DNS and nxdomain hijacking

Phil Bedard bedard.phil at gmail.com
Wed Nov 6 00:57:59 UTC 2013



On 11/5/13, 7:25 PM, "Jimmy Hess" <mysidia at gmail.com> wrote:

>On Tue, Nov 5, 2013 at 2:38 PM, Warren Bailey <
>wbailey at satelliteintelligencegroup.com> wrote:
>
>
>> I've noticed a lot more nxdomain redirects on providers (cox, uverse,
>>tmo,
>
>
>I believe these ISPs have been servicing a mucked up recursive DNS like
>this for quite a while.

I think every major residential ISP in the US has been doing this for 5+
years now.  I worked at one provider who made a pretty decent chunk of
change off the monthly ad revenue and that was 6 years ago.  People typo a
lot of URLs.  

Charter (my current ISP) does let you disable it via the web.

Phil 






More information about the NANOG mailing list