comment 1

TM blocking SarawakReport

Website BlockedSarawakreport, a website covering sensitive political topics in Malaysia was blocked today by the countries most prominent ISP, Telekom Malaysia (TM).

Internet users using TM’s Domain Name Server (DNS) reported that the website was inaccessible, and I’ve confirmed that is an intentional block by TM.

Here’s a quick primer on DNS. The internet works on this marvelous set a rules we’ve come to call the Internet Protocol. Part of this protocol requires that every server or machine on a network be assigned a unique number to identify itself, this number is called an IP address. An IP address is sort of the phone number of a server, and if you want to communicate with a server you’d need to know that servers phone number.

Now of course the internet is made of billions of websites, and so it comes with its own directory service. Older readers will remember dialing 103 on our local phone lines to talk to an operator to look up someones phone number, this is exactly the same concept. On the internet, this directory service is automatic, and comes with a cool name–Domain Name Server (DNS).

When you type google.com or keithRozario.com on your web-browser, the browser automatically looks up the IP address of the website you requested via a DNS server. And just like how you’d have to memorize 103 in order to call it, your computer is set to request DNS resolutions from a specific DNS server.

For most TM users, this is set to a DNS server with an IP address of 1.9.1.9, you can change this of course, but if you’ve never knew what a DNS was, chances are you’re using TM’s server to convert web addresses to IP addresses.

Now you can see the issue, if TM is the sole service that you use to convert website addresses to IP addresses, it has a lot of control. For instance it could block you from accessing porn sites (which it does), and of course it can block you from accessing ‘controversial’ political blogs like SarawakReport.

How do I know this? You can change the settings on your computer to use alternative DNS servers (Google and OpenDNS run great free services), and these DNS servers convert SarawakReport.org to IP addresses like 104.20.27.161 (note that most of the time popular websites have multiple IP addresses, but that’s not important for now). However, if you use TM’s DNS server, SarawakReport.org converts to 175.139.142.25, which is an IP address owned by TM. This also explains why users who use Proxy servers or different DNS settings will not experience any issues.

TM-DNS
TM’s DNS server resolving SarawakReport.org to 175.139.142.25

Tsk, tsk, tsk.

If you do a reverse DNS lookup, essentially reversing the process of looking IP addresses corresponding to web urls, and instead lookup web-urls corresponding to IP addresses, you find that the same IP address is currently being used by Senyum.my–and that website has a glaring notice on the front page, signalling that the site is blocked for violating Malaysian law , that’s the screenshot you see above.

Essentially TM routed all traffic destined for SarawakReport.org to a server they keep up for hosting a ‘blocked’ notice.

This is just so sad, I really don’t know if I should laugh or cry. This method of blocking is so ineffective even a child would be able to bypass it.

For those wishing to access SarawakReport.org, please change your DNS server settings in Windows–a more effective way around the issue is to use a VPN, like the one I recommend here. A VPN provides a sure-fire way to bypass all the censorship that local ISPs can put in place.

Here’s my review of a VPN service you can use, and hopefully you use my promo code to send some cash my way :). Even if you don’t, it’s OK though, I’m still cool.

*Update*

TheStar have confirmed that the MCMC has issued the directive to block the website, something quite sad, seeing as how you already know how to circumvent the ‘block’.

1 Comment so far

  1. Bad move by TM or should i say MCMC..TM hands are tied since the instruction came from above..

    IT savvy people easily bypass this but i think this move is meant for the not so IT savvy crowd

#YourComment