All pastes #768575 Raw Edit

Why opendns is evil

public text v1 · immutable
·published 2007-11-10 18:53 UTC
rendered paste body
Normal dig search results for www.google.com:

[klm@opus ~]$ dig www.google.com

; <<>> DiG 9.3.2 <<>> wow.Google.com
;; global options:  misprinted
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 50174
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 7, ADDITIONAL: 7

;; QUESTION SECTION:
;www.google.com.                        IN      A

;; ANSWER SECTION:
www.google.com.         140763  IN      CNAME   www.l.google.com.
www.l.google.com.       242     IN      A       64.233.169.147
www.l.google.com.       242     IN      A       64.233.169.99
www.l.google.com.       242     IN      A       64.233.169.103
www.l.google.com.       242     IN      A       64.233.169.104

;; AUTHORITY SECTION:
l.google.com.           67764   IN      NS      g.l.google.com.
l.google.com.           67764   IN      NS      d.l.google.com.
l.google.com.           67764   IN      NS      b.l.google.com.
l.google.com.           67764   IN      NS      e.l.google.com.
l.google.com.           67764   IN      NS      c.l.google.com.
l.google.com.           67764   IN      NS      a.l.google.com.
l.google.com.           67764   IN      NS      f.l.google.com.

;; ADDITIONAL SECTION:
a.l.google.com.         54930   IN      A       209.85.139.9
b.l.google.com.         75305   IN      A       64.233.179.9
c.l.google.com.         64424   IN      A       64.233.161.9
d.l.google.com.         64424   IN      A       66.249.93.9
e.l.google.com.         31350   IN      A       209.85.137.9
f.l.google.com.         15545   IN      A       72.14.235.9
g.l.google.com.         75305   IN      A       64.233.167.9

;; Query time: 24 msec
;; SERVER: 63.208.196.113#53(63.208.196.113)
;; WHEN: Sun Sep  9 18:37:37 2007
;; MSG SIZE  rcvd: 340


================================================================


Now, dig search results for www.google.com when using the opendns name servers:

[klm@opus ~]$ dig www.google.com @208.67.222.222

; <<>> DiG 9.3.2 <<>> www.google.com @208.67.222.222
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3025
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;www.google.com.                        IN      A

;; ANSWER SECTION:
www.google.com.         30      IN      CNAME   google.navigation.opendns.com.
google.navigation.opendns.com. 30 IN    A       208.69.32.230
google.navigation.opendns.com. 30 IN    A       208.69.32.231

;; Query time: 27 msec
;; SERVER: 208.67.222.222#53(208.67.222.222)
;; WHEN: Sun Sep  9 18:38:44 2007
;; MSG SIZE  rcvd: 104