo for speedy delivery of content.

The former, led by the like of Verizon and AT&T, claim Google is getting a free ride (free registration required) off the infrastructure they spend billions of dollars to build and maintain. They charge other companies are stifling the development of better networks by sucking out profits from the middle.

On the other side, consumer advocates have suggested that allowing network operators to charge for certain traffic might restrict the open flow of content and information -- and lead to higher costs for consumers. Vinton Cerf, a founding father of the Internet and now a VP and "chief Internet Evangelist" at Google, shot back at Verizon execs via the Washington Post: "My big concern is that suddenly access providers want to step in the middle of create a toll road to limit customers' ability to get access to services of their choice even though they have paid fo access to the network in the first place."

The debate raises a number of questions about restricting access to information, limiting consumer choice, and so on. Do you think access providers should be rewarded for their infrastructure investments or will their sense of entitlement lead to an Orwellian future?

Telecoms and internet groups clash on charges

The opening shots were fired on Capitol Hill on Tuesday in a legislative battle between the US telecommunications and internet industries that both sides warned could undermine innovation and consumer choice on the internet.

Vint Cerf, one of the early pioneers of internet technology and now chief internet evangelist at Google, called on Congress to pass a law preventing telecoms companies from discriminating between the internet services that are carried over their networks.

But representatives of the dominant US telecoms groups said the high level of investment needed to extend broadband networks meant they should have the power to charge internet companies fees in return for guaranteeing a specific level of service.

The dispute over what has become known as "net neutrality" has erupted over proposals from some of the telecoms companies to start charging extra fees. They argue that to guarantee a high level of service, they need to allocate more bandwidth and give priority to services such as internet video and voice-over-internet calls, and so should be able to charge more.

"Public policy must enc­our­age and reward investment in networks," said Walter McCormick, the head of the US Telecoms Association, at a hearing yesterday of the Senate commerce, science and transportation committee. Telecoms companies would not use discriminatory pricing to "block, impair or degrade content, applications or services", he added.

Under a policy adopted by Michael Powell, former Federal Communications Commission chairman, US regulators have until now prevented telecoms groups from blocking specific internet services that pass over their networks. However, the regulations do not deal with special pricing for guaranteed levels of service.

Lawrence Lessig, a law professor at Stanford University, said that allowing telecoms companies to charge more for carrying certain internet services would mark a retreat from the past 40 years of US telecommunications policy. He and others compared the telecoms companies' proposals to the creation of new commercial "speed lanes" on highways. They would degrade some services by reducing the capacity available to others, making it more difficult for start-up internet companies to find an audience.

August 29, 2005

An Illustrated guide to IPSEC

An Illustrated Guide to IPSEC provides various diagrams and content explaining how IPSEC works.

August 15, 2005

When Telkom changes their pricing model

What happens when Telkom changes their pricing model to "squeeze more blood out of a stone?". A local ISP has announced that they are doing connectivity at similar rates with more bang for your buck.

What is interesting to also note is that Datapro have purchased @lantic's client base of 32000 users for R 45 million. It's approx R 1400/client who is apparently paying R 100/month each which is a big chunk of cash to pay for a subscriber base.

Apparenlty the ISP market is in "land grab" mode so we should be seeing more client bases getting sold from reading the Datapro press release.

July 17, 2005

Sentech is SPAM haven for South African spammers

A while back I posted about one of our more persistent spammers in South Africa, called Samantha Bowman from Callum-Lee IT Solutions which is rather one annoying individual. I used to think SPAM king Greg from Reflex was bad but he learnt his when his ability to send out via port 25 on his leased-line was cut!!

I regularly like clockwork receive four copies of her SPAM message every time she decides to SPAM about her various “Special Offers”. It’s highly obvious that she’s been harvesting WHOIS records from the co.za website. Since when do email addresses listed as the dns-admin@domain.name really want to receive her specials on laptops which are over priced? Also I don’t know who at Mr Delivery decided to sell her their customer database! When I registered on the Mr Delivery website I decided to use a generic address to identify SPAM originating from that address. The only way that Samantha Bowman could have gotten hold of that address was either paying a dishonest employee of Mr Delivery money for their customer database for a list of names and email addresses.

Originally she was using both M-Web and SAIX dial-up accounts and sending of her bulk mail via SAIX’s SMTP cluster (smtp.saix.net) and after contacting SAIX’s abuse department I had put an end to her ability to send mail via SAIX’s SMTP cluster. SAIX earns extra brownie points for getting rid of a SPAM sending individual from their network.

It took extra effort to get rid of her M-Web web hosting and dial-up account. But none the less explaining to M-Web’s abuse department that she is in breech of their Terms of Service document took quite a bit of convincing with M-Web’s SMTP servers getting blacklisted for Samantha’s SPAM it woke them up as one spammer on their network can cause a huge inconvenience for the rest of their dial-up users.

