Re: DNS and nxdomain hijacking

2013-11-08 Thread Sam Hayes Merritt, III
Are any of you doing it? At one time we did. The money just wasn't worth the hassle. I kept a close eye on our reports and the dollar amounts just kept falling. And IIRC, Google would not team with you to do it, you had to redirect to Yahoo or Bing. sam

Re: DNS and nxdomain hijacking

2013-11-06 Thread Livingood, Jason
You can find a fairly good overview at http://tools.ietf.org/html/draft-livingood-dns-redirect-03 Comcast does not do this, see http://corporate.comcast.com/comcast-voices/comcast-domain-helper-shuts-down Jason Livingood (Comcast) On 11/5/13, 3:38 PM, Warren Bailey

Re: DNS and nxdomain hijacking

2013-11-06 Thread Livingood, Jason
On 11/5/13, 7:57 PM, Phil Bedard bedard.p...@gmail.com wrote: I think every major residential ISP in the US has been doing this for 5+ years now. I worked at one provider who made a pretty decent chunk of change off the monthly ad revenue and that was 6 years ago. People typo a lot of URLs.

Re: DNS and nxdomain hijacking

2013-11-06 Thread Livingood, Jason
On 11/5/13, 11:01 PM, Mark Andrews ma...@isc.org wrote: In message 20131106033003.gb6...@dyn.com, Andrew Sullivan writes: On Tue, Nov 05, 2013 at 07:57:59PM -0500, Phil Bedard wrote: I think every major residential ISP in the US has been doing this for 5+ years now. Comcast doesn't,

DNS and nxdomain hijacking

2013-11-05 Thread Warren Bailey
All, I've noticed a lot more nxdomain redirects on providers (cox, uverse, tmo, etc.) networks lately. How is this being done?? Is it a magic box or some kind of subscription service? Are any of you doing it? //warren

Re: DNS and nxdomain hijacking

2013-11-05 Thread Jimmy Hess
On Tue, Nov 5, 2013 at 2:38 PM, Warren Bailey wbai...@satelliteintelligencegroup.com wrote: I've noticed a lot more nxdomain redirects on providers (cox, uverse, tmo, I believe these ISPs have been servicing a mucked up recursive DNS like this for quite a while. Yes, this traffic hijacking

Re: DNS and nxdomain hijacking

2013-11-05 Thread Phil Bedard
On 11/5/13, 7:25 PM, Jimmy Hess mysi...@gmail.com wrote: On Tue, Nov 5, 2013 at 2:38 PM, Warren Bailey wbai...@satelliteintelligencegroup.com wrote: I've noticed a lot more nxdomain redirects on providers (cox, uverse, tmo, I believe these ISPs have been servicing a mucked up recursive

Re: DNS and nxdomain hijacking

2013-11-05 Thread Eric Tykwinski
Just as a side note, I don't think MS supports NXDOMAIN redirections yet, which is rather surprising. Given I highly doubt anyone is using this external resolvers, which redirection is usually for. Sincerely, Eric Tykwinski TrueNet, Inc. P: 610-429-8300 F: 610-429-3222 On Nov 5, 2013, at 7:57

Re: DNS and nxdomain hijacking

2013-11-05 Thread Andrew Sullivan
On Tue, Nov 05, 2013 at 07:57:59PM -0500, Phil Bedard wrote: I think every major residential ISP in the US has been doing this for 5+ years now. Comcast doesn't, because it breaks DNSSEC. A -- Andrew Sullivan Dyn, Inc. asulli...@dyn.com v: +1 603 663 0448

Re: DNS and nxdomain hijacking

2013-11-05 Thread Ray Soucy
http://en.wikipedia.org/wiki/Response_policy_zone RPZ functionality has been widely adopted in the past few years. Also known as DNS Firewall. On Tue, Nov 5, 2013 at 10:30 PM, Andrew Sullivan asulli...@dyn.com wrote: On Tue, Nov 05, 2013 at 07:57:59PM -0500, Phil Bedard wrote: I think

Re: DNS and nxdomain hijacking

2013-11-05 Thread Mark Andrews
In message 20131106033003.gb6...@dyn.com, Andrew Sullivan writes: On Tue, Nov 05, 2013 at 07:57:59PM -0500, Phil Bedard wrote: I think every major residential ISP in the US has been doing this for 5+ years now. Comcast doesn't, because it breaks DNSSEC. Only if you are validating.