Some carriers (and private networks [like UAT]) don't allow DNS to traverse their network at all, as a security and QoS control measure.
On Sun, Nov 29, 2009 at 5:45 PM, R P Herrold
<herrold@owlriver.com> wrote:
On Sat, 28 Nov 2009, Bob Elzer wrote:
> You do know that you can use any DNS server you want to, right ?
two caveat's here:
1. a common policy to avoid load problems on
nameservers is to limit relies to non-customer IP's to only
those domains for which one is authoritative for
2. an ISP can use provide an interception of DNS
answers fairly trivially for making sure a customer passes
through a web view of a terms and conditions page (consider
the usual intercepts one encounters at hotels, which may be
done that way, along with other methods)
There is a crpytographically secure answer mechanism
to prevent such false results from going undetected, but it is
not yet in wide distribution.
--Russ herrold