x post from tech: DNS security issues at some ISPs affecting small business owners

As this directly relates to the SA Internet, it needs to go here also.

On Tue, 6 Jun 2017 08:00:38 +0200
Mogamat - TABITS <[email protected]> wrote:
> On 2017-06-05 10:00 AM, Nishal Goburdhan wrote:
> > tbh, i think that’s just your paranoia  :-)
> > ie.  don’t attribute to malice that ..
> > i don’t see a parallel between one ISP returning an incorrect
> > answer for a single domain, and the ZA DNSSEC project. 
> We've seen DNS spoofing attacks out of poland on MTN's DNS servers
> which hit us quite hard, as MTN would honour obscene TTLs and return
> incorrect NS ip's for our NS which redirected all our clients on MTN 
> business/Afrihost networks. We had to escalate it through multiple 
> channels over a number of frustrating days to get it to MTN biz NOC.
> We really need a professional forum for DNS/Security related matters" 
> affecting the ZA internet - trying to check DNS propagation with the 
> various ZA ISP;'s is a major/impossible pain for example.
> 
Have you guys been discussing the issues off list as well? I have
received quite a few off list emails and this community has many issues.

For one: There is a lot of fear.

Why are people scared of the people at the registry? or at .africa ?
The people at the Registry (and at .africa) are nice, good and as far
as I know, ethical people. They do not target people who do not agree
with them.. Mark Elkins, Calvin Browne, Theo Kramer are the good guys.


Then, I do not agree with Mogamat that we need a " professional forum
for DNS/Security related matters" this list is perfectly fine for
discussing technical issues.  Or, if there are some that feel some
others are not 'professional' is the idea to close off access to any
such new list? or what?

The closed and secret nature of how things work in this country has a
lot to do with the fact that IOZ has basically died.

I posted to the main IOZ list, something which should raise at least
some sort of discussion, yet, eerie silence.

Questions about co.za DNSSEC still remains unanswered.

Nobody is accountable? yet the co.za domain space does turnover of at
least R50+ million per year?

The fact that South African ISPs are using DNS to bully smaller
players out of the market, makes no news...

The fact that small businesses pay for co.za domain names and with no
DNSSEC could suffer financial losses due to ISPs cutbacks, criminal
syndicates and other reasons, makes no news...

Already, it is impossible for new young black companies to make any
inroads into running their own ISP, and the larger players are getting
larger, more bold, more mischievious by the day.
 

I am also cross posting this post to the general IOZ list. If I am
banned for that, so be it, the Internet Community in SA is busy dying, 
there is only a handful of powerful players, and they make the
rules, set the playing field and now they are also doing evil things 

all in the darkness of silence - as everyone else has their own agenda
(or are simply ignorant)

Andre

_______________________________________________
IOZ mailing list
[email protected]
http://lists.internet.org.za/mailman/listinfo/ioz