Broadband Tech > Security > Security > Intrusive dns. OpenDns

Intrusive dns. OpenDns

there was a point where i had to fully disconnect my router for 1 minute and plug it back in and a page saying welcome to opendns appeared.

reply to cme01
According to them (Mint) OpenDNS in not used unless no other DNS could be found or reached. Ref: Linux Mint Forums • View topic - Disable OpenDNS

If you want to be rid of OpenDNS as a "fallback" then do this:

sudo truncate --size=0 /etc/resolvconf/resolv.conf.d/tail

--
Chris
Living in Paradise!!

reply to cme01
1) You must not have set your network up correctly so they tried to help you.
2) If you set you network up correctly you would not be using that DNS.
3) Why on earth would they need the MAC of your router ? That would do them NO good.

4) How is this intrusive ?

I must be missing something

reply to cme01
Seems to be an issue i guess with my router, still for some unknown reason i was browsing fine, if i typed a domain name incorrectly my isp's "domain cannot be found page" would display.

after 1 hour of web browsing my connection timed out while reading. i did not request any webpage - then i was greeted by open-dns yet again saying page unavailable...

if there is an issue with my router auto obtaining dns from my isp...then i am trying to ask myself why it obtains dns normally 90 percent of the time and if i cannot find a dns i get a "page not found" by my isp...yet for some odd reason opendns intrudes automatically out of nowhere...the other 10 percent of the time

that's why i say it's intrusive.

apparently people signed up with them for services i did not...

»forums.opendns.com/comments.php?···nID=6107

So my guess is your ISP dns(s) do not respond sometimes and your mint use opendns as a fallback and you do not want that. Check your /etc/resolv.conf
fix it to have only one nameserver line which should point to your router or do what mint suggests I believe chrisreusn provided that.

I would do the below save results Noting the Server: address
From shell prompt

nslookup
google.com
exit

Then when issue occurs do same thing. It would be interesting to see what nameserver you start with and end with

Example

nslookup
> google.com
Server: xxx.xxx.xxx.xxx
Address: xxx.xxx.xxx.x#53

Non-authoritative answer:
Name: google.com
Address: 74.125.225.34
Name: google.com
Address: 74.125.225.41
Name: google.com
Address: 74.125.225.32
Name: google.com
Address: 74.125.225.40
Name: google.com
Address: 74.125.225.33
Name: google.com
Address: 74.125.225.38
Name: google.com
Address: 74.125.225.36
Name: google.com
Address: 74.125.225.37
Name: google.com
Address: 74.125.225.39
Name: google.com
Address: 74.125.225.46
Name: google.com
Address: 74.125.225.35

reply to cme01
I checked my son's Mint. If you just look at /etc/resolv.conf the last section indicates FALLBACK DNSs both are opendns servers. If you do not want them delete both lines. Bare in mind you hit them because your ISP DNSs are not responding or your router is not forwarding dns requests. With those gone you will be unable to resolve addresses. You do not trust opendns use google 8.8.8.8 or somebody else. Mint was trying to do you a favor.

I don't understand what he thinks will happen if he removes OpenDNS and then for some reason, Optimum Online DNS doesn't respond (which I find very hard to believe that it happens very often, using Optimum myself). He won't be going anywhere. I think he's got something hinky in his router settings.

reply to cme01
can malware or opendns reflash my router? because i experienced a restart of the router which said "welcome to open dns"

did it someway intrude into my router....i will do a hard reset.

Some Windows malware has, in the past, changed a router's DNS settings to malicious DNS servers. However, this attack preyed on routers with no password or default passwords.

OpenDNS did not reflash your router. I suggest you check your router's configuration, along with your DNS settings in Linux.
--
QUAD!!!!

reply to cme01
1) Where do you see this message "welcome to opendns" ?
I assume you restarted your router somehow with a browser to see the message. What are you doing ?( going to internet ? )
2) If you change the password on the router it is unlikely your router was infected.
3) If you login to your router are the DNS settings opendns ?

You need to give a little more information. We know you are using Mint which we also know uses opendns as a fail safe if your primary dns(s) do not work Did you change this ?