5/26/2012

[macsupport] Digest Number 8914

Messages In This Digest (20 Messages)

Messages

1a.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "James Robertson" jamesrob@sonic.net   jamesrob328i

Fri May 25, 2012 6:21 am (PDT)




On May 24, 2012, at 10:40 PM, Randy B. Singer wrote:

> You "install" OpenDNS by simply putting these two number in your
> Network System Preferences --> Built-in Ethernet --> DNS Servers:
>
> 208.67.222.222
> 208.67.220.220

Sorry to belabor the (possibly) obvious - the very fact that I ask this demonstrates my imperfect understanding of how configuration fits together - but shouldn't we put the IP addresses in our LAN routers and leave <Network System Preferences --> Built-in Ethernet --> DNS Servers> empty?

Thanks,

--
Jim Robertson
__o
_-\<,_
(*)/ (*)
```````````````````````````````````````````````````````
My other car is an S-Works Roubaix

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1b.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Denver Dan" denver.dan@verizon.net   denverdan22180

Fri May 25, 2012 6:38 am (PDT)



Howdy.

You can use the OpenDNS IP DNS addresses in either the router or on the
Macintosh, or, it's my understanding, both.

Denver Dan

On Fri, 25 May 2012 06:21:43 -0700, James Robertson wrote:
>
> On May 24, 2012, at 10:40 PM, Randy B. Singer wrote:
>
>> You "install" OpenDNS by simply putting these two number in your
>> Network System Preferences --> Built-in Ethernet --> DNS Servers:
>>
>> 208.67.222.222
>> 208.67.220.220
>
> Sorry to belabor the (possibly) obvious - the very fact that I ask
> this demonstrates my imperfect understanding of how configuration
> fits together - but shouldn't we put the IP addresses in our LAN
> routers and leave <Network System Preferences --> Built-in Ethernet
> --> DNS Servers> empty?
>
> Thanks,
>
> --
> Jim Robertson

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1c.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 6:48 am (PDT)



On 5/25/2012 9:38 AM, Denver Dan wrote:
> You can use the OpenDNS IP DNS addresses in either the router or on the
> Macintosh, or, it's my understanding, both.

I have used OpenDNS for several years now and find that the easist way
to encompass the entire network is to just use the router as the OpenDNS
access point. On a large network, it's time consuming to configure each
machine for an alternate DNS server. There really is no benefit to
doing this as opposed to configuring one device.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1d.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Denver Dan" denver.dan@verizon.net   denverdan22180

Fri May 25, 2012 6:54 am (PDT)



Howdy.

Randy, thanks for this note. It answers the question I had about using
OpenDNS. I wasn't sure about the OpenDNS feature of blocking known
malware sites.

I've used OpenDNS in the past but only on my main Mac's DNS tab in the
Network panel and not on my router.

Upgrading the OS and re-installing the OS means I've forgot to try it
again.

Denver Dan

On Thu, 24 May 2012 22:40:42 -0700, Randy B. Singer wrote:
>
> On May 24, 2012, at 6:53 PM, Denver Dan wrote:
>
>> I have a basic understanding of OpenDNS but a fairly poor
>> understand of
>> the point of this article that using OpenDNS can block this recent
>> Flashback malware.
>>
>> Hopefully a member here can read this article and provide some clear
>> comment on how this works.
>
> Didn't I mention OpenDNS as a way to avoid the Flashback malware a
> few weeks ago on this list?
>
> If I missed posting about this on this list, I apologize.
>
> The way that OpenDNS works is fairly simple. Almost all of the
> malware for OS X has been either a Trojan Horse, or a drive-by
> download. Both can only be contracted from a malicious, or just
> infected, Web site. Instead of using your ISP's Web lookup, you use
> OpenDNS. OpenDNS automatically blocks known malicious/infected Web
> sites. So, if you are automatically kept from visiting dangerous Web
> sites, you can't become infected by them.
>
> The price that you pay for this service is that OpenDNS displays ads
> when you try to visit a non-existent Web site. Not a bad deal!
>
> http://www.opendns.com/
>
> You "install" OpenDNS by simply putting these two number in your
> Network System Preferences --> Built-in Ethernet --> DNS Servers:
>
> 208.67.222.222
> 208.67.220.220
>
> ___________________________________________
> Randy B. Singer

