DNS rules changed for unauthenticated users

September 8, 2005

The LAWN DNS traffic policy for unauthenticated users has been restricted to known campus DNS servers. Previously, any DNS traffic (udp port 53) was passed to any host, allowing users to use any DNS server they wished. It has come to our attention that some users take advantage of this to circumvent authenticating to the LAWN. Since the LAWN requires the use of DHCP, and the DNS servers are communicated to clients via DHCP, the firewall rulset was altered to only allow DNS traffic to the defined hosts. Once authenticated, the restriction is removed, and clients may utilize any DNS server they choose. This change will not effect the vast majority of users. If you are affected and need assistance, please visit the OIT customer service center or open a trouble ticket (support@oit.gatech.edu) describing your problem.