I believe typical professional service consultancies aim for billing rates that are 2.8 to 3.3 times the employees salary to run profit margins of roughly 15%. And I would bet any things that contractors are WAY more efficient than government employees, based on my experience.
Hopefully this means Greenpeace will not longer use the Internet. Or their computers for that matter.
Comcast user in California using OpenDNS with following ICSI Netalyzer results:
Result Summary
c-24-7-17-xxx.hsd1.ca.comcast.net / 24.7.17.xxx
Recorded at 15:13 EDT (19:13 UTC) on Tue, June 09 2009. Permalink. Transcript. Wildcard DNS content.
Noteworthy Events
Major Abnormalities
* We received unexpected and possibly dangerous results when looking up important names
Minor Aberrations
* Your DNS resolver returns results even when no such server exists
Address-based Tests
NAT detection: NAT Detected
Your global IP address is 24.7.17.xxx while your local one is 192.168.1.xxx. You are behind a NAT. Your local address is in unroutable address space.
Your NAT renumbers TCP source ports sequentially. The following graph shows connection attempts on the X-axis and their corresponding source ports on the Y-axis.
port sequence plot
DNS-based host information: OK
You are not a Tor exit node for HTTP traffic.
You are listed on the Spamhaus Policy Based Blacklist, meaning that your provider has designated your address block as one that should not be sending any email.
The SORBS DUHL believes you are using a dynamically assigned IP address.
Reachability Tests
General connectivity: OK
Basic UDP access is available.
Direct UDP access to remote DNS servers (port 53) is allowed.
The applet was also able to directly request a large DNS response.
Direct UDP access to remote MSSQL servers (port 1434) is allowed.
Direct TCP access to remote FTP servers (port 21) is allowed.
Direct TCP access to remote SSH servers (port 22) is allowed.
Direct TCP access to remote SMTP servers (port 25) is allowed.
Direct TCP access to remote DNS servers (port 53) is allowed.
Direct TCP access to remote HTTP servers (port 80) is allowed.
Direct TCP access to remote POP servers (port 110) is allowed.
Direct TCP access to remote RPC servers (port 135) is blocked.
This is probably for security reasons, as this protocol is generally not designed for use outside the local network.
Direct TCP access to remote NetBIOS servers (port 139) is blocked.
This is probably for security reasons, as this protocol is generally not designed for use outside the local network.
Direct TCP access to remote IMAP servers (port 143) is allowed.
Direct TCP access to remote SNMP servers (port 161) is allowed.
Direct TCP access to remote HTTPS servers (port 443) is allowed.
Direct TCP access to remote SMB servers (port 445) is blocked.
This is probably for security reasons, as this protocol is generally not designed for use outside the local network.
Direct TCP access to remote SMTP/SSL servers (port 465) is allowed.
Direct TCP access to remote secure IMAP servers (port 585) is allowed.
Direct TCP access to remote authenticated SMTP servers (port 587) is allowed.
Direct TCP access to remote IMAP/SSL servers (port 993) is allowed.
Direct TCP access to remote POP/SSL servers (port 995) is allowed.
Direct TCP access to remote SIP servers (port 5060) is allowed.
Direct TCP access to remote BitTorrent servers (port 6881) is allowed.
Network Access Link Properties
Network latency measurements: Latency: 81ms Loss: 0.0%
The round-trip time (RTT) between your computer and our server is 81 msec, which is good.
We recorded no packet loss between your system and our server.
TCP connection setup latency: 98ms
The time it takes your computer to set up a TCP connection with our server is 98 msec, which is good.
Network bandwidth measurements: Upload 1.0 Mbit/sec, Download 6.5 Mbit/sec
Your Uplink: We measured your uplink's sending bandwidth at 1.0 Mbit/sec. This level of bandwidth works well for many users.
Your Downlink: We measured your downlink's receiving bandwidth at 6.5 Mbit/sec. This level of bandwidth works well for many users.