Generally when I complain to second-tier ISP’s I tend to always CC the first-tier ISP which they utilise for connectivity as this normally works well except in the case when dealing with Sentech. In the case with Sentech, which Samantha Bowman, is now using for her connectivity to SPAM from, I have been CC’ing the Internet Solutions abuse department as well as their Managing Director in the hope that they would enforce the terms of their Acceptable Usage Policy on Sentech who in turn would be forced to remove Samantha Bowman from their client base.

I’m not sure how many people are purchasing hardware and website hosting from Callum-Lee IT Solutions, but why would they be sending unsolicited commercial mail if they were not making a profit from sending the mailers.

From - Tue Jul 12 00:42:08 2005
Return-Path: <*snip*>
Delivered-To: *snip*
Received: from smtp.sentechsa.com ([66.18.69.33] helo=mail02.infosat.net)
	by maquis.powertrip.co.za with esmtp (Exim 4.34; FreeBSD)
	id 1Ds20J-000OlY-2y
	for *snip*; Mon, 11 Jul 2005 19:23:41 +0200
Received: from [66.18.85.56] (HELO Jinxed)
  by mail02.infosat.net (CommuniGate Pro SMTP 4.1.8)
  with ESMTP id 275854128 for *snip*; Mon, 11 Jul 2005 19:23:17 +0200
From: "Callum-Lee IT Solutions" 
Subject: Toshiba Notebooks - 7 Options with a Printer & USB Flash Drive
To: "Jacques" <*snip*>
Content-Type: multipart/alternative; boundary="_Boundary_2mlksmuasadvnqk5prcsiwy"
MIME-Version: 1.0
Sender: Callum-Lee IT Solutions 
Date: Mon, 11 Jul 2005 19:24:25 +0200
X-Mailer: MailList King 5.1.2.120
Message-ID: 

June 22, 2005

.za zonefile is coming home soon!

Mike Lawrie wrote in a email yesterday that the .ZA primary DNS server is coming home. Currently it's in the process of first moving from the US to RIPE in the Netherlands in the interim to a server hosted at the Internet Solutions in Johannesburg.

This is just a "heads up" for watchers of the ZA namespace.

The ZA primary zonefile is about to be moved to nsza.is.co.za. The ZA DNA has asked me to oversee this move. This move is coinciding with a forced change of one of the secondaries and a recommended change of another. The target completion date is 28 June.

In essence, the process involves freezing the existing primary zonefile at rain.psg.com, activating the zonefile on nsza.is.co.za, getting the ZA secondaries to update from the new primary, slotting in the changes to the ZA zonefile, and getting ICANN to update the root-servers accordingly. In theory, not overly difficult, and transparent to users.

If anyone spots a problem with the ZA nameservers during this migration period, please contact me as soon as possible. We cannot afford to have the ZA domain hiccup during this (or indeed, any other) period.

It will be good, and very appropriate, to have the zonefile back in South Africa again.

March 25, 2005

Why Switch?

The Scobleizer found the following which I picked up via John:

FellowshipChurch.com has decided to switch from ASP.NET to PHP. Brian Bailey blogs about their switch:

    As we began evaluating our options, one of our developers moved to another department so we began to search for his replacement. As I evaluated the resumes we were receiving, I began to have the sense that we were continuing down the wrong path [in using .NET]. Here are the top ten factors that influenced the decision to change direction.

Jason Fried once upon a time said:

"It's all a matter of trust. If you don't trust your developer to choose the right environment, then how can you trust him to build the best application?"

February 24, 2005

SAIX are provide a safe haven for dial-up SPAM kiddies

I've been getting highly annoyed regarding the combination of Samantha Bowman trading as Callum-Lee IT Solutions and SAIX / Telkom Internet. In theory Telkom Internet and SAIX are supposed to be seperate entities and just being owned by Telkom but in reality this does not seem to be the case.

Samantha Bowman keeps sending out SPAM messages every couple of days to me so I complain to Jaco Lesch and Willie Mills who man the abuse@saix.net mailbox and seem to not notice that Samantha Bowman uses a SAIX dial-up account. She used to relay via smtp.saix.net but I put a stop to that (seems like Jaco added from filtering on anything @itsales.co.za).

It still does not explain why her dial-up account is still active?

Apparently Samantha Bowman either works from or lives at 25 Saralia Village, Muller Street South, Buccleuch, 2066. It would be nice if someone would go there and remove the equipment that she is utilising to send the SPAM and for Telkom to cut her phone lines, seeing that is what she is using to commit the crime in terms of the ECT act of sending SPAM.

