K-12 Forums

Talk with other K-12 network administrators in your state.

Or see all states.

Categories

Vanilla 1.1.4 is a product of Lussumo. More Information: Documentation, Community Support.

This discussion has been inactive for longer than 30 days, and is thus closed.
    • CommentAuthorwm4bama
    • CommentTimeSep 15th 2009
     permalink
    I'm in the boonies and my only option for ISP is satellite or dial-up...I use Wildblue as my ISP...bandwidth and speed limitations are my main concern since WB has rolling 30-day limits on download and upload usage (Fair Access Policy-FAP).

    Before switching to OpenDNS I started using Firefox (currently v3.5.3) with the add-on AdBlock-Plus and subscribe to the EasyList-USA filters, plus some filters I added myself...

    This combination speeds up my page loading and also reduces the number of bytes coming through the satellite to me..which helps reduce my 30-day FAP numbers.

    I know this works well when using the DNS from Wildblue...

    My question is: Does OpenDNS work correctly with Firefox/AdBlock-Plus?

    Ad URL's embedded in a web page are filtered and not requested using FF/ABP so does OpenDNS servers/proxy-servers parse the original web page and send those ads anyway, even though they are blocked from display on my end? Or does OpenDNS wait for my browser to request those URL's?

    The intent is to not have those ads clogging my satellite spot beam and adding to my FAP limits...

    I hope someone knows the correct answer to this..

    Thanks....
    • CommentAuthorgalbicka
    • CommentTimeSep 15th 2009
     permalink
    "Does OpenDNS work correctly with Firefox/AdBlock-Plus?"
    Works as expected for me.
    • CommentAuthorwm4bama
    • CommentTimeSep 15th 2009
     permalink
    Thanks galbicka, I just wanted confirmation that the OpenDNS web page parser does not gather all those AD URL's and send them through the pipeline anyway...even though FF blocks them from display doesn't prove or disprove whether they were sent from the OpenDNS servers...

    I switched to OpenDNS yesterday and have just now started to evaluate speeds and adblock-plus...
    • CommentAuthorwm4bama
    • CommentTimeSep 15th 2009
     permalink
    OK, I downloaded/installed NetMeter to count bytes coming through my modem..

    I ran several web pages through a test with adblock enabled and again with adblock disabled...between each page download I cleared the browser cache and reset the Netzero counters (so I didn't have to do the math-lol) and the results are quite astonishing...with adblock enabled the number of bytes coming through my modem is 25-40% less (depending on amount of ads in the web page) than with adblock disabled..page load times are also 25-40% faster with adblock enabled.

    So this proves OpenDNS waits for the browser to request the ads and does not send the ads when adblock is enabled...good show..

    I'm sticking with OpenDNS instead of my Wildblue DNS servers..
    • CommentAuthorrotblitz
    • CommentTimeSep 15th 2009
     permalink
    @wm4bama
    From what you wrote I'm seeing that you don't know how DNS works. OpenDNS (same as any other DNS service) are even not aware what web documents you will be visiting and what links may be included there or not. They even do not know that it is a web page requested by a browser. It could be a mail server or news server or time server or software update server or VoIP call or game console or telnet server or SFTP server or FTP server or...

    Therefore, even if you expected and requested it, they are simply technically not able to "does OpenDNS servers/proxy-servers parse the original web page and send those ads anyway", no chance, really.

