Comodo´s Secure DNS [Merged Threads]

[Guest]

[tsec]

Hi there Toggie - thanks for the reply.

The primary and secondary dns server info :

NeoTrace Trace  Version 3.25  Results
Target: 156.154.70.22
Date: 11/07/2009 (Saturday), 6:29:31 PM
Nodes: 14


Node Data
Node Net Reg IP Address      Location            Node Name
  14   1   - 156.154.70.22   New York           

NeoTrace Trace  Version 3.25  Results
Target: 156.154.71.22
Date: 11/07/2009 (Saturday), 6:33:47 PM
Nodes: 14


Node Data
Node Net Reg IP Address      Location            Node Name
  14   1   - 156.154.71.22   39.006N,  77.428W   


Packet Data
Node High Low  Avg  Tot  Lost
  14  224  224  224    1    0


Network Data
Network id#: 1

OrgName:    NeuStar, Inc.
OrgID:      NEUS
Address:    45980 Center Oak Plaza
Address:    Network Operations Center
City:       Sterling
StateProv:  VA
PostalCode: 20166
Country:    US

NetRange:   156.154.0.0 - 156.154.255.255
CIDR:       156.154.0.0/16
NetName:    NPAC
NetHandle:  NET-156-154-0-0-1
Parent:     NET-156-0-0-0-0
NetType:    Direct Assignment
NameServer: PDNS1.ULTRADNS.NET
NameServer: PDNS2.ULTRADNS.NET
NameServer: PDNS3.ULTRADNS.ORG
NameServer: PDNS4.ULTRADNS.ORG
NameServer: PDNS5.ULTRADNS.INFO
NameServer: PDNS6.ULTRADNS.CO.UK
Comment:   
RegDate:    2003-12-18
Updated:    2006-10-10

RTechHandle: NETWO336-ARIN
RTechName:   Network Engineering
RTechPhone:  +1-866-638-6622
RTechEmail:  wan.engineering[at]neustar.biz

OrgTechHandle: NETWO336-ARIN
OrgTechName:   Network Engineering
OrgTechPhone:  +1-866-638-6622
OrgTechEmail:  wan.engineering[at]neustar.biz

  ARIN WHOIS database, last updated 2009-07-09 20:00


Registrant Data
_____
NeoTrace Copyright ©1997-2001 NeoWorx Inc

NeoTrace Trace  Version 3.25  Results
Target: 156.154.71.22
Date: 11/07/2009 (Saturday), 6:33:47 PM
Nodes: 14


Node Data
Node Net Reg IP Address      Location            Node Name
  14   1   - 156.154.71.22   39.006N,  77.428W   


Packet Data
Node High Low  Avg  Tot  Lost
  14  224  224  224    1    0


Network Data
Network id#: 1

OrgName:    NeuStar, Inc.
OrgID:      NEUS
Address:    45980 Center Oak Plaza
Address:    Network Operations Center
City:       Sterling
StateProv:  VA
PostalCode: 20166
Country:    US

NetRange:   156.154.0.0 - 156.154.255.255
CIDR:       156.154.0.0/16
NetName:    NPAC
NetHandle:  NET-156-154-0-0-1
Parent:     NET-156-0-0-0-0
NetType:    Direct Assignment
NameServer: PDNS1.ULTRADNS.NET
NameServer: PDNS2.ULTRADNS.NET
NameServer: PDNS3.ULTRADNS.ORG
NameServer: PDNS4.ULTRADNS.ORG
NameServer: PDNS5.ULTRADNS.INFO
NameServer: PDNS6.ULTRADNS.CO.UK
Comment:   
RegDate:    2003-12-18
Updated:    2006-10-10

RTechHandle: NETWO336-ARIN
RTechName:   Network Engineering
RTechPhone:  +1-866-638-6622
RTechEmail:  wan.engineering[at]neustar.biz

OrgTechHandle: NETWO336-ARIN
OrgTechName:   Network Engineering
OrgTechPhone:  +1-866-638-6622
OrgTechEmail:  wan.engineering[at]neustar.biz

  ARIN WHOIS database, last updated 2009-07-09 20:00


Registrant Data
_____
NeoTrace Copyright ©1997-2001 NeoWorx Inc

Does this shed any light?