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1e.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Les Streater" lesstreater@marpubs.demon.co.uk   linernutuk

Fri May 25, 2012 6:56 am (PDT)



In my ignorance, can I ask a question on this?

If I have Open DNS numbers in the System Prefs but the original ISP numbers in my router, is this a problem? which numbers would actually be used to connect to the net?

Or should I delete the numbers in one site?

TIA

Les

On 25 May 2012, at 14:47, Harry Flaxman wrote:

On 5/25/2012 9:38 AM, Denver Dan wrote:
> You can use the OpenDNS IP DNS addresses in either the router or on the
> Macintosh, or, it's my understanding, both.

I have used OpenDNS for several years now and find that the easist way
to encompass the entire network is to just use the router as the OpenDNS
access point. On a large network, it's time consuming to configure each
machine for an alternate DNS server. There really is no benefit to
doing this as opposed to configuring one device.

Harry

[Non-text portions of this message have been removed]

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1f.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 7:09 am (PDT)



On 5/25/2012 9:56 AM, Les Streater wrote:
> In my ignorance, can I ask a question on this?
>
> If I have Open DNS numbers in the System Prefs but the original ISP numbers in my router, is this a problem? which numbers would actually be used to connect to the net?
>
> Or should I delete the numbers in one site?

Les,

Understand that the DNS connection is basically for HTTP connections and
those sockets associated with them, NOT the entire net connection.

As we have discussed/debated before, the acronym DNS stands for Domain
Name Server, or it used to mean Dynamic Name Server, or several
combinations of each.

Your basic IP address is what the device uses to connect to the internet
on a basic level.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1g.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 7:14 am (PDT)



On 5/25/2012 9:56 AM, Les Streater wrote:
> If I have Open DNS numbers in the System Prefs but the original ISP numbers in my router, is this a problem? which numbers would actually be used to connect to the net?

Sorry Les, I didn't answer your question. You're fine the way you are.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1h.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 7:15 am (PDT)



On 5/25/2012 9:56 AM, Les Streater wrote:
> If I have Open DNS numbers in the System Prefs but the original ISP numbers in my router, is this a problem? which numbers would actually be used to connect to the net?

Sorry Les, I didn't answer your question. You're fine the way you are.

I'd be surprised if you could actually change the ISP IP address
pointer. The connection won't let you.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1i.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "GG" googurl@gmail.com   terminalatom

Fri May 25, 2012 7:32 am (PDT)



At 2:56 PM +0100 5/25/12, Les Streater wrote:

>In my ignorance, can I ask a question on this?
>
>If I have Open DNS numbers in the System Prefs but the original ISP
>numbers in my router, is this a problem? which numbers would
>actually be used to connect to the net?

Can't find a reference for this right now, but I seem to recall
reading somewhere: If DNS settings on the Mac are different from DNS
settings on the router, DNS settings on the Mac will take precedence.

So, since yer set up this way, maybe you can experiment.

Visit
http://www.opendns.com/

The site will tell you if you are using OpenDNS.

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1j.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 1:13 pm (PDT)



On 5/25/2012 10:15 AM, Harry Flaxman wrote:
> On 5/25/2012 9:56 AM, Les Streater wrote:
>> > If I have Open DNS numbers in the System Prefs but the original ISP numbers in my router, is this a problem? which numbers would actually be used to connect to the net?
> Sorry Les, I didn't answer your question. You're fine the way you are.
>
> I'd be surprised if you could actually change the ISP IP address
> pointer. The connection won't let you.
>
> Harry

An addenedum to this: Not all routers support OpenDNS. I have a few
routers here and examined a new Linksys (Cisco) 'N' router. The newest
firmware for it only supports DynDNS and TZO.com, both of which are paid
services, unlike OpenDNS.