Network buffer measurements: Uplink 370 ms, Downlink 51 ms
We estimate your uplink as having 370 msec of buffering. This level may serve well for maximizing speed while minimizing the impact of large transfers on other traffic.
We estimate your downlink as having 51 msec of buffering. This level may serve well for maximizing speed while minimizing the impact of large transfers on other traffic.
HTTP Tests
Address-based HTTP proxy detection: OK
There is no explicit sign of HTTP proxy use based on IP address.
Header-based HTTP proxy detection: OK
No HTTP header or content changes hint at the presence of a proxy.
HTTP proxy detection via malformed requests: OK
Deliberately malformed HTTP requests arrive at our server unchanged. We are not able to detect a proxy along the path to our server using this method.
Filetype-based filtering: OK
We did not detect file-content filtering.
JavaScript-based tests: OK
The applet was not run from within a frame.
Your web browser reports the following cookies for our web page:
* netAlizEd (set by our server)
Your web browser was unable to fetch an image using IPv6.
HTTP caching behavior: OK
There is no suggestion that a transparent HTTP cache exists in your network.
DNS Tests
Restricted domain DNS lookup: OK
We are able to successfully lookup a name which resolves to the same IP address as our webserver. This means we are able to conduct many of the tests on your DNS server.
Unrestricted domain DNS lookup: OK
We are able to successfully lookup arbitrary names from within the Java applet. This means we are able to conduct all test on your DNS server.
DNS resolver address: OK
The IP address of your ISP's DNS Resolver is 208.67.219.12, which resolves to bld2.pao.opendns.com.
DNS resolver properties: Lookup latency: 26ms
Your ISP's DNS resolver requires 26 msec to conduct an external lookup, and 20 msec to lookup an item in the cache.
Your resolver is using QTYPE=A for default queries.
Your resolver is not automatically performing IPv6 queries.
Your DNS resolver does not use EDNS.
Your resolver does not use 0x20 randomization, but will pass names in a case-sensitive manner.
Your ISP's DNS resolver respects a TTL of 0 seconds.
Your ISP's DNS resolver respects a TTL of 1 seconds.
DNS glue policy: OK
Your ISP's DNS resolver accepts generic glue records located in subdomains of the queried domain.
Your ISP's DNS resolver accepts additional (glue) records for nameservers located in subdomains of the queried domain.
Your ISP's DNS resolver follows CNAMEs when it is in the same domain.
DNS resolver port randomization: OK
Your ISP's DNS resolver properly randomizes its local port number.
The following graph shows DNS requests on the x-axis and the detected source ports on the y-axis.
port sequence plot
DNS lookups of popular domains: Warning
You appear to be using OpenDNS as your DNS resolver. One known issue with OpenDNS is that, by default, OpenDNS acts as a Man-in-the-Middle for some servers, returning the address of one of their servers that acts as an intermediary, rather than the final result. This can both slow down searches and may break other functionality. As a result, 1 lookup appears to be anomalous.
Name IP Address Reverse Name/SOA
www.google.com 208.67.219.231 google.navigation.opendns.com
74 of 74 popular names were resolved successfully. Show all names.
In the following table reverse lookups that failed but for which a Start Of Authority (SOA) entry indicated correct name associations are shown using an "X", followed by the SOA entry. Absence of both IP address and reverse name indicates failed forward lookups.
