[nSLUG] EastLink hijacking DNS

Eri Ramos Bastos bastos.eri at gmail.com
Sat Oct 31 11:59:13 ADT 2009

Just type http://www.thisurldoesnotexistsforsure.com/ in your address bar.

You should get an "Address not found" error at Firefox. If you get a
search page (usually branded with your telco's logo) then they are
hijacking your DNS.

Also you can use nslookup or the host command to try to resolve a
non-existent hostname. It should return something like this:

$ host imsurethisonedoesnotexistsaswell.org
Host imsurethisonedoesnotexistsaswell.org not found: 3(NXDOMAIN)

If you get an IP address instead, they are hijacking.

Eri Ramos Bastos

> But how would I check for DNS hijacking for sure?

More information about the nSLUG mailing list