Dealing With ISPs That Use NXDomain Redirection?
Vrtigo1 writes “I work for a small company that has about 50 staff on the road relying on VPN back to our office at any given time. Many ISPs have implemented NXDomain redirection services that hijack DNS traffic to show you sponsored links and other related ads when you mistype a domain name. These services are incompatible with most VPN software, since they prevent the computer from resolving internal hostnames. Large ISPs typically provide an opt-out on their sponsored links page that immediately opts you out of the DNS redirection, but I’ve noticed that some smaller ISPs and CLECs have opt-out links that don’t actually appear to do anything. I don’t have a good solution for employees using these ISPs, and our employees are getting frustrated because the problem is becoming more prevalent and we can’t fix it for them. I’ve tried calling a few of these smaller ISPs for help, but it’s been like talking to a wall. Manually changing DNS servers works temporarily, but the user can’t resolve internal hostnames when they connect to the office LAN again. Have you had to deal with ISPs using non-standard DNS servers? What is your solution?”
Read more of this story at Slashdot.
