[nSLUG] EastLink hijacking DNS

Dop Ganger nslug at fop.ns.ca
Mon Nov 2 09:06:18 AST 2009


On Mon, 2 Nov 2009, Dan Peterson wrote:

> On Sat, Oct 31, 2009 at 2:51 PM, Dop Ganger <nslug at fop.ns.ca> wrote:
>> Why don't you just change your default search domain to something
>> other than eastlink.ca?
>
> I'm fairly certain that won't help. Their caches (when you're opted
> in) return an A record for anything that would otherwise return
> NXDOMAIN, not just anything.eastlink.ca.

Really? Is Eastlink's DNS returning something for, say, "host 
badnname.dns.com. 24.222.0.94" as well as "host 
baddnsname.dns.com.eastlink.ca 24.222.0.94"?

Are you getting assigned different DNS servers by DHCP, perhaps? I'm 
assigned 24.222.0.94 and 24.222.0.95 and don't see this myself from either 
of those two servers.

Cheers... Dop.



More information about the nSLUG mailing list