[dns-operations] Embedding MAC address in DNS requests for selective filtering

Brian Hartvigsen (bhartvig) bhartvig at cisco.com
Mon Jan 25 16:48:59 UTC 2016


> This is then probably implemented by the home router (CPE) appending the MAC
> address to queries, presumably over EDNS.  The ISP nameserver can then
> conditionally filter queries or not, based on customer IP and client MAC
> address.

For OpenDNS this implementation varies by CPE vendor.  They are all built on top of EDNS.  The option code and specific data sent varies though.  The data could be a MAC address or it could be a “unique” identifier to the CPE.  (e.g. If you “log on” to the filter from device A versus your child on the same device, it would be the same MAC, but potentially different identifiers.)

— Brian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20160125/84251209/attachment.sig>


More information about the dns-operations mailing list