Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Selected ISP Support » Earthlink DSL » Oh No They Didn't!
Uniqs:
20754
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
8mb in chicago area? »
page: 1 · 2

whfsdude
Premium
join:2003-04-05
Washington, DC

Oh No They Didn't!

Earthlink started redirecting failed DNS lookups :-(

»earthlinkmustdie.dslreports.com/

»www.earthlinkhelp.net/?d=error_e···orts.com
LightS

join:2005-12-17
Granbury, TX

Re: Oh No They Didn't!

What are you talking about? I'm not having any problems whatsoever

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
Looking up the non-existing earthlinkmustdie.dslreports.com returns the www.earthlinkhelp.net address? What ELNK-DNS did you see it on?

It isn't now using ns*.earthlink.net or ns*.mindspring.com DNS servers.

whfsdude
Premium
join:2003-04-05
Washington, DC

1 edit
These are what I've been using
207.69.188.186, 207.69.188.185

Edit: It appears they've stopped doing it now but be aware they might start doing it again.

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI

Re: Oh No They Didn't!

OK, those are ns1/ns2.mindspring.com which I use as forwarders, so I'll see it if it happens again. Good catch.

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

1 edit
They are doing it now. Bastards!

Karl Bode
News Guy
join:2000-03-02

Re: Oh No They Didn't!

Can I get some additional confirmation from other Earthlink users on this?

whfsdude
Premium
join:2003-04-05
Washington, DC

Re: Oh No They Didn't!

said by Karl Bode See Profile :

Can I get some additional confirmation from other Earthlink users on this?
It should work if you just set your DNS servers to ns1.earthlink.net

Here are the IPs:
will$ host ns1.earthlink
ns1.earthlink has address 209.86.66.91
ns1.earthlink has address 209.86.66.92
ns1.earthlink has address 209.86.66.93
ns1.earthlink has address 209.86.66.94
ns1.earthlink has address 209.86.66.95
ns1.earthlink has address 209.86.66.90
vinnie97

join:2003-12-05
Mesquite, TX

Re: Oh No They Didn't!

With no DNS servers entered, I don't get this redirection.

whfsdude
Premium
join:2003-04-05
Washington, DC

Re: Oh No They Didn't!

said by vinnie97 See Profile :

With no DNS servers entered, I don't get this redirection.
I wonder if ASDL2+ uses Covad's DNS servers.

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

Re: Oh No They Didn't!

I'm on Covad regular DSL and this is what IPCP feeds me:

2006-08-24 12:08:06 E |PPP |IPCP nak option: 3
2006-08-24 12:08:06 E |PPP |IPCP nak option: 129
2006-08-24 12:08:06 E |PPP |IPCP nak option: 131
2006-08-24 12:08:06 E |PPP |IPCP up ip: 68.165.8.10x, gw: 172.31.255.251, dns: 207.69.188.186, 207.69.188.185
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

whfsdude
Premium
join:2003-04-05
Washington, DC

Re: Oh No They Didn't!

Doctor Olds, You're seeing the redirects right?

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·Comcast


3 edits

Re: Oh No They Didn't!

I suggest direct examples of this phenomena - I do NOT see it here, using below. If you don't like nslookup, use dig. :-)


C:\>nslookup earthlinkmustdie.dslreports.com 207.69.188.186
Server: ns2.mindspring.com
Address: 207.69.188.186

*** ns2.mindspring.com can't find earthlinkmustdie.dslreports.com: Non-existent domain

C:\>nslookup earthlinkmustdie.dslreports.com ns1.earthlink.net
Server: ns1.earthlink.net
Address: 207.217.126.41

*** ns1.earthlink.net can't find earthlinkmustdie.dslreports.com: Non-existent domain

whfsdude
Premium
join:2003-04-05
Washington, DC

Re: Oh No They Didn't!

I get the same results as you when I do a ns lookup or a dig but yet the redirects continue to happen.

I'm just using the point of ping to point out that I don't have a proxy or anything on my web browser to cause this to happen.