In purchasing a new router, check out which services are supported.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1k.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 1:16 pm (PDT)



On 5/25/2012 10:32 AM, GG wrote:
> At 2:56 PM +0100 5/25/12, Les Streater wrote:
>
>> >In my ignorance, can I ask a question on this?
>> >
>> >If I have Open DNS numbers in the System Prefs but the original ISP
>> >numbers in my router, is this a problem? which numbers would
>> >actually be used to connect to the net?
> Can't find a reference for this right now, but I seem to recall
> reading somewhere: If DNS settings on the Mac are different from DNS
> settings on the router, DNS settings on the Mac will take precedence.
>
> So, since yer set up this way, maybe you can experiment.

I didn't think this was the case, so I set up a configuration where a
Win pc and my iMac were using OpenDNS and a separate OpenDNS account was
specified in my router. The router always won out. It seems to be that
the last connecting device takes precedence, that is, the device
actually going out to the internet.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1l.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 1:19 pm (PDT)



On 5/25/2012 4:16 PM, Harry Flaxman wrote:
> On 5/25/2012 10:32 AM, GG wrote:
>> > At 2:56 PM +0100 5/25/12, Les Streater wrote:
>> >
>>>> >> >In my ignorance, can I ask a question on this?
>>>> >> >
>>>> >> >If I have Open DNS numbers in the System Prefs but the original ISP
>>>> >> >numbers in my router, is this a problem? which numbers would
>>>> >> >actually be used to connect to the net?
>> > Can't find a reference for this right now, but I seem to recall
>> > reading somewhere: If DNS settings on the Mac are different from DNS
>> > settings on the router, DNS settings on the Mac will take precedence.
>> >
>> > So, since yer set up this way, maybe you can experiment.
> I didn't think this was the case, so I set up a configuration where a
> Win pc and my iMac were using OpenDNS and a separate OpenDNS account was
> specified in my router. The router always won out. It seems to be that
> the last connecting device takes precedence, that is, the device
> actually going out to the internet.

In thinking on what you typed, sure, if the computer has an OpenDNS
address specified, and the router no alternate DNS server address(es),
the computer will use OpenDNS. The case I mention works where there are
separate accounts specified. So, if the computer has an OpenDNS server
specified and the router none, yes, OpenDNS will be used for that
computer, but, if the computer has an OpenDNS server specified and the
router a DynDNS address, the DynDNS address will take precedence.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1m.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Otto Nikolaus" otto.nikolaus@googlemail.com   nikyzf

Fri May 25, 2012 4:20 pm (PDT)



On 25 May 2012 21:12, Harry Flaxman <harry.flaxman@me.com> wrote:

>
> An addenedum to this: Not all routers support OpenDNS. I have a few
> routers here and examined a new Linksys (Cisco) 'N' router. The newest
> firmware for it only supports DynDNS and TZO.com, both of which are paid
> services, unlike OpenDNS.
>
> In purchasing a new router, check out which services are supported.
>

I'm not sure I understand. Are you saying that those routers do not allow
you enter the Open DNS IP addresses in the DNS settings, or that you can
but they don't work?

Otto

[Non-text portions of this message have been removed]

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1n.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Fri May 25, 2012 7:06 pm (PDT)



On 5/25/2012 7:20 PM, Otto Nikolaus wrote:
>> > An addenedum to this: Not all routers support OpenDNS. I have a few
>> > routers here and examined a new Linksys (Cisco) 'N' router. The newest
>> > firmware for it only supports DynDNS and TZO.com, both of which are paid
>> > services, unlike OpenDNS.
>> >
>> > In purchasing a new router, check out which services are supported.
>> >
> I'm not sure I understand. Are you saying that those routers do not allow
> you enter the Open DNS IP addresses in the DNS settings, or that you can
> but they don't work?

The services are just not supported. The data that needs to be input is
specifically for those services and no other. As it turns out, there is
no standard format for these alternate DNS supplying services. All are
different. DynDNS required data are different than OpenDNS. The router
