Blogs

DNS Firewall Comparison

Recently I discovered this article about testing the effectiveness of public DNS malware filters. The details are appreciated as this type of comparison is not given due attention.

It reminded me to write up something I had been putting off …

Homelab DNS Domain

A coworker asked me recently what DNS domain I use at home. It was a simple question but may deserve a long answer. I have tried several iterations over the years.

Often with large corporate or data center networks use spilt horizon DNS. It is a simple way to segment DNS data controlling what …

To WWW or not to WWW

Have you surfed the web lately? That would be the world wide web and origin of the “www” you often see in the URL of your web browser. A few decades ago it was the norm but slowly new conventions arise and people’s expectations change.

Today websites with and without the …

Pobox Lifelong Email

Going off to college is a hallmark time of new discoveries. In the 90s technology was booming and email was one of those discoveries. Through my undergrad time my campus email address was used for everything. Talking to classmates and professors, using online services, or just keeping in touch …

Home Backup ISP

A recent power outage at home led me to look into secondary ISP options. All the battery backup work didn’t quell family complaints about spotify not working. Luckily my Unifi gateway natively supports a secondary WAN port, so the question is what modem and ISP will work without breaking the …

DNS Stamps?

My home network has been protected by NextDNS for a number of years so I was excited to see recent Unifi code updates added a DNS Shield feature. It was a new feature to support DNS-over-HTTPS (DoH) tunneling of Internet DNS queries. Previously this was accomplished by installing a special package …

Dad and Grizz

This picture here is hard to appreciate with 2010 camera quality but it reminds me of quality time spent with two great men. For some odd reason I felt the need to pause and snap it a little after 4am that November morning. It was cold and dark, but I was warm, happy, and wanting to remember it …

Cricket Liu

In January 2000 I reported to a new job straight out of college. There was the normal corporate trainings but soon I was assigned to a specific IP Services team. DNS and BIND by O’Reilly was the earliest training material provided. If a feature or configuration was unfamiliar, the book was …

Spectrum IPv6

For a while now, Spectrum has made IPv6 available at my home but I have had mixed results with a few different routers and firewalls. Some commercial models lacked needed features like prefix delegation client while consumer grade models lacked other features of interest. Recently I purchased an …

OpenDNS Enforcement

OpenDNS is a powerful tool to control Internet access on both enterprise and home networks. The ability to manipulate DNS responses based on categories and analytics along with policy customizations can protect users from known threats and provide a layer of content filtering. However, the network …