PING www.fdashkadflskhh.com (209.86.66.94): 56 data bytes
64 bytes from 209.86.66.94: icmp_seq=0 ttl=56 time=671.848 ms
64 bytes from 209.86.66.94: icmp_seq=1 ttl=56 time=23.596 ms
64 bytes from 209.86.66.94: icmp_seq=2 ttl=56 time=28.662 ms
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;www.www.fdashkadflskhh.com. IN A

;; AUTHORITY SECTION:
com. 900 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 1156444249 1800 900 604800 900

;; Query time: 1133 msec
;; SERVER: 207.69.188.186#53(207.69.188.186)
;; WHEN: Thu Aug 24 14:33:31 2006
;; MSG SIZE rcvd: 117

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:


1 edit

Re: Oh No They Didn't!

They are using bearfruit.com / barefruit.co.uk to do this. Looks to be UK based.

»barefruit.com/?page=home

The IPs EL has setup to redirect when DNS fails:

209.86.66.90 elydm.01.am.barefruit.com
209.86.66.91 elydm.02.am.barefruit.com
209.86.66.92 elydm.03.am.barefruit.com
209.86.66.93 elydm.04.am.barefruit.com
209.86.66.94 elydm.05.am.barefruit.com
209.86.66.95 elydm.06.am.barefruit.com

Go watch the Flash Intro at bearfruit to see what they do.
»www.barefruit.com/?page=home

Q&A
»www.barefruit.com/?page=Q+%26+A

»www.bluecoat.com/solutions/sp/internet.html
quote:
ISPs can also provide revenue from the errors that users produce. By redirecting requests to services such as from Barefruit (www.barefruit.com), ISPs can receive advertising revenue from error pages at the same time as providing a branded and differentiated service to their users.
The more I look the madder I get!!

»www.barefruit.co.uk/?page=solution
quote:
The Barefruit Solution

Because Barefruit operates at the proxy server level, when subscribers encounter errors from any URL they visit, the error pages are replaced with Barefruit Results Pages.

Barefruit pages are flexible in design and can be adapted to represent your brand using an agreed template. Subscribers perceive the pages to be an improvement in the service and technology from their ISP.

The Barefruit Process
This sucks!

Regards,

Doctor Olds
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

said by whfsdude See Profile :

Doctor Olds, You're seeing the redirects right?
Sadly Yes. I do not like it one bit. I thought Verisign pulled this redirect crap and ICANN got them to stop it from using SiteFinder. I didn't like it back then either.

»www.icann.org/topics/wildcard-history.html

Who does EL think they are?
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·Comcast


4 edits

Nevermind... I see it now

AHA! Only Windows queries get occasional redirects!

I have to set my box to use ns2.mindspring.com and about 50% of nslookups for the SAME MALFORMED DOMAIN gets the 209.86.66.9x addresses returned. Hmmm... at least I know I'm not nutso.

My usual BIND-NT server, even when using ns2.mindspring.com as a forwarder, refuses to show this even when trying random jibberish domains. Not sure this means anything, just a curiosity.

whfsdude
Premium
join:2003-04-05
Washington, DC

Re: Nevermind... I see it now

said by Bill_MI See Profile :

AHA!My usual BIND-NT server, even when using ns2.mindspring.com as a forwarder, refuses to show this even when trying random jibberish domains. Not sure this means anything, just a curiosity.
I think if you set your DNS timeout low it wpn't show. I know it doesn't show all the time in Safari because of that. However, in Camino (Firefox engine over cool cooca app interface goodness) it shows all the time. Unless you get so pissed off you change the DNS servers on your router

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·Comcast


1 edit

Re: Nevermind... I see it now

Yes, timing seems to be everything and this almost looks like some kind of kloodge in Earthlink's DNS. When the redirects respond it's always delayed slightly while a failure to find the domain is very quick.

I happen to be playing with VMWare running a Ubuntu appliance and nslookup must give up very quickly because I cannot get those IPs noway nohow. On my Win2K box it's easy but no 50% anymore... more like 10% does it get the redirected IPs.

EDIT: I run:
nslookup fhyudsghedghdv.com 207.69.188.186
...over and over and eventually get the 209.86.66.9x addresses in between several "Non-existent domain" responses.
vinnie97

join:2003-12-05
Mesquite, TX
Ah you might be onto something.

VR Laura
Queen Of Cyberspace
Premium
join:2002-02-10
NYC


4 edits
This totally SUCKS. It was bad enough when Verisign did it... But now, my own ISP??!!!

