[northeast] DNS hijacking in effect (new)

[northeast] DNS hijacking in effect (new)
Links: home · search · speed test · login · more ·

Links: Reply New Topic
Forums » Verizon » Verizon Fiber Optics » [northeast] DNS hijacking in effect (new)

gweeper @ 3rd Nov 09:03AM:
[northeast] DNS hijacking in effect (new)

New as of this weekend in Central MA (Southborough): that garbage DNS hijacking run by the idiots at infospace. I've seen the underbelly of this junk at my last job and it is the latest attempt to "monetize" every transaction, no matter how basic or fundamental to the infrastructure. Paying hundreds of dollars a month isn't enough?

This is ridiculous - I might go back to loser data speeds on charter if they keep this crap up. Definitely calling today.
reply

guppy_fish @ 3rd Nov 09:08AM:
Re: [northeast] DNS hijacking in effect (new)

Huh?

You can use any DNS server you want ... what does this have to do with FIOS?
reply

noping @ 3rd Nov 10:45AM:
Re: [northeast] DNS hijacking in effect (new)

Just noticed this. Guess this is "service" is being rolled out in full force now.

If you want to keep using the Verizon DNS servers (they're quite fast, slightly faster than OpenDNS and Level3's 4.2.2.1), change it from xxx.xxx.xxx.12 to xxx.xxx.xxx.14 in your router.
--
"Way I remember it, albatross was a ship's good luck, 'til some idiot killed it."
reply

GeekNJ @ 3rd Nov 11:19AM:
Re: [northeast] DNS hijacking in effect (new)

»Verizon FiOS DNS Redirection?

Been talked about for a few weeks here in various threads. Point it to OpenDNS if you want. They do the same thing though if there's no real DNS entry for what you entered.

The BS only pops up if you enter something that doesn't exist, right??
--
Tweaked your connection? | Mail Parse | Speed Converter
reply

anon @ 3rd Nov 11:20AM:
Re: [northeast] DNS hijacking in effect (new)

When Verizon's FIOS interface, in my case the ActionTec is default configured, the dns settings are automatically determined, and as gweeper notes, replaces 404 with an advertisement page.

At the bottom of the advertisement page are directions that purport to allow a return to 404 functionality (essentially by hardcoding the dns in the routers to the values that were automatically configured, except the last octet changed to 14). This chnage provides a different advertisement page, but not the simple 404 report.

I evaluated the opendns offerenings as well, that service also appears to server up short ad pages instead of simple 404. Further, opendns documents suggest that they achive their funding to offer the free dns service by serving up the ads.

Bottom line, Verizon's new default, Verizon's work around, and opendns all provide ads now.

Bruce
reply

noping @ 3rd Nov 09:47PM:
Re: [northeast] DNS hijacking in effect (new)

xxx.xxx.xxx.14 (the opt-out address) works just fine here. No ads, default behaviour.

Plenty of DNS alternatives if you don't like Verizon/OpenDNS, use 4.2.2.1-4.2.2.6.

That, or roll your own: »ntcanuck.com/downloads.htm
reply

SkellBasher @ 3rd Nov 10:38PM:
Re: [northeast] DNS hijacking in effect (new)

This is becoming a very common practice for many ISPs, and frankly a good chunk of OpenDNS's revenue stream as well. Companies are trying to squeeze every penny they can from every place they can, and all things being considered, this isn't all that big a deal.

I don't like it myself, so I take care of my own DNS. Even if that's not practical for you, there are plenty of sources that you could use to avoid this.

Welcome to the web circa 2007. Everything is a potential advertising source.
reply

KA3SGM @ 3rd Nov 10:56PM:
Re: [northeast] DNS hijacking in effect (new)

said by noping :

xxx.xxx.xxx.14 (the opt-out address) works just fine here. No ads, default behaviour.

Plenty of DNS alternatives if you don't like Verizon/OpenDNS, use 4.2.2.1-4.2.2.6.

That, or roll your own: »ntcanuck.com/downloads.htm

NOPING, YES, I COMPLETELY AGREE, use the Level3 DNS servers, they are faster, more reliable, and won't redirect their SPAM pages to your IP address.

I typically use the 4.2.2.2, and 4.2.2.3 DNS servers, and have never suffered a long or re-directed response.

OPEN DNS still offers you up to a SPAMED results page, if you don't have the precise address you were trying to reach.
--
"Lithium is no longer available on credit"
reply

KCrimson @ 4th Nov 12:21AM:
Re: [northeast] DNS hijacking in effect (new)

I think the directions that FiOS is giving to change the default DNS server are flawed. I didn't get any change until I edited the Broadband (in my case /MOCA, in others /Ethernet depending on how your router was hooked up) setting, NOT the Home/Office DNS setting, as the directions say. I'm wondering if I should leave BOTH sets of DNS settings to the 4.2.2.2/4.2.2.3 servers, or whether I should leave the Home/Office side back to the automatic position. Anyone care to give insight?
reply

gweeper @ 4th Nov 07:46AM:
Re: [northeast] DNS hijacking in effect (new)

You have to change it in multiple spots and boy is that actiontec interface lame. Userid that works for the pointy-clicky goop doesn't seem to be effective way to gain access to the CLI.

Of course once wrestling my way through the interface I changed to a server I run and one of the L3 anycasts. Use whatever you like but MEASURE the path first (traceroute at least). Folks saying "everyone should use FOO" are ignoring that topology matters. The reason service providers deploy DNS resolvers near customers is to be sure lookups -part of any transaction- do not slow down applications. Using any distant DNS servers is introducing other variables, possible outages, etc.

The 'opt-out' garbage in this case [paxfire, it seems; www.paxfire.com to direct additional comments] is related only to web browsers. Glad they have unmolested servers available. DNS is basic plumbing and not a revenue stream.
Your best bet, if you don't use bad software, is to deploy a local resolver yourself.

Coffee, local resolver, get on with my day.

reply

rtcy @ 7th Nov 09:01PM:
Re: [northeast] DNS hijacking in effect (new)

said by KA3SGM :

I agree and will ad this, ntcanuck's treedns is a caching server so once it get's a name it stores it and next time you don't need to lookit up it get's it from it's cache, i've used since Leo Laporte on techtv turned us on to it.

hey ka3sgm it's a shame the lithium is no longer on credit ;) I can't live without it :)
reply