Cheers

[Quill]

Thanks for that, it's interesting

It's essentially as I said. The company that manages the DNS servers for Comodo, holds the authoritative directories for the .us and .biz Internet domains, but nothing else. Their root servers are in Virgina, I assume, when a query is made against non cached record a recursive query is sent to their home location and from there to the root for the domain.

You can use http://www.robtex.com to dig around, if you're so inclined...

[tsec]

Thanks for that, it's interesting

It's essentially as I said. The company that manages the DNS servers for Comodo, holds the authoritative directories for the .us and .biz Internet domains, but nothing else. Their root servers are in Virgina, I assume, when a query is made against non cached record a recursive query is sent to their home location and from there to the root for the domain.

You can use http://www.robtex.com to dig around, if you're so inclined...

Sweet - this statement now clarifies fully for me what you said previously.

NeuStar = Ultra DNS (I just googles NS )

Thanks again

[Dch48]

Didn't know there was one in Sydney.  The two distinct routes to NYC are still odd IMO. Or maybe there is a basic tenet that I am missing here (wouldnt be the first time )

There was a map posted that showed where the nodes were located. One node is in Sydney. What you did was trace the route to the main server. A regular DNS request from your browser might stop at the Sydney server but don't quote me on that since I am far from an expert on these things.

[Quill]

There was a map posted that showed where the nodes were located. One node is in Sydney. What you did was trace the route to the main server. A regular DNS request from your browser might stop at the Sydney server but don't quote me on that since I am far from an expert on these things.

Did you read any of the above? BTW I posted the map...

[tsec]

Did you read any of the above? BTW I posted the map...

Goy a linky to the map? I'd like to see it

Thanks again

[tsec]

Goy a linky to the map? I'd like to see it

Thanks again

Dont worry - I found it on page 4 of this thread.

(Where's my coffee...)

[Dch48]

Did you read any of the above? BTW I posted the map...

I read it all but I'm still not sure how it works. If every DNS request first goes to Virginia regardless of where the requesting machine is located, then what is the purpose of the regional nodes? I was under the impression that DNS would be resolved by the node closest to you. What I see people doing here is tracing the route to the main server which of course will take them to Virginia. If you're hopping all over the world how can this DNS system be faster?

[Quill]

Not every request will be sent to a root, it depends on the cache of the local resolver.

By the way, what I described above is a description of how DNS works. It's not specifically describing Comodo DNS.

[Anathaen]

Is there a Secure DNS section? If so, point me to it please I can't seem to find it. I think I found a possible Secure DNS bug, because I got a site that runs perfectly but Secure DNS reports it as corrupted. Is it also possible for Secure DNS to censore certain content or sites?

[HeffeD]

Is it also possible for Secure DNS to censore certain content or sites?

No, but you could give OpenDNS a try if that's what you're after.

Maybe Comodo will add this functionality somewhere down the line.

[Anathaen]

No, but you could give OpenDNS a try if that's what you're after.

Maybe Comodo will add this functionality somewhere down the line.

No, I'm just asking because I suspect that Secure DNS is censoring the content on that site. The site I'm talking about is Megadownload.net and it was working normally for me before I switched to Secure DNS and even for a while of using it but after some time I cannot connect to the site anymore. It says the site is down but I use a Firefox addon that displays the preview of the site correctly.

[Dch48]

I can't get to that site either using secure DNS

[HeffeD]

Yes, that is the big drawback to a site blocking DNS service with no user control. You are at the mercy of whoever is running the service.

OpenDNS allows you to whitelist sites you feel are mis-reported. You can also dispute sites you feel are mis-reported or mis-classified.

This is something Comodo needs to look into if they want people to actually use the service. I tried it for two days and went back to OpenDNS.

Edit: However, it doesn't appear that the problem with that site is any fault of UltraDNS. (Comodos SecureDNS) OpenDNS gives you an informative page regarding the trouble and will even tell you where the problem lies.

[fhkh]

Is using Comodo DNS will make your browsing run faster?
It is not (in my case).
I tried to ping it using my normal DNS and the COMODO DNS was significantly slower.
I attached the ping's data.
Best REgards.

[Tags:]