Laura (ELN customer for 9 years)
»www.queenofcyberspace.com/usenet/

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

Click for full size
Click for full size
Click for full size
Examples of the Earthlink DNS I am seeing.

riturno

join:2004-04-20
Dallas, TX
Saw the redirect this morning and thought it was a fluke. I still see some proper response to a failed query.

This is very unpleasant and I am disappointed.

ChemDude2

join:2005-08-27
Redlands, CA
Forget Earthlink! Use public DNS servers and never rely on them again.

Just my two cents.
about_blank

join:2006-08-26

Re: Oh No They Didn't!

said by ChemDude2 :
Forget Earthlink! Use public DNS servers and never rely on them again.

I'm not sure how one uses a "public DNS server" - isn't the DNS server "provided" automatically? How does one select ones own DNS server? (Please pardon my ignorance on this matter.)

ChemDude2

join:2005-08-27
Redlands, CA

Re: Oh No They Didn't!

Ok, if you want to change your DNS servers that your computer is using, it's very simple. Amazingly, Earthlink has how-to's for you to follow.

For Windows 2000 or XP
»www.earthnet.net/support/tcpip_d···K-xp.htm

For Windows 95, 98, or ME
»www.earthnet.net/support/tcpip_d···5-Me.htm

For Apple OSX
»www.earthnet.net/support/tcpip_d···_osx.htm

For Apple OS 9
»www.earthnet.net/support/tcpip_d···_os9.htm

And finally, if you're using any form of Unix, Linux, or BSD you already know how to do this so I won't even say.

Good luck.
about_blank

join:2006-08-26

Re: Oh No They Didn't!

Many thanks to ChemDude2 and to Bill in Michigan for your replies!

My issue with the outgoing request to elydm.03.am.barefruit.com [209.86.66.92] is unresolved. Earthlink suggests using their 'verify a website' box on their home page, and I was not surprised to find that no matter what variant of the above address I typed, their verification engine denied having anything to do with the web address in question. This may be so, I just don't know.

I've examined my GoBack logs for the past few days to see what changes might have triggered this annoyance, but have come up empty handed. I may just revert to a GoBack restore point prior to the annoyance, as my firewall pops up a warning every 15 minutes, like clockwork, that some process is seeking to contact barefruit.com. Not sure if it's related to the actual topic of this thread, but there are so few hits when I google 'barefruit.com' that it seemed appropriate to leave this info here. I won't belabor the point any more.

Thanks again for your help!

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:


1 edit
The best solution (until Earthlink stops this crap) is to set your Router DHCP server settings for these two IPs.

4.2.2.1 and 4.2.2.2

If you have a UHP Modem they go here in the setup.

»EarthLink DSL FAQ »How to Specify DNS Information in the EarthLink UHP ADSL Modem

In the newer P660R-ELNK it is on this page under "Advanced Setup" then select "LAN", type in the Primary and Secondary DNS servers (4.2.2.1 for Primary and 4.2.2.2 for Secondary) then click on Apply.

»/r0/download/1···etup.JPG

Other Routers and Router/Modems that have built in PPPoE should have similar fields.

To get your Pc[s] to use the new info, release and renew your IP address in your OS.

In XP/Win2K open a CMD box and type "ipconfig /release" then count to 10 then type in "ipconfig /renew"

In Win9x and WinME open a Command box and type "winipcfg /all" and a GUI will open up. In the Box select your Ethernet Adapter from the dropdown menu, then click the release button then count to 10, press the renew button to get fresh info from the Router.

Regards,

Doctor Olds
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·Comcast

Covad DNS Servers

In case it helps anyone: »www.covad.com/onlinesupportcente···ns.shtml

I found Covad DNS to not be the best in Detroit and Chicago - maybe others aren't as bad. If you're on Covad, they are usually very close by. I tested several non-existent domains and see no sign of the Earthlink skulduggery.

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

Re: Covad DNS Servers

How many hops are you from these?