Name IP Address Reverse Name/SOA
www.abbey.co.uk 165.160.15.20 X (pdns1.cscdns.net)
ad.doubleclick.net 209.62.176.52 eqnjmegaadvip1.doubleclick.net
www.alliance-leicester.co.uk 194.130.105.121 X (alice.ioko365.com)
www.amazon.com 72.21.207.65 X (ddiamond.amazon.com)
www.ameritrade.com 204.58.27.105 beta-new.tdameritrade.com
www.bankofamerica.com 171.161.161.173 www.bankofamerica.com
www.bankofscotland.co.uk 195.171.171.21 X (ns0.bt.net)
www.bankofthewest.com 207.114.194.101 X (dns1a.bankofthewest.com)
www.barclays.co.uk 213.219.1.141 X (dns1.lon7.telecityredbus.net)
www.capitalone.com 208.80.48.112 X (chia.arin.NET)
www.careerbuilder.com 208.82.6.22 X (smokey.careerbuilder.com)
www.chase.com 159.53.60.105 X (ns1.jpmorganchase.com)
chaseonline.chase.com 159.53.60.54 resources-cdc1.chase.com
www.citi.com 192.193.232.227 X (ns.citicorp.com)
www.citibank.com 192.193.232.227 X (ns.citicorp.com)
www.citimortgage.com 192.193.103.118 X (ns.citicorp.com)
www.cnn.com 157.166.226.26 www.cnn.com
www.desjardins.com 142.195.128.44 desjardins.com
www.deutsche-bank.de 217.73.49.24 www.deutsche-bank.de
www.e-gold.com 209.200.169.10 unknown.prolexic.com
www.ebay.com 66.135.217.243 hp-core.ebay.com
www.etrade.com 12.153.224.22 etrade.com
www.f-secure.com 204.2.160.11 a204-2-160-11.d[...]echnologies.com
www.facebook.com 69.63.180.15 www.11.07.facebook.com
www.fdic.gov 167.176.17.84 www.fdic.gov
www.friendfinder.com 208.88.180.81 X (ii53-30.friendfinderinc.com)
www.geocities.com 98.137.46.72 intl1.geo.vip.sp2.yahoo.com
www.halifax.co.uk 212.140.245.97 halifax.co.uk
www.hsbc.co.uk 193.108.74.126 X (ns3.hsbc.com)
www.jpmorganchase.com 159.53.60.166 X (ns1.jpmorganchase.com)
www.lloydstsb.com 193.34.230.181 X (ns2.lloydstsb.co.uk)
mail.google.com 66.102.7.83 mc-in-f83.google.com
mail.live.com 64.4.20.169 dp2.mail.live.com
mail.yahoo.com 66.163.169.186 l1.login.vip.sp1.yahoo.com
www.mbna.com 209.135.59.10 X (ns1.usi.net)
www.mbna.net 209.135.59.10 X (ns1.usi.net)
www.meebo.com 208.81.191.110 X (ns1.meebo.com)
messenger.yahoo.com 68.142.194.14 myc1.msg.vip.mud.yahoo.com
www.microsoft.com 207.46.19.254 wwwbaytest2.microsoft.com
www.nationwide.co.uk 155.131.127.10 www.nationwide.co.uk
www.networksolutions.com 205.178.187.13 www.networksolutions.com
www.newegg.com 216.52.208.185 X (pdns1.ultradns.net)
www.nordea.fi 195.215.15.166 www.nordea.fi
online.citibank.com 192.193.182.87 citibankonline.com
online.wellsfargo.com 151.151.88.132 percussion-on.wellsfargo.com
www.orange.fr 193.252.122.103 www.orange.fr.b2.fti.net
pagead.googlesyndication.com 74.125.19.164 cf-in-f164.google.com
partner.googleadservices.com 74.125.19.165 cf-in-f165.google.com
www.paypal.com 64.4.241.33 www.paypal.com
www.postbank.de 62.153.105.37 X (ns1.postbank.de)
www.rbs.co.uk 155.136.80.222 X (ns0-08.dns.pipex.net)
www.schwab.com 162.93.202.80 wwwschwab-vip.schwab.com
www.sears.com 96.16.185.99 a96-16-185-99.d[...]echnologies.com
www.secureworks.com 65.114.32.183 www.secureworks.net
smartzone.comcast.net 76.96.26.12 webmail3.emeryv[...]ail.comcast.net
www.smithbarney.com 192.193.224.11 ssb.com
www.sparkasse.de 195.140.127.130 www.sparkasse.de
www.sterlingsavingsbank.com 12.19.55.215 sterlingsavingsbank.com
www.tdameritrade.com 204.58.27.113 beta-new.tdameritrade.com
www.ticketmaster.com 96.6.228.199 a96-6-228-199.d[...]echnologies.com
us.etrade.com 12.153.224.21 us.etrade.com
www.usbank.com 170.135.216.181 usbankhomeloan.com