I was happy with Richard Vice and co. in Mweb's abuse department with their cancelling her web hosting for breaking Mweb's AUP. It's a pity that Telkom does not eat their own dog food and follow their AUP!

If anyone has aunty Ivy's phone number I would love to call her to explain the situation and how ineffective the law is and how Telkom should be brought to book for not following their AUP!

I'm going to be calling Deon v/d Merwe in the morning as he is apparently the SAIX big cheese in charge of the SAIX ip network to moan.

Update:
After further discussions with SAIX it turns out it's all Telkom Internet's fault! Telkom Internet don't have to follow the standard SAIX AUP for some unknown reason as well as having their Abuse Department not having to do any suspensions of accounts.

If anyone has any idea as to how to get Telkom Internet to terminate their little SPAMmer kiddies on the SAIX network, please let me know!

February 7, 2005

Yahoo! Mail Improvements but it still requires fixing

A couple of years ago in the early 2000's was when I last actually had a Yahoo! mailbox and could not stand it. The design aspects of the Yahoo! Mail at that time was not clean and simple, crashed my Netscape browser under FreeBSD to say the least. Today I signed up for a Yahoo! Mail account to do some testing of mails to the account and I found it quite interesting that Yahoo! seems to be doing some stuff to compete with the likes of Gmail, Google's free web-based mail service.

Their image handling support in messages actually sucks. It's not properly implemented like Gmail's which shows the images in the right places. Maybe Jeremy would know who to complain to over there in Yahoo! Land to get that fixed?

January 29, 2005

Street Views with the directory listings

Good old a9 have implemented the street views to their Yellow Pages listings. I remember on one project we discussed using photos taken from the other side of the road with a digital camera to put above the map (from mapit) and then allow one to click on the image for a bigger image.

Not that that was ever implemented as it was phrased back then "a waste of time".

Interestingly enough they've taken pictures and seem to like having busses and other obstacles getting in the way while they drive the bakkie around taking the photographs.

January 8, 2005

.za having technical issues

iol-error.jpg

IOL is reporting that South Africa are experiencing technical problems in their South African news. Amusing none the less.

UPDATE: Looks like IOL is having Database issues. Ian I would suggest to your team that you setup replicated MySQL servers in your cabinet at UUnet and then also enable caching on the webservers using PEAR's cache lite to say cache certain "static" pieces on the website. On the admin tool for the site you enable it so that you can manually expire cached pieces say after 30 minutes (my default for http://www.firstier.co.za/). You guys may also want to look into running memcache for caching news articles and just connect to your memcaches to grab current data and you could expire data sitting in the memcaches after 5 minutes, etc. which would reduce load on your MySQL servers.

From what I can gather from Neil's talk about scalable web applications using opensource software is that which in your environment it sounds like it has been well designed. Looks like a database error with the software Jam Warehouse developed for you guys?

November 15, 2004

Silly SBL Kiddies

Don't you just hate idiots who block an entire subnet just because other idiots who are using the subnet SPAM (10 ips's according to SBL) and then the idiots at M-Web think that it's their right to now block based on SBL's useless blacklist which has been proven numerous times to not be a good form of blocking mail due to the SBL managements huge ego and they block an entire subnet.

November 5, 2004

IS Connectivity

Is it just me or do other IS clients experience horrific internet connectivity via IS's Cape Town network. Currently IS's caching DNS servers aren't responding hence I've opened yet another helpdesk ticket with their Global Service Centre. I've actually opened up various tickets for IS to fix connectivity so that it appears that they have ample bandwidth similar to UUnet. I from other friends who also happen to use IS's network that they also experience similar connectivity issues.

What I'm curious to know is why does the UUnet connections that I've used in the past always out perform my IS connectivity experience? Makes one wonder.

October 5, 2004

M-Web chooses IS - just like that!

I've been finding certain changes in the industry which I'm working in quite interesting of late considering the following:

  • M-Web sets up another ISP called Polka a couple of months back for the lower end of the market which leads to M-Web signing a three year deal with IS for their connectivity infrastructure namely dail-up access, international bandwidth and local bandwidth.
  • In the one bathroom at UUnet there is a pamphlet if you will from M-Web stating that they are going to continue to stick with UUnet South Africa after the Worldcom financial issues.
  • UUnet is now left with excess bandwidth which they desperately need to sell in order to not burn money due to contracts for international connectivity and telecommuncations contracts.

According to ITWeb the deal consists of the following services:

  • Dial infrastructure for the entire M-Web dial user base (in excess of 240 000 subscribers).
  • Provision of both local and international Internet connectivity to this base.
  • An option to provide connectivity for the M-Web Business base as well as the provision of access to the M-Web content-rich server environment.
Afrigator