4.2.2.1 and 4.2.2.2 ?
19:33:59  Sun 08-27-2006
C:\WINDOWS>tracert 4.2.2.1

Tracing route to vnsc-pri.sys.gtei.net [4.2.2.1]
over a maximum of 30 hops:

1 1 ms 1 ms 1 ms 192.168.254.254
2 15 ms 14 ms 13 ms 172.31.255.251
3 13 ms 12 ms 12 ms 192.168.1.57
4 14 ms 13 ms 12 ms ge-6-5.car2.Atlanta1.Level3.net [63.209.220.93]
5 14 ms 12 ms 11 ms ge-10-2.hsa1.Atlanta1.Level3.net [4.68.103.132]
6 14 ms 13 ms 13 ms vnsc-pri.sys.gtei.net [4.2.2.1]

Trace complete.

19:36:20 Sun 08-27-2006
C:\WINDOWS>tracert 4.2.2.2

Tracing route to vnsc-bak.sys.gtei.net [4.2.2.2]
over a maximum of 30 hops:

1 1 ms <10 ms 1 ms 192.168.254.254
2 14 ms 13 ms 14 ms 172.31.255.251
3 14 ms 12 ms 11 ms 192.168.1.57
4 13 ms 12 ms 13 ms ge-6-5.car2.Atlanta1.Level3.net [63.209.220.93]
5 14 ms 10 ms 12 ms ge-11-1.hsa1.Atlanta1.Level3.net [4.68.103.100]
6 15 ms 13 ms 13 ms vnsc-bak.sys.gtei.net [4.2.2.2]

Trace complete.

Regards,

Doctor Olds

--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·Comcast


4 edits

Re: Covad DNS Servers

When I get a chance, I'll run DNSRU on each, it's been awhile.
$ traceroute -I 4.2.2.1
traceroute to 4.2.2.1 (4.2.2.1), 30 hops max, 40 byte packets
1 h-69-3-125-1.sfldmidn.dynamic.covad.net (69.3.125.1) 19.468 ms 18.758 ms 18.223 ms
2 192.168.7.137 (192.168.7.137) 18.784 ms 17.186 ms 18.224 ms
3 ge-5-1-133.hsa2.Detroit1.Level3.net (166.90.203.1) 19.169 ms 17.359 ms 16.907 ms
4 so-0-3-0.mp1.Detroit1.Level3.net (4.68.97.217) 18.742 ms 18.039 ms 19.195 ms
5 so-2-0-2.bbr2.Chicago1.Level3.net (64.159.0.194) 22.484 ms ae-0-0.bbr1.Chicago1.Level3.net (64.159.1.33) 20.969 ms 23.312 ms
6 ge-11-2.core1.Chicago1.Level3.net (4.68.101.164) 24.863 ms ge-11-0.core1.Chicago1.Level3.net (4.68.101.36) 32.006 ms ge-10-2.core1.Chicago1.Level3.net (4.68.101.132) 37.387 ms
7 vnsc-pri.sys.gtei.net (4.2.2.1) 43.426 ms 35.718 ms 30.637 ms

$ traceroute -I 64.105.179.138
traceroute to 64.105.179.138 (64.105.179.138), 30 hops max, 40 byte packets
1 h-69-3-125-1.sfldmidn.dynamic.covad.net (69.3.125.1) 17.606 ms 18.532 ms 18.720 ms
2 192.168.7.137 (192.168.7.137) 19.612 ms 19.595 ms 20.453 ms
3 h-64-105-179-138.sfldmidn.covad.net (64.105.179.138) 20.243 ms 17.518 ms 20.342 ms
You can see why Covad could be an ideal solution.

EDIT: Boy, tracert resolution sure sucks in Win2K, I switched to Linux - now the route changes show. Sheesh

longtimelurker

@swbell.net


from:
Doctor Olds See Profile

If you want to change to an alternative DNS server you might want to check out:

»www.opendns.com/

I think they got a mention on this site a few months ago when they started up operations. I have been using them for about a month or so and have not had any problems. Others on this site have used them with positive results as well. If you don't like how they work you can just revert back to what you are using now. I only costs a little time to try them out, nothing more...

If you only need their DNS IP numbers, they are:
208.67.222.222
208.67.220.220

Just a happy customer (and did I mention its free?)

