[nlug] Re: DNS Hijacking(?)

2008-10-01 Thread Richard Thomas
Bill Butler finally wrote back. He's been looking into it apparently (that's all I needed to hear). I'll stick with him for now and use the alternative DNS. I'm not sure how long that will be available for. Rich ware wrote: --snip-- [14:27 9/29/08]FOUO: ALL STATIONS EFFECTIVE

[nlug] Re: DNS Hijacking(?)

2008-09-30 Thread Richard Thomas
It's worse than I thought. It also appears to be hijacking subdomains of valid domains. I'm switching to using an off-net DNS server for now. This is very disturbing. Rich $ dig bleepblop.google.com ; DiG 9.4.1 bleepblop.google.com ;; global options: printcmd ;; Got answer: ;; -HEADER-

[nlug] Re: DNS Hijacking(?)

2008-09-30 Thread Richard Thomas
Jeff Dimond wrote: I bet it's your ISP. Here is a link that may be of interest. Looks like the same thing happened to Windstream customers earlier this year. http://www.dslreports.com/forum/r19764165-Windstream-DNS-server-entrynotfoundcom You could always run your own DNS with BIND.

[nlug] Re: DNS Hijacking(?)

2008-09-30 Thread Richard Thomas
Andrew Farnsworth wrote: Tunnel out using ssh and do a local redirect on port 53. Then point your DNS clients at the machine running ssh... shazam! you are past the filter. Andy Too much hassle and a vulnerable point-of-failure. I'm not sure about tunnelling UDP anyway (I know DNS can do

[nlug] Re: DNS Hijacking(?)

2008-09-30 Thread Richard Thomas
Yu haz tu avoyed thayr philterz yu noe. Alex Smith (K4RNT) wrote: I don't know what you are saying ! If you're going to troll, at least be coherent about it ! ;) On Tue, Sep 30, 2008 at 3:12 PM, ware [EMAIL PROTECTED] wrote: teh guverment iz wathcin ur queerys datumz

[nlug] Re: DNS Hijacking(?)

2008-09-30 Thread ware
--snip-- [14:27 9/29/08]FOUO: ALL STATIONS EFFECTIVE IMMEDIATELY, WMP - RFI out on K4RNT (SMITH, ALEX) --/snip-- oh hai thar! b seen u on teh statez msg switch wen u wuz lookd 4. jus thogut u miht wan2no kthnx! bet u culd pay em wut u owe nden j00 git sum frenz dahr, k? thnx 4ur hep wif

[nlug] Re: DNS Hijacking(?)

2008-09-25 Thread Chris McQuistion
Do you know about the big DNS vulnerability that was recently unveiled? It required that ISP's update their DNS servers or be vulnerable to some very serious hijacking. I use OpenDNS's servers. They are kept up to date and offer some nice little features like DNS name correction (say you

[nlug] Re: DNS Hijacking(?)

2008-09-25 Thread John R. Dennison
On Thu, Sep 25, 2008 at 03:08:12PM -0500, Richard Thomas wrote: Is anyone else having issues out there with DNS requests which should fail resolving to a search engine? This is with Butler net residential. I've written to Bill but would be interested to hear if it's happening with