another brick in the wall[ed garden]

Thu May 14 17:48:11 UTC 2009

Dear Sprint EVDO people,

Your man-in-the-middle hijacking of UDP/53 DNS queries against
nameservers that I choose to query from my laptop on Sprint EVDO is
not appreciated.  Even less appreciated is your complete blocking of
TCP/53 DNS queries.

Queries from my lab:

   rs at click [14] %	dig +short @192.148.252.10 version.bind. chaos txt
   "Just send your damn query already..."
   rs at click [15] %	dig +tcp +short @192.148.252.10 version.bind. chaos txt
   "Just send your damn query already..."
   rs at click [16] %	dig +tcp +short @192.148.252.10 hostname.bind. chaos txt
   "bifrost"
   rs at click [17] %	

Queries from my laptop:

   Superfly:~ rs$ dig +short @192.148.252.10 version.bind. chaos txt
   "9.6.0-P1"
   Superfly:~ rs$ dig +tcp +short @192.148.252.10 version.bind. chaos txt
   ;; connection timed out; no servers could be reached
   Superfly:~ rs$ dig +tcp +short @192.148.252.10 hostname.bind. chaos txt
   "ns1-kscymar06.spcsdns.net"
   Superfly:~ rs$ 

Guys, I send you money each month to deliver packets for me, not to
invent new ways of being annoying (and breaking TSIG signed updates to
dynamic DNS).  Less is more.  Please stop dinking with 10-minute-idle
TCP sessions (which I complained about a year and a half ago) and
knock it off with offering DNS service that I did not ask for.

Sincerely,

Your Disgruntled Customer, RS

PS:  No, I don't expect that this open letter will get you to fix the
misbehavior, but if some Swedish guy comes along swinging a clue-bat
at you guys I hope he whacks you a couple of times for me.