Discuss mailing list

[Jeff Taylor <shdwdrgn AT sourpuss.net>]

In reading through this thread, I had an idea for an automated 
registration that would resolve the problem of users with dynamic IP 
addresses, however the easy solution only applies to those using *nix 
systems (or a router such as linksys which use linux OSes and allow you 
to enter startup comands).

The idea takes a page from DDNS configurations... your computer sends an 
HTTP request to a central server every 5 minutes which contains your 
username/password.  The receiver detects your IP address and registers 
it in LDAP.  Now any T2 server that wishes to only serve registered IPs 
can periodically generate an ACL of allowed IPs, and only those IPs are 
able to make recursive queries.  All other requests would still resolve 
OpenNic information, but not ICANN info.

There are benefits to having a registration system.  The username would 
not have to tie directly back to a person in any way, other than an 
email address through which we can reach you.  If a T2 operator sees 
excessive traffic coming from a single IP address, they could then check 
to see if that IP belongs to a registered user.  If the IP is not 
registered, it could be immediately blocked if it is causing traffic 
problems.  If the IP *is* registered, the T2 operator could contact the 
owner and try to resolve the problem.

You may be amazed at the info I see scrolling through my logs.  A couple 
weeks ago I noticed there were a lot of IPs with misconfigured routers 
that were trying to publicly resolve internal computer names.  If you 
are concerned about privacy, you may also be concerned about security.  
Having a way to inform the owner of an IP that their computer is leaking 
sensitive information, or even that their router is making an excessive 
number of queries, may be appreciated.


On 04/04/2012 08:29 AM, woodq11 AT gmail.com wrote:
> One concern I have is exactly how registration will work.
>
> My IP changes ever single time my router reboots (at a minimum.) Sometimes
> that's multiple times a week, and that says nothing for those that travel or
> use OpenNIC from multiple computers (work and home.)