August 8th, 2024

Malaysian ISPs Hijack Cloudflare/Google DNS Requests

Malaysian ISPs are hijacking DNS requests to enforce site-blocking measures, redirecting users from public DNS servers. This raises concerns about censorship, while users can mitigate issues by enabling DNS over HTTPS.

Read original articleLink Icon
Malaysian ISPs Hijack Cloudflare/Google DNS Requests

Recent reports indicate that Internet Service Providers (ISPs) in Malaysia are hijacking DNS requests directed at public DNS servers like Cloudflare and Google. This action is part of a broader effort to enforce site-blocking measures mandated by the Malaysian Communications and Multimedia Commission (MCMC) under the Communications and Multimedia Act. Users typically circumvent ISP blocks by switching to public DNS servers, but tests have shown that ISPs Maxis and Time are redirecting these requests back to their own DNS servers, effectively preventing access to blocked sites. This manipulation undermines the reliability of both ISP and public DNS servers, leaving users unable to access certain websites. The Internet Monitoring Action Project (iMAP) has documented these changes, highlighting that users who previously configured their settings to use alternative DNS servers are now facing connection timeouts. While this aggressive blocking raises concerns about censorship and the right to information, it also presents a technical challenge that can be addressed. Users are encouraged to enable DNS over HTTPS, which encrypts DNS queries and can bypass these hijacking efforts. The situation reflects ongoing tensions between internet freedom and regulatory measures aimed at controlling access to information.

- Malaysian ISPs are hijacking DNS requests to enforce site-blocking measures.

- Users switching to public DNS servers like Cloudflare and Google are being redirected back to ISP servers.

- This manipulation prevents access to websites blocked by the Malaysian Communications and Multimedia Commission.

- Users can mitigate this issue by enabling DNS over HTTPS for secure and accurate DNS lookups.

- The situation raises concerns about censorship and the right to free access to information.

Link Icon 1 comments
By @3np - 6 months
Original reporting from The Internet Monitoring Action Project (iMAP) referenced in OP: https://imap.sinarproject.org/news/internet-censorship-updat...