will only communicate with that service when that service is selected
under the DDNS menu in the firmware setup screen. TZO.com has it's own
required data, with fields that are unique to it's service, i.e. a 'Key'
field for a numeric 'password'.

Harry

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1o.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Randy B. Singer" randy@macattorney.com   randybrucesinger

Fri May 25, 2012 7:26 pm (PDT)




On May 25, 2012, at 6:21 AM, James Robertson wrote:

> Sorry to belabor the (possibly) obvious - the very fact that I ask
> this demonstrates my imperfect understanding of how configuration
> fits together - but shouldn't we put the IP addresses in our LAN
> routers and leave <Network System Preferences --> Built-in Ethernet
> --> DNS Servers> empty?

You can do it either way.

However, doing it on each Mac is often easier than trying to
reconfigure some brands of routers.

___________________________________________
Randy B. Singer
Co-author of The Macintosh Bible (4th, 5th, and 6th editions)

Macintosh OS X Routine Maintenance
http://www.macattorney.com/ts.html
___________________________________________

[Non-text portions of this message have been removed]

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
1p.

Re: OpenDNS Blocks Flashback "Trojan" - article

Posted by: "Randy B. Singer" randy@macattorney.com   randybrucesinger

Fri May 25, 2012 7:28 pm (PDT)




On May 25, 2012, at 6:54 AM, Denver Dan wrote:

> Randy, thanks for this note. It answers the question I had about using
> OpenDNS. I wasn't sure about the OpenDNS feature of blocking known
> malware sites.

Sorry that I haven't posted about this to this list earlier. Here is
what the OpenDNS folks have to say:

<http://blog.opendns.com/2012/04/09/worried-about-mac-malware-just-
set-up-opendns/>

___________________________________________
Randy B. Singer
Co-author of The Macintosh Bible (4th, 5th, and 6th editions)

Macintosh OS X Routine Maintenance
http://www.macattorney.com/ts.html
___________________________________________

[Non-text portions of this message have been removed]

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (18)
2a.

Re: thumbnails too small

Posted by: "N.A. Nada" whodo678@comcast.net

Fri May 25, 2012 9:14 am (PDT)



The default photo names probably look something like, PICT0026.IMG, IMAGE029.JPG, IMG_0569.JPG, or DCIM_0569.

I was just using the last 3 characters of the default image name. Outside of the email, open the file where the photos are, find the one you want. Make note of the image's name, then go back and attach the photo, using the image name to pick the one you want.

There is no way to enlarge the photo while navigating to it in your email application.

Brent

On May 24, 2012, at 9:08 PM, Kitty wrote:

Brent,

Sorry but you lost me. Is that the image size or what? And how do I find 'that' out? K

--- In macsupportcentral@yahoogroups.com, "N.A. Nada" <whodo678@...> wrote:
>
> Kitty, you just need to know if it is image 159 or 163 and/or 452, that you want to attach. Leave the email, figure that out and then navigate to it when you attach it.
>
> Brent
>
>
> On May 24, 2012, at 3:13 PM, Kitty wrote:
>
> Bingo! you got it Brent.
>
> I take way too many photos, I know; my beloved little animals in every possible cute position or activity possible. I can't think of names for all the photos and in the tiny thumbnails they often look alike. Dealing with photos is so time consuming and tedious! But I see there are threads on photos I need to read in the archives--maybe I'll even learn something about how to simplify things, I hope.;) K
>
> --- In macsupportcentral@yahoogroups.com, "N.A. Nada" <whodo678@> wrote:
> >
> > Otto, I'm not the OP, but my take on this from the first post on, has been she is attaching a photo to an email, and in the navigation window to select the photo, all she is seeing are thumbnails. There is no way to enlarge them at that point. She has to identify the photo first outside of email, get the file name and use that to select the photo.
> >
> > I'll even bet the photo has the original name from the camera, and nothing distinctive to make it stand out. But then again I could be wrong on both counts.
> >
> > Brent
> >
> >
> > On May 24, 2012, at 3:19 AM, Otto Nikolaus wrote:
> >
> > Sorry to hear about your neighbour.
> >
> > I'm still not clear what you want to do:-
> >
> > Enlarge thumbnails of photos sent to you as attachments via Yahoo Mail;