    Btw, an important hint for you: as you have FF 3.5.x running, it is strongly recommended to disable DNS (and other) prefetching, else you will be surprised what DNS traffic FF will cause to your FAP limits... :shocked:
    • CommentAuthorpachy
    • CommentTimeSep 15th 2009
     permalink
    Rotblitz, you are incorrect. FF has no 'prefetching' features. This is purely an addon feature, usually an addon called SmarterFox does this.
  1.  permalink
    actually you are Wrong Pachy.. 3.5+ has DNS prefetching built in..
    https://developer.mozilla.org/En/Controlling_DNS_prefetching .. Alot of things that used to be addons have been added in later releases as stock features in Firefox..
    Thankful People: rotblitz
    • CommentAuthorwm4bama
    • CommentTimeSep 15th 2009
     permalink
    rotblitz, some DNS's use proxy servers to parse the web page that you requested and prefetch ALL the URL's embedded in that page to speed page downloads..it all depends on how the proxy software is written...I noticed that OpenDNS also uses proxy servers for certain functions...that's why I asked.

    infinity306 and patchy...I'm using FF 3.5.3 and the tests I just concluded prove that the "prefetch" does not prefetch the ads that are blocked by ABP...

    I'll check your concern about the "other DNS traffic" that prefetch might add to my FAP...can you elaborate on this "traffic" with some examples? Thanks..
    • CommentAuthorrotblitz
    • CommentTimeSep 15th 2009 edited
     permalink
    @wm4bama
    "some DNS's use proxy servers to parse the web page that you requested"
    Thanks for the info. I have never heard about that and would strictly disagree with such an ISP or DNS service, if they didn't explicitly inform me about the details (in contrast to as OpenDNS does - http://www.opendns.com/support/article/244).

    "I just concluded prove that the "prefetch" does not prefetch the ads that are blocked by ABP..."
    Sure, everything defined in ABP does not leave your browser or computer at all. This is how it was designed, and everything else wouldn't make sense...

    "can you elaborate on this "traffic" with some examples?"
    Do you want us to present a huge list of domains, which have been prefetched with DNS prefetch enabled? :shocked:

    Copying from the mentioned web document:
    "However, the user may wish to disable prefetching. This can be done by setting the network.dns.disablePrefetch preference to true."
    (This can be reached by entering about:config in the address bar.)
    • CommentAuthordiacon
    • CommentTimeSep 15th 2009
     permalink
    FYI - You might have to add the network.dns.disablePrefetch setting as the toggle doesn't exist. It's still on though.
    • CommentAuthorwm4bama
    • CommentTimeSep 15th 2009
     permalink
    roblitz asked:
    Do you want us to present a huge list of domains, which have been prefetched with DNS prefetch enabled?

    No, I am trying to make sense of what triggers a "prefetch" that you say may affect my FAP limits.

    For example, I click my cnn.com bookmark...the page loads minus any ads I have blocked...now what, for example, in the cnn.com web page will cause the FF prefetch feature to take any action...

    I watch my network icon and modem send/receive lights closely, and I never see extra activity...maybe I don't visit pages in the "huge list of domains" that you say is prefetched by FF...all I'm trying to understand is what causes a FF prefetch? an embedded URL? a rouge site?

    Thanks again..
    • CommentAuthordiacon
    • CommentTimeSep 15th 2009
     permalink
    It will prefetch any links on the webpage.
  2.  permalink
    Yep - any links on a web page you visit will be prefetched. That could amount to several hundred links prefetched.
    • CommentAuthorwm4bama
    • CommentTimeSep 16th 2009
     permalink
    Prefetch does not prefetch any link from a web page! It takes a "special" command that's embedded in a web page to trigger a prefetch operation. The technical description of how "Prefetch" works in Firefox is noted below, and an easy way to disable it. Since Google is a big violator of this rule (I use Google a lot) I have chosen to disable Prefetch in my Firefox installation. After you read the following you may also choose to disable it if you are using Firefox..

    The technical description of what "Prefetch" does and what triggers it:

    In particular, Firefox will, at times, "prefetch" the contents of a web page which it thinks you might want to see soon. If a page is marked as being the "next" page in a series, Firefox, by default, will prefetch that page's contents. (And, yes, for those who have asked for "next" tags for the LWN Weekly Edition, it will happen when we get a chance). When the user hits the link for the next page, it will already be resident in the Firefox cache, and will display more quickly.