Cheers

See 6 replies to this post
about_blank

join:2006-08-26

Here's a disturbing occurrence that I hope someone can shed some light on:

Last night, while booting my Win XP machine, I received a firewall pop-up notification (before I had logged on, no less) that some "system" process was trying to contact "elydm.03.am.barefruit.com [209.86.66.92]". I had never seen this notification before, so suspected spyware.

I denied permission, logged on, and immediately ran three scans of my hard drives: one with AVG Free anti-virus, one with Ad-Aware SE Personal, and one with Spyware Doctor (each having been updated to use their latest data files). Each scan came back negative.

Meanwhile, I noticed that my firewall (Kerio Personal) kept popping up a periodic warning that "system" was trying to contact the above mentioned "elydm.03.am.barefruit.com [209.86.66.92]", and each time I denied permission. Finally, I went into the "guts" of Kerio to investigate, and noted that the program sending the request was only identified as "system" - not too much help there. So, I went into Kerio's "Packet Filter..." screen and configured a blanket denial of access to the address mentioned, but set a notification to appear each time the denial was issued.

Then, I started googling for barefruit.com and 209.86.66.92, and came across some of the same information noted in earlier posts on this topic in this forum.

It is not clear to me what is happening, but I suspect that Earthlink (my ISP) has somehow configured my machine to "phone home" to barefruit.com - and from my Kerio pop-up settings, I can see that it is attempting to do so every 15 minutes, consistently. I am puzzled why this behavior has not been identified by Spyware Doctor, nor by Ad-Aware SE Personal, as spyware.

As I have used my firewall to block this outgoing communication, I cannot verify that Earthlink is using barefruit.com to redirect my "not found" pages to ones provided by barefruit.com - I still get my 'normal' browser 'not found' warning. (I use Netscape 7.2 for my browser.)

If anyone can provide some insight as to what is going on here - and hopefully, how to deactivate the program or process that is attempting to 'phone home' to barefruit.com, I would be most appreciative!

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·Comcast


4 edits

Re: Oh No They Didn't!

Remember what this is - returning barefruit.com instead of "non-existent domain" when an address is looked up.

In other words, anything checking for addresses could, potentially, get the barefruit.com address. Even Windows, AVG, AdAware and SpywareDoctor autoupdates or similar. Not that these things ask for bad names but any burp in their DNS providers and something like an AVG *could* be getting barefruit.com.

That's why this practice is so loathsome.

BTW, from your earlier post, DNS servers can be set in any PC in the network settings. I don't use DHCP (getting settings automatically) but the source of these settings (like routers and modems) varies from configurable to can't-do-it. Finding good DNS servers is more the issue.

One thing for sure, DNS servers returning anything other than address failures are put on my sh*tlist so fast and their nature publicly condemned. I switched to no forwarding DNS servers for now (I run my own DNS). I'm delighted to see others feel the same.

DrStrange
Technically feasible
Premium
join:2001-07-23
West Hartford, CT
I'm watching the progress of this and just created a little redirect of my own. I stuck barefruit in my hosts file. When I get a minute, I'll blackhole their IP range in my firewall.

This will backfire on EL big-time.

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

Re: Oh No They Didn't!

said by DrStrange See Profile :

I'm watching the progress of this and just created a little redirect of my own. I stuck barefruit in my hosts file. When I get a minute, I'll blackhole their IP range in my firewall.

This will backfire on EL big-time.
209.86.66.90 elydm.01.am.barefruit.com
209.86.66.91 elydm.02.am.barefruit.com
209.86.66.92 elydm.03.am.barefruit.com
209.86.66.93 elydm.04.am.barefruit.com
209.86.66.94 elydm.05.am.barefruit.com
209.86.66.95 elydm.06.am.barefruit.com

Those IP above are on EL IP space.
quote:
IP block 209.86.66.90
Trying 209.86.66.90 at ARIN
Trying 209.86.66 at ARIN

OrgName: EarthLink, Inc.
OrgID: ERMS
Address: 1375 PEACHTREE ST, LEVEL A
City: ATLANTA
StateProv: GA
PostalCode: 30309
Country: US

NetRange: 209.86.0.0 - 209.86.255.255
CIDR: 209.86.0.0/16
NetName: EARTHLINK2000-E
NetHandle: NET-209-86-0-0-1
Parent: NET-209-0-0-0-0
NetType: Direct Allocation
NameServer: ITCHY.MINDSPRING.NET
NameServer: SCRATCHY.MINDSPRING.NET
Comment:
RegDate: 2000-04-20
Updated: 2000-04-20
What about those?
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

DrStrange
Technically feasible
Premium
join:2001-07-23
West Hartford, CT

Re: Oh No They Didn't!