> > or
> > Enlarge thumbnails of photos in iPhoto to help you choose them before
> > sending them as attachments via Yahoo Mail?
> >
> > Otto
> >
> > On 24 May 2012 01:00, Kitty <kquen2008@> wrote:
> >
> > > So sorry for not replying to you Anna.
> > >
> > > I had suddenly gotten called away and consequently involved with helping
> > > an 88 year old neighbor who had fallen. Long story short, he is now in a
> > > rest home and can no longer live in his own home. (sad story)
> > >
> > > Anyway, where were we?
> > >
> > > The iPhoto version I'm using is old; 5.0.4. There is no slider or any
> > > other way to adjust the thumbnails that I can see. I use Yahoo for mail and
> > > hit where it says ad attachments, which takes me to were I can click on
> > > photos.
> > >
> > > Move down for more replies to you, Anna. But I think I have to update
> > > iPhoto get get anywhere...
> > >
> >
> > [Non-text portions of this message have been removed]
> >
>

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (23)
3a.

DNSCrypt from OpenDNS

Posted by: "Tim O'Donoghue" tjod@drizzle.net   timodonoghue

Fri May 25, 2012 4:32 pm (PDT)



I've been using the beta of this software for a while - encrypts DNS traffic to help prevent "man-in-the-middle" attacks.

"In the same way the SSL turns HTTP web traffic into HTTPS encrypted Web traffic, DNSCrypt turns regular DNS traffic into encrypted DNS traffic that is secure from eavesdropping and man-in-the-middle attacks. It doesn't require any changes to domain names or how they work, it simply provides a method for securely encrypting communication between our customers"

https://www.opendns.com/technology/dnscrypt/

Mac and Windows versions available

[Non-text portions of this message have been removed]

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (3)
3b.

Re: DNSCrypt from OpenDNS

Posted by: "paul smith" kullervo@nycap.rr.com   waldonny

Sat May 26, 2012 12:19 am (PDT)



So have I. Very simple to set up, works behind the scenes, and gives me a nice feeling of added security.
--
PSmith
MacBook Pro, 2.4GHz Intel Core 2 Duo, 4 GB DDR2 SDRAM, OS 10.7.4 iPhone 4S 64 GB, iOS 5.1.1

On May 25, 2012, at 7:32 PM, Tim O'Donoghue wrote:

I've been using the beta of this software for a while - encrypts DNS traffic to help prevent "man-in-the-middle" attacks.

"In the same way the SSL turns HTTP web traffic into HTTPS encrypted Web traffic, DNSCrypt turns regular DNS traffic into encrypted DNS traffic that is secure from eavesdropping and man-in-the-middle attacks. It doesn't require any changes to domain names or how they work, it simply provides a method for securely encrypting communication between our customers"

https://www.opendns.com/technology/dnscrypt/

Mac and Windows versions available

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (3)
3c.

Re: DNSCrypt from OpenDNS

Posted by: "Harry Flaxman" harry.flaxman@me.com   hflaxman001

Sat May 26, 2012 12:44 am (PDT)



On 5/26/2012 3:19 AM, paul smith wrote:
> So have I. Very simple to set up, works behind the scenes, and gives me a nice feeling of added security.
> --
> PSmith
> MacBook Pro, 2.4GHz Intel Core 2 Duo, 4 GB DDR2 SDRAM, OS 10.7.4 iPhone 4S 64 GB, iOS 5.1.1
>
>
>
>
> On May 25, 2012, at 7:32 PM, Tim O'Donoghue wrote:
>
> I've been using the beta of this software for a while - encrypts DNS traffic to help prevent "man-in-the-middle" attacks.
>
> "In the same way the SSL turns HTTP web traffic into HTTPS encrypted Web traffic, DNSCrypt turns regular DNS traffic into encrypted DNS traffic that is secure from eavesdropping and man-in-the-middle attacks. It doesn't require any changes to domain names or how they work, it simply provides a method for securely encrypting communication between our customers"

I've used it when it was first available. It is a 'neat' app for what
it does. I tend to switch alternate DNS addresses, so I don't use it
all of the time. When I use OpenDNS, I use the encryption program.

Harry

Back to top
Reply to sender | Reply to group | Reply via web post
Messages in this topic (3)
Recent Activity
Visit Your Group
Drive Traffic

Sponsored Search

can help increase

your site traffic.

Need traffic?

Drive customers

With search ads

on Yahoo!

Yahoo! Finance

It's Now Personal

Guides, news,

advice & more.

Need to Reply?

Click one of the "Reply" links to respond to a specific message in the Daily Digest.

Create New Topic | Visit Your Group on the Web
Posted by at