What's new
By:

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Recent content by DarkBBQ

  1. D

    What Kernel version is used in Asuswrt-Merlin and Is there ACL support?

    What do I have to do to get ext4 working on my merlin rt-n66u?
  2. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    Ah, my bad. thanks. nslookup www.google.com Server: 127.0.0.1 Address 1: 127.0.0.1 localhost.localdomain Name: www.google.com Address 1: 2a00:1450:400f:805::2004 arn06s07