If anything redirects to barefruit by name, it's blocked now. When I get some time, I'll blackhole those six IPs as well. That should take care of that.
about_blank

join:2006-08-26

Re: Oh No They Didn't!

said by DrStrange :
If anything redirects to barefruit by name, it's blocked now. When I get some time, I'll blackhole those six IPs as well. That should take care of that.

I'm familiar with the hosts file, but am not sure exactly what effect entries have. For instance, if I put the following line in the hosts file:

209.86.66.90 elydm.01.am.barefruit.com

does that block any outgoing requests to 209.86.66.90? Or merely identify that outgoing request as "elydm.01.am.barefruit.com" in various log files, instead of using the 209.86.66.90 address?

If it blocks requests to 209.86.66.90, what advantage is there in using the hosts file, rather than my firewall, to block these requests?

I hope you can enlighten me - thanks in advance!

PS: I rolled back using GoBack, which eliminated the outgoing requests to 209.86.66.92, but within 24 hours, I've now got a request to 209.86.66.95! (I'm currently blocking that request with my firewall, but my machine is attempting to contact that site every 15 minutes like clockwork.)

DrStrange
Technically feasible
Premium
join:2001-07-23
West Hartford, CT
·Stephouse Networks
·magicjack.com
·EarthLink

Re: Oh No They Didn't!

You should have entered

'127.0.0.1 elydm.01.am.barefruit.com' into the hosts file. It redirects requests to elydm.01.am.barefruit.com to 127.0.0.1 [the localhost address].

209.86.66.90 is what goes into the firewall with the 'deny all' rule.

If you enter the actual IP address into the hosts file, it just means that requests for the associated domain go directly to that address instead of querying a DNS server first [that's how the hosts file was originally intended to be used].
about_blank

join:2006-08-26

Re: Oh No They Didn't!

said by Dr. Strange :
'127.0.0.1 elydm.01.am.barefruit.com' into the hosts file. It redirects requests to elydm.01.am.barefruit.com to 127.0.0.1 [the localhost address].

Thanks for the edification. I'm assuming that any direct request to an actual IP address (number) does not have to use the hosts file to look anything up. Since that is my situation, I'm filtering the outgoing requests using my firewall, which alerts me with a pop-up at each attempt.

I've noted that these attempts continue for a couple of hours, then stop. But the following day, an attempt is made to contact one of the other addresses for barefruit.com, which my firewall catches. I then add the new address to the firewall, set to pop-up a small box each time an attempt is made. Right now, I've added 209.86.66.90 through 209.86.66.95, corresponding to elydm.01.am.barefruit.com through elydm.06.am.barefruit.com, inclusive. (Just to get ahead of the game - So far, only elydm.01, 03, and 06 have been used, but I've added 02, 04 and 05.)

Thanks again!

whfsdude
Premium
join:2003-04-05
Washington, DC
»blogs.earthlink.net/2006/08/hand···ns_1.php

I think tmrw I'm going to bitch in the comments

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

Re: Oh No They Didn't!

So is that the Official Channel for System Wide changes?

I love this part....They don't know how it works or they just believed the lies their partners told them....

»blogs.earthlink.net/2006/08/hand···ns_1.php
quote:
Our partners on the product are Yahoo and Barefruit, a company that specializes in processing DNS and HTTP errors for ISPs. Barefruit provides the system to process errors and Yahoo hosts the destination customers are directed to. For more than a year we have been offering DNS error functionality for EarthLink Toolbar users through our Yahoo relationship, and Barefruit provides the technology that allows us to extend this functionality to EarthLink’s entire access customer base.

