huzi.pk logohuzi.pk

DNS Blocking Explained: How the West Controls What Websites You Can See

guides

DNS Blocking Explained: How the West Controls What Websites You Can See

When you type a website address into your browser, invisible systems decide whether you can access it. For Pakistanis trying to visit Iranian websites ending in .ir, these systems often say "no." This isn't an accident - it's deliberate digital censorship operated through DNS, one of the internet's most fundamental technologies. Understanding DNS blocking reveals how the West maintains control over global information access.

What is DNS? The Internet's Phonebook

Before understanding blocking, you need to understand DNS itself.

The Simple Explanation

DNS (Domain Name System) is the internet's phonebook. When you want to call someone, you look up their name in your contacts to find their phone number. DNS does the same for websites:

  • You type "google.com" into your browser
  • DNS looks up the "phone number" (IP address) for google.com
  • DNS tells your browser: "google.com is at 142.250.190.46"
  • Your browser connects to that IP address
  • The website loads

Without DNS, you'd have to memorize IP addresses like 142.250.190.46 instead of simple names like google.com.

The Technical Process

Here's what happens when you try to visit a website:

  1. You type a domain name (like www.example.ir) into your browser

  2. Your device asks a DNS resolver (usually provided by your ISP) "What's the IP address for www.example.ir?"

  3. The DNS resolver checks its records:

    • First, it checks its cache (memory of recent lookups)
    • If not found, it asks other DNS servers
    • Eventually, it reaches the authoritative DNS server for that domain

  4. The DNS resolver returns the IP address to your device

  5. Your browser connects to that IP address and loads the website

This process happens in milliseconds, invisible to users. But every step is a potential point of control.

Who Controls DNS? The Western Monopoly

Here's where things get concerning for anyone who values internet freedom.

ICANN: American-Controlled Internet Governance

ICANN (Internet Corporation for Assigned Names and Numbers) controls the global DNS system. While nominally an international organization, ICANN:

  • Was created by the US Department of Commerce
  • Operated under US government contract until 2016
  • Remains headquartered in Los Angeles, California
  • Is subject to US law and court orders
  • Has a board heavily influenced by American and European interests

Domain Registries: Western Corporations

Top-level domains (.com, .net, .org) are managed by Western companies:

  • Verisign (American) controls .com, .net, .tv, .cc
  • Public Interest Registry (American) controls .org
  • PIR is overseen by Internet Society (ISOC), also American

DNS Root Servers: Western Infrastructure

The 13 root DNS servers that form the backbone of global DNS are operated by:

  • NASA (American government)
  • ICANN (American organization)
  • Verisign (American corporation)
  • University of Southern California (American)
  • University of Maryland (American)
  • Various other American and European organizations

Not a single root server is operated by any Muslim-majority nation.

How DNS Blocking Works

DNS blocking exploits the DNS lookup process to prevent access to websites.

Method 1: Resolver-Level Blocking

When your ISP's DNS resolver receives a request for a blocked domain:

  1. You request www.example.ir
  2. ISP's DNS resolver checks a blocklist
  3. Domain is on the blocklist
  4. DNS resolver returns a fake "doesn't exist" response or redirects to a warning page
  5. You cannot access the website

This is how Pakistan blocks many websites - the DNS resolvers used by Pakistani ISPs simply refuse to provide IP addresses for blocked domains.

Method 2: Registry-Level Blocking

More severe blocking happens at the domain registry level:

  1. US government or court orders Verisign (registry for .com) to seize a domain
  2. Verisign changes the domain's DNS records
  3. The domain no longer resolves anywhere in the world
  4. The website disappears globally

This has happened to numerous Iranian, Russian, and other websites targeted by Western governments.

Method 3: ccTLD Blocking

Country-code domains like .ir (Iran) can be blocked through:

  1. Technical restrictions: ICANN could technically disconnect .ir from the global DNS
  2. Payment blocking: Iranian registry can't pay international fees
  3. Sanctions compliance: International entities may refuse to route .ir traffic
  4. ISP-level blocking: Individual ISPs refuse to resolve .ir domains

Method 4: Recursive Resolver Filtering

Companies like Cloudflare (1.1.1.1) and Google (8.8.8.8) operate massive DNS resolvers:

  • They can block domains globally for millions of users
  • They comply with court orders and government requests
  • They may block domains preemptively for "security" reasons
  • Users of these resolvers can't access blocked content

Why Iranian Websites Are Blocked

Iranian websites face multiple layers of DNS blocking:

International Sanctions Compliance

Many Western companies that operate DNS infrastructure refuse to serve Iranian domains due to:

  • US sanctions prohibiting business with Iran
  • Fear of legal liability
  • Corporate policy against "sanctioned nations"

ICANN and US Government Pressure

The US government has pressured ICANN to take action against Iranian domains:

  • Threats of new legislation giving US more control over ICANN
  • "National security" justifications
  • Accusations of Iranian cyber operations

Pakistani DNS Blocking

Pakistan specifically blocks Iranian websites because:

Government Policy: Pakistan maintains blocklists that include Iranian news sites, government websites, and commercial platforms.

