[dns-operations] NXDOMAIN rewriting by lying resolvers (Was: new public DNS service: 9.9.9.9

Andreas Teuchert ant+dnsop at teuchert.org
Tue Nov 21 16:48:06 UTC 2017


On Tue, Nov 21, 2017 at 05:14:17PM +0100, Stephane Bortzmeyer wrote:
> On Mon, Nov 20, 2017 at 01:04:44PM -0500,
>  wbrown at e1b.org <wbrown at e1b.org> wrote 
>  a message of 32 lines which said:
> 
> > a better test is to query for a totally bogus domain, and see what
> > you get back.  Google will return NXDOMAIN, an ISP will usually take
> > you to a search page or the like.
> 
> "Not all ISPs" (yes, this is a reference to recent political campaigns)
> 
> In Europe, NXDOMAIN rewriting to a false address is extremely
> uncommon (and rightly so).

Hi Stephane,

Deutsche Telekom, one of the biggest ISPs in Germany (biggest in Europe
according to some sources), is doing that. They call it "Navigationshilfe".

Kind regards,

Andreas



More information about the dns-operations mailing list