So far, we've rolled out the system to a small number of servers, and ISP geeks who track of this sort of thing noticed pretty quickly. The service has been criticized in some online conversations because by nature it changes the way DNS errors are reported through the network. It’s important to remember that the Barefruit system only processes errors classified as NXDOMAIN (non-existent domain) when they are in route back to a user’s browser, which means the user experience we are changing is a browser error stating the web site cannot be found or the auto-search functionality of Internet Explorer, neither of which are especially helpful to the user. The system is specifically configured to handle only NXDOMAIN HTTP traffic as it is being returned to the user’s browser and to not impact email and other non-web-browsing traffic.
If it only routes this change to my Browser, how come my other affected programs like Ping, Tracert, Email to name a few are being involved? The person in charge doesn't know what DNS does?

Speaking of the guy in charge, it is a guy named Ken Womack.

quote:
I should note that I'm the EarthLink product manager for this initiative on the customer-facing end (the results page users see).

Posted by: Ken Womack | August 30, 2006 02:28 PM
I love it when they put people in charge of things they don't understand. NOT

Regards,

Doctor Olds
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

windsurf1970

@mindspring.com

What a joke. I too spent days trying to figure out what was going on with "my" laptop and "my" VPN connection. I even went as far as rebuilding my system thinking I was hijacked. A "dead domain" to Earthlink does NOT equal a dead domain on my company's intranet but Earthlink makes it so by redirecting you to their own earthlink-help.net site. Needless to say, my email and internal chat was not working either, leaving me dead in the water.
I was given their 207.69.188.171/172 DNS settings during a chat with one of their CSR's, but this does not help if my laptop has a security GPO preventing any changes to DNS settings from sticking for more than an hour. I was also told that their engineers are working on the problem and it will be resolved ASAP, but I was not given any info indicating ASAP means hours, days, or even weeks. If Earthlink's so-called network engineers can't figure this out in a day or two, then they obviously don't know what the hell they're doing. Maybe management will figure out that a paper certification does not equate real world experience and knowledge when they fire these guys and hire new ones.
Bottom line is if I cannot get into my work's network TODAY and Earthlink cannot resolve this with more than a bandaid after I've already wasted 2 weeks fighting the problem, then it's bye-bye Earthlink, hello RoadRunner. I lose nothing; they lose another customer they've had for 5 years.

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

Re: Oh No They Didn't!

said by windsurf1970 :

What a joke. I too spent days trying to figure out what was going on with "my" laptop and "my" VPN connection. I even went as far as rebuilding my system thinking I was hijacked. A "dead domain" to Earthlink does NOT equal a dead domain on my company's intranet but Earthlink makes it so by redirecting you to their own earthlink-help.net site. Needless to say, my email and internal chat was not working either, leaving me dead in the water.

[snip]

Bottom line is if I cannot get into my work's network TODAY and Earthlink cannot resolve this with more than a bandaid after I've already wasted 2 weeks fighting the problem, then it's bye-bye Earthlink, hello RoadRunner. I lose nothing; they lose another customer they've had for 5 years.
They have already answered/resolved this all they are willing to and told us literate/educated paying customers (they call us geeks) and anyone that needs RFC compliant DNS to go ahead and screw off as they are in it for the money that Barefruit has promised to pay them.

Here's where they told us to screw off.

»blogs.earthlink.net/2006/09/more···andl.php

Regards,

Doctor Olds
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?

AnonMan

@mindspring.com

Re: "Opt Out" DNS Servers

»kb.earthlink.net/case.asp?article=187117

Disgusted

@mindspring.com
Everytime I start a program--Outlook, Any graphic editor, MS Word etc. My firewall alerts me that "System" is trying to connect to the barefruit IP. This is how trojans work.

earthlinkhater

@covad.net

This is Earthlink's complaint form where you can submit your feedback on the subject: »support.earthlink.net/feedback/myearthlink/

Also, here's a PledgeBank pledge that's trying to get them to stop the DNS redirect service: »www.pledgebank.com/earthlinksucks

coolhaus

join:2000-05-10
Cary, NC
This is technically unacceptable, and a slimy revenue grab. Cancelling my Earthlink service right now and reverting to Time-Warner cable.

I was a subscriber for eight years, by the way. To say I am a little pissed is an understatement.

c

@verizon.net

EarthLink DNS servers without the redirection..