US Pressure: Pakistan's close security relationship with the US includes cooperation on internet censorship targeting US adversaries.

Religious/Political Concerns: Some Iranian content conflicts with Pakistani government positions on sectarian issues.

Technical Convenience: DNS blocking is an easy way to prevent access without sophisticated filtering.

Examples of Blocked Iranian Sites

Iranian websites often blocked or difficult to access from Pakistan include:

  • Iranian government websites (.gov.ir)
  • Iranian news agencies (Fars News, Tasnim, Press TV)
  • Iranian commercial websites
  • Iranian academic institutions (.ac.ir)
  • Iranian sports and cultural websites

The Hidden Censorship Infrastructure

What makes DNS blocking particularly insidious is its invisibility:

Users Don't Know They're Censored

When DNS blocking prevents access to a website:

  • No message says "This site is blocked by your government"
  • The browser simply shows "Site can't be reached" or "DNS error"
  • Users assume the site is down or doesn't exist
  • They don't realize they're being prevented from accessing information

It Affects the Clueless Majority

Most internet users:

  • Use default DNS settings from their ISP
  • Don't know what DNS is
  • Can't distinguish between a blocked site and a broken one
  • Have no idea censorship is happening

It's Centralized and Scalable

A single DNS blocklist can affect millions of users:

  • One decision blocks access for an entire country
  • Updates propagate quickly
  • Difficult to challenge or appeal
  • No transparency about what's blocked or why

Who Benefits from DNS Censorship?

DNS blocking serves multiple interests:

Western Governments

  • Prevent citizens from accessing "adversary" information
  • Control narratives about geopolitics
  • Maintain information dominance
  • Hide alternative perspectives

Corporate Interests

  • Block piracy sites (protecting Western media companies)
  • Prevent access to competitor platforms
  • Support Western technology monopolies
  • Justify cybersecurity budgets

Authoritarian Regimes

  • Many countries cite Western DNS blocking as precedent
  • "If America blocks websites, why can't we?"
  • DNS blocking becomes normalized globally
  • Internet freedom rhetoric exposed as hypocrisy

The Impact on Information Access

DNS blocking has real consequences for how people understand the world:

One-Sided Information

When you can only access:

  • Western news sources
  • Western social media
  • Western-approved "international" sources

You develop a Western-biased understanding of global events. Iranian perspectives are literally invisible.

Echo Chambers Reinforced

People only see information that confirms existing narratives:

  • Western media claims about Iran go unchallenged
  • Iranian perspectives never reach Western audiences
  • Stereotypes and misconceptions persist
  • Propaganda becomes "common knowledge"

Democratic Deficit

Citizens cannot make informed decisions when:

  • They can't access alternative viewpoints
  • Information is pre-filtered by governments
  • Censorship is invisible and unaccountable
  • No transparency about what's hidden

The Technical Reality: DNS is a Single Point of Control

The fundamental problem is that DNS was designed for a trusted, cooperative internet:

Original Design Assumptions

DNS was created in the 1980s when:

  • The internet was primarily academic and military
  • Users were trusted participants
  • Security wasn't a primary concern
  • No one imagined global censorship

Modern Reality

Today:

  • DNS is a critical infrastructure
  • Governments actively manipulate it
  • Corporations use it for competitive advantage
  • Users have no reason to trust the system

The Vulnerability

DNS creates a single point of control:

  • Whoever controls DNS controls internet access
  • Users can't bypass DNS without technical knowledge
  • Most people use default DNS (controlled by their ISP)
  • Centralized control contradicts internet's decentralized ideals

Conclusion: Digital Colonialism Through DNS

DNS blocking represents a form of digital colonialism:

  • Western entities control critical infrastructure
  • They decide what information the rest of the world can access
  • Censorship is invisible and unaccountable
  • "Internet freedom" applies only to approved content

When Pakistanis can't access Iranian websites, it's not a technical limitation. It's deliberate censorship enforced through DNS infrastructure controlled by Western governments and corporations.

Understanding DNS blocking is the first step to resisting it. The following articles will explain how to bypass DNS censorship and access the information you need.

Written by Huzi - Exposing the hidden systems that control what you can see online.