Hacker News new | ask | show | jobs
by sp332 893 days ago
Do you mean you're running a DNS server locally? Wouldn't the DNS block apply when your local server tried to resolve the name upstream?
1 comments
denton-scratch 893 days ago
I am running a recursive resolver locally. When it resolves a name, "upstream" means the root servers, not some DNS cache such as my ISP offers. A recursive resolver chases the name down the DNS tree to the authoritative server.

To block that, you have to either tamper with the root servers, or get control of the authoritative servers.

link
gkbrk 893 days ago
> To block that, you have to either tamper with the root servers, or get control of the authoritative servers.

I don't think so. The ISP can just reply to the DNS packets itself, without sending them to the root servers. Your local recursive resolver will think the response is from other DNS servers but in fact they would all be from your ISP.

link