»blogs.earthlink.net/2006/09/more···andl.php

207.69.188.171 (west coast)

207.69.188.172 (east coast)

If you're west of the Mississippi, use the west coast DNS server as your primary and the east coast as secondary. And vice-versa for those of you in the eastern U.S.

Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·Comcast

Re: Oh No They Didn't!

Great find! These did not have their rDNS back when I found the 207.69.188.100-103 servers.

207.69.188.171 optns1.earthlink.net
207.69.188.172 optns2.earthlink.net

Performance here is so-so.

BTW, this is routing within a class C subnet I didn't expect to see. These adjacent addresses ARE Pasadena and Atlanta.
NGOwner

join:2000-11-21
Leawood, KS

My understanding of this issue:

I make a mistake, and enter in a webaddress that doesn't exist. Earthlink serves up a page (examples on page one) stating that the webaddress I entered doesn't exist. That page includes a few suggestions, respellings, and ads.

Enlighten me here. What's the problem with this?

[NG]Owner
--
It is impossible to create an idiot-proof product. Humanity is simply too adept at churning out better idiots.
NGOwner

join:2000-11-21
Leawood, KS

Re: Oh No They Didn't!

Never mind. I just read some of the earthlink blog above.

Can't say that I agree with you guys.

But since many feel so passionate about it, maybe separate DNS servers for those with their panties in a bunch is the way Earthlink should go.

[NG]Owner
--
It is impossible to create an idiot-proof product. Humanity is simply too adept at churning out better idiots.

Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:

said by NGOwner See Profile :

My understanding of this issue:

I make a mistake, and enter in a webaddress that doesn't exist. Earthlink serves up a page (examples on page one) stating that the webaddress I entered doesn't exist. That page includes a few suggestions, respellings, and ads.

Enlighten me here. What's the problem with this?

[NG]Owner
It breaks ping, reverse lookups and traceroute.
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time?
brambling

join:2003-12-18


2 edits
I wouldn't mind it if the redirect page didn't look so cheap, and you could opt-out from the "My Account" page. I would feel better if the default account setting blocked the phishing sites, at least the ELN ones, so if I was away from home and wanted a family member to handle the billing, it might catch it.
astrocity20

join:2002-07-15

Re: Oh No They Didn't!

I wouldn't mind it if it was better than google's "I feel lucky" when I type in a keyword for a website. But it isn't so I'm pissed.

bob12bob

@mindspring.com
Here is what the geeks have to say about this. Good stuff!

»slashdot.org/article.pl?sid=06/0···1&tid=95

justin
Australian
join:1999-05-28
Brooklyn, NY
This nasty feature has arrived on my earthlink cable connection as well.
TomB44857

join:2006-11-25
Norwalk, OH

Re: Oh No They Didn't!

said by justin See Profile :

This nasty feature has arrived on my earthlink cable connection as well.
I'm not even an Earthlink Internet subscriber and now I'm seeing this message. I have Time Warner Cable's Road Runner Lite. I'm waiting on a support callback from Time Warner right now.

Be warned, Earthlink is apparently controlling Road Runners DNS in some areas. I'm going to check out the OpenDNS next. This week I attempted to remotely login to my company's network using the Safenet Remote software they setup. It connected, but I couldn't establish a terminal server connection. Do you suppose this was the reason? I was going to ask our IT guys when I get back on Monday.

golden eagle
Aquila chrysaetos
Premium
join:2002-08-06
On a cliff
clubs:
It sucks ... period!

See 6 replies to this post
Forums » Selected ISP Support » Earthlink DSL8mb in chicago area? »
page: 1 · 2


Sunday, 29-Nov 19:01:58 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [124] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [80] TiVo Sees Record Customer Losses
· [80] Weekend Open Thread
· [79] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [63] Thanksgiving Open Thread
· [41] ICANN Slams DNS Redirection
Most people now reading
· Grey Cup on the Web? [Canadian Chat]
· Are GPS's better today? [General Questions]
· Is Easynews down? [Filesharing Software]
· Windows 7 boot manager editing questions [Microsoft Help]
· [Newsgroups] Newzleech down? [Filesharing Software]
· post your uber speeds [TekSavvy]
· [How to] Install Asterisk on an Asus WL-520GU router [VOIP Tech Chat]
· 3.x Feral Druid - Bear Tanking Guide [World of Warcraft]