North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: DNS Hijacking by Cox

  • From: Andrew Matthews
  • Date: Mon Jul 23 12:39:40 2007
  • Dkim-signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=pJX4jDqABwAWmlinonQt08/7XCn68aPnQSqsjxiW047u2Wm8cZkF3KWPzKO8b3jmFF1MKgfvrD7WwlLijpPKMJQ7ILqB8jEnVD70eXT3QbAWoYWrfLagHBr/uGyKTIEq6rxYS5NjZT8NSTFd3eJ+510w3CV1aus7D6jzLME5qcs=
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=QnxU8tIaMUUkhWJnKSd6L/PuLRv7vbtt4SASWmwHN7oEf6ybmtxMcUOVs2qt52wCYckH0Yt+wVD+j9uXjP6H5t3uorztPRm7tUiud6ZjT/MJOOy9PGD/+1994QlkYABxPsuCcsQb1Zd0kF9LdX2BsAvVPm0FlxhhKNYEcr+YKQk=

More updates on the whole DNS hijacking, they've taken about 6 EFNet
servers, and they also change the SOA and the NS record. Which would
be really really non RFC compliant. Yes i've tried contacting the
abuse team at Cox but i get the standard canned response. I should
check my computer for viruses and malware.

Anyone have a good contact for cox?

Thanks

Drew