www.verisign.com 65.205.249.60 www.verisign.net
www.visa.com 204.2.160.34 a204-2-160-34.d[...]echnologies.com
www.wachovia.com 169.200.183.139 X (sls-ns1.wachovia.com)
www.wamu.com 167.88.184.51 www.wamu.com
www.wellsfargo.com 151.151.13.133 psaltery-dd.wellsfargo.com
westernunion.com 206.201.228.250 www.wuagentlink.com
windowsupdate.microsoft.com 207.46.225.221 X (msnhst.microsoft.com)
wireless.att.com 135.209.208.191 wireless.att.com
www.yahoo.com 209.131.36.158 f1.www.vip.sp1.yahoo.com
2 popular names have a mild anomaly. The ownership suggested by the reverse name lookup does not match our understanding of the original name. The most likely cause is the site's use of a Content Delivery Network. Show all names.
Name IP Address Reverse Name/SOA
www.irs.gov 204.2.160.251 X (auth1.ns.gin.ntt.net)
www.trendmicro.com 204.2.160.33 ge-1-7.r00.lsan[...]us.bb.verio.net
DNS results wildcarding: OpenDNS
You appear to be using OpenDNS. OpenDNS, by default, deliberately returns addresses even for domain names which should not resolve. Instead of an error, the DNS server returns an address of 208.67.219.132, which resolves to hit-nxdomain.opendns.com. You can inspect the resulting HTML content here.
This is central to OpenDNS's business model. In order to profit from an otherwise free service, OpenDNS presents the users with advertisements whenever they make a typo in their web browser. You can disable this behavior through the OpenDNS Dashboard.
The big problem with this behavior is that it can potentially break any network application which relies on DNS properly returning an error when a name does not exist.
The following lists your DNS server's behavior in more detail.
Your ISP's DNS server returns IP addresses even for domain names which should not resolve. Instead of an error, the DNS server returns an address of 208.67.219.132, which resolves to hit-nxdomain.opendns.com. You can inspect the resulting HTML content here.
There are several possible explanations for this behavior. The most likely cause is that the ISP is attempting to to profit from customer's typos by presenting advertisements in response to bad requests, but it could also be due to an error or misconfiguration in the DNS server.
The big problem with this behavior is that it can potentially break any network application which relies on DNS properly returning an error when a name does not exist.
The following lists your DNS server's behavior in more detail.
* www.{random}.com is mapped to 208.67.219.132.
* www.{random}.org is mapped to 208.67.219.132.
* fubar.{random}.com is mapped to 208.67.219.132.
* www.yahoo.cmo [sic] is mapped to 208.67.219.132.
* nxdomain.{random}.netalyzr.icsi.berkeley.edu is mapped to 208.67.219.132.
Host Properties
System clock accuracy: OK
Your computer's clock agrees with our server's clock.
Browser properties
The following parameters are sent by your web browser to all web sites you visit:
* User Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10 (.NET CLR 3.5.30729)
* Accept: text/html,application/xhtml+xml,application/xml; q=0.9,*/*; q=0.8
* Accept Language: en-us,en;q=0.5
* Accept Encoding: gzip,deflate
* Accept Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
I've heard of a company in the U.S. that is selling CD-ROMs containing OpenOffice for ~$10.
Doubt is a pain too lonely to know that faith is his twin brother. - Kahlil Gibran