    The interesting thing is that Firefox can be told explicitly to prefetch pages; all it takes is a tag like:

    <link rel="prefetch" href="URL">

    Google will, if it decides that you should be feeling lucky, add such a tag to the first in a series of search results, causing that first result to be prefetched.

    Google's use of prefetching in this way is unfortunate; it seems certain to lead to trouble for somebody, somewhere down the line. The real problem, however, is with Firefox, which is shipped with prefetching turned on. There is no indication, anywhere in the preference screens, that an option controlling prefetching even exists. Anybody wanting to disable prefetching will have to edit their prefs.js file, or tweak the network.prefetch-next option on the about:config screen. Turning off prefetch in this way will slow down some page loads, but, for many users, the extra delay will be worth it.


    A malicious site can already secretly load other sites on your behalf. It's as simple as creating a hidden IFRAME; <link rel="prefetch"> provides no new abilities here. So the use of prefetching by malicious sites is not interesting, and there is no point in Firefox trying to protect you from them.

    The only issue is whether friendly sites are using it correctly. So the question is, is Google doing the right thing with its prefetch directives? Their FAQ indicates that they only issue a prefetch when their analysis shows that the vast majority of users go straight to that search result. Whatever bad thing happens when you load that site already happens to 99% of the users with that search term. Furthermore since Google already has some sort of porn detection, that can be applied as a filter too.

    Anyway, whether or not Google is doing the right thing, it is not a Firefox issue. Apart from the fact that malicious sites can already get the same effects using hidden IFRAMEs, Firefox has had prefetching for *years* and no real problems have been detected.


    Did you know that Firefox has a feature that caches pages that it thinks you are going to click on? This can slow down system performance and add bandwidth usage to your FAP, an important detail if your ISP sets usage limits. Here’s how to disable the Firefox prefetch setting.

    1. Type about:config in the address bar and press ENTER.

    2. Locate and double-click the entry for
    network.prefetch-next

    3. Set it to false to disable this feature. Double-clicking on the setting will change it.
    • CommentAuthorrotblitz
    • CommentTimeSep 16th 2009 edited
     permalink
    All of this was not new and is not related to DNS prefetching, but to web content prefetching... :sad:
    Web/URL prefetching is disabled by default anyway, but DNS prefetching isn't. Sad that we have to repeat and repeat it again. :angry:
    Shouldn't be too difficult to understand...

    And yes, I was horrified when I first saw DNS prefetching in action after installing FF 3.5.x., and especially what consequences it had regarding the OpenDNS stats... :shocked:
    I never would enable it again. :tongue:
    This was one of the worst things ever somebody has designed - pure nonsense, really. :devil:
    • CommentAuthorwm4bama
    • CommentTimeSep 16th 2009
     permalink
    DNS prefetching does not download web pages or contents but just resolves the needed info to complete a URL, should the user request it.

    DNS Prefetch does not try to resolve relative links, or resolve links whose host is the same as the current page's host, since the current site's DNS record is almost certainly already cached. DNS lookups are performed asynchronously, after the page has loaded, so that your browsing experience is never delayed or interrupted.

    Your privacy is safe. While DNS Prefetch does perform a DNS lookup for each different site that exists in a link on your current page, it does not connect to those sites or download any data from them. Unlike page prefetching, the only servers contacted are your computer's DNS servers.
    • CommentAuthorrotblitz
    • CommentTimeSep 16th 2009
     permalink
    That's true. And this is what me horrified. Especially what I found in the stats and in my local DNS traffic log...
    • CommentAuthorwm4bama
    • CommentTimeSep 16th 2009
     permalink
    Thanks everyone for your comments..I think we have beat this subject to death and can move on to more exciting things...

    BTW...I am totally pleased with my OpenDNS experience so far (3rd day). It does not bog down during peak usage hours like the Wildblue DNS servers do...

This discussion has been inactive for longer than 30 days, and is thus closed.