Malaysian ISPs Hijack Cloudflare/Google DNS Requests
Malaysian ISPs are hijacking DNS requests to enforce site-blocking measures, redirecting users from public DNS servers. This raises concerns about censorship, while users can mitigate issues by enabling DNS over HTTPS.
Read original articleRecent reports indicate that Internet Service Providers (ISPs) in Malaysia are hijacking DNS requests directed at public DNS servers like Cloudflare and Google. This action is part of a broader effort to enforce site-blocking measures mandated by the Malaysian Communications and Multimedia Commission (MCMC) under the Communications and Multimedia Act. Users typically circumvent ISP blocks by switching to public DNS servers, but tests have shown that ISPs Maxis and Time are redirecting these requests back to their own DNS servers, effectively preventing access to blocked sites. This manipulation undermines the reliability of both ISP and public DNS servers, leaving users unable to access certain websites. The Internet Monitoring Action Project (iMAP) has documented these changes, highlighting that users who previously configured their settings to use alternative DNS servers are now facing connection timeouts. While this aggressive blocking raises concerns about censorship and the right to information, it also presents a technical challenge that can be addressed. Users are encouraged to enable DNS over HTTPS, which encrypts DNS queries and can bypass these hijacking efforts. The situation reflects ongoing tensions between internet freedom and regulatory measures aimed at controlling access to information.
- Malaysian ISPs are hijacking DNS requests to enforce site-blocking measures.
- Users switching to public DNS servers like Cloudflare and Google are being redirected back to ISP servers.
- This manipulation prevents access to websites blocked by the Malaysian Communications and Multimedia Commission.
- Users can mitigate this issue by enabling DNS over HTTPS for secure and accurate DNS lookups.
- The situation raises concerns about censorship and the right to free access to information.
Related
Cloudflare blocking my IP (2023)
The Cloudflare Community discusses a user facing "verify you are human" prompts on Cloudflare-protected sites. Cloudflare advises contacting site owners for resolution, clarifying they don't block IPs. User frustration ensues.
OpenDNS Suspends Service in France Due to Canal+ Piracy Blocking Order
A French court tightens anti-piracy measures, leading Cisco to withdraw OpenDNS from France. Canal+ targets pirate sites, prompting Google, Cloudflare, and Cisco to block access to 117 domains. This move raises concerns about internet infrastructure neutrality.
Cloudflare 1.1.1.1 incident on June 27, 2024
Cloudflare faced a global incident on June 27, 2024, with its 1.1.1.1 DNS resolver due to BGP hijacking and a route leak. Despite affecting some users, Cloudflare responded by disabling peering locations and engaging with network operators to resolve the issue.
Malaysia is working on an internet 'kill switch', says minister
Malaysia plans to introduce an internet "kill switch" law to enhance digital security, requiring social media platforms to take responsibility for online crimes. New licensing rules for platforms are also forthcoming.
Mac and Windows users infected by software updates delivered over hacked ISP
Hackers compromised an ISP to deliver malware to Windows and Mac users via software updates, affecting multiple applications. Users are advised to avoid insecure updates and use secure DNS protocols.
Related
Cloudflare blocking my IP (2023)
The Cloudflare Community discusses a user facing "verify you are human" prompts on Cloudflare-protected sites. Cloudflare advises contacting site owners for resolution, clarifying they don't block IPs. User frustration ensues.
OpenDNS Suspends Service in France Due to Canal+ Piracy Blocking Order
A French court tightens anti-piracy measures, leading Cisco to withdraw OpenDNS from France. Canal+ targets pirate sites, prompting Google, Cloudflare, and Cisco to block access to 117 domains. This move raises concerns about internet infrastructure neutrality.
Cloudflare 1.1.1.1 incident on June 27, 2024
Cloudflare faced a global incident on June 27, 2024, with its 1.1.1.1 DNS resolver due to BGP hijacking and a route leak. Despite affecting some users, Cloudflare responded by disabling peering locations and engaging with network operators to resolve the issue.
Malaysia is working on an internet 'kill switch', says minister
Malaysia plans to introduce an internet "kill switch" law to enhance digital security, requiring social media platforms to take responsibility for online crimes. New licensing rules for platforms are also forthcoming.
Mac and Windows users infected by software updates delivered over hacked ISP
Hackers compromised an ISP to deliver malware to Windows and Mac users via software updates, affecting multiple applications. Users are advised to avoid insecure updates and use secure DNS protocols.