|
I think my ISP is intercepting NXDOMAIN requests. For instance, I type I have set my Primary DNS address to Google Public DNS (8.8.8.8), but am still getting forwarded. How can I test to be sure that I am correct? What can I do?
| |||
|
feedback
|
|
I assume you tested with a Web browser. Not a good idea because there are many functions in the typical browser which can interfere with the detection of a lying DNS resolver. You did not indicate which operating system you use. Assuming Unix, you probably have dig installed. Test: dig A doesnotexistatall.com should bring back a NXDOMAIN, depending on the setup of your default DNS resolver. dig @8.8.8.8 A doesnotexistatall.com should bring also NXDOMAIN and allow you to test if your access provider transparently redirects DNS requests (it should go to Google DNS). | |||
|
feedback
|
|
First things first, to rule out redirecting malware, if you have any other internet capable device, change it to the same DNS provider and see if you get the same results. If you don't, you probably have malware on your pc. If you do get the same results, it is either the DNS provider or your ISP. I have no experience with Google Public DNS as I haven't had time to mess around with it, but if you set your dns server to Opendns just for a moment and see if you get redirected to their service or that address you posted originally. If with OpenDNS you still get redirected to your one it is likely that your ISP is redirecting people. If you go to the OpenDNS failure page, it is probably the current DNS provider that was forwarding you to there. Edit - And to answer your question... The above is how to test if it is your ISP, Malware or your DNS provider. As for what to do, if it is your DNS provider - Switch, if it is Malware - Fix/remove it, if it is your ISP - switch! | |||||
feedback
|
|
When I encountered issues with this, I setup Bind to run locally within my home network. A nice feature of this it allowed me to have an authoritative server for all my internal IP addresses that doesn't require that I update /etc/hosts files on all my systems. Another benefit is having a caching DNS server within my home network. I setup the main TLDs to be "type delegation-only" to avoid the DNS hijacking. Link explaining the ISC Bind feature - https://www.isc.org/node/355 | ||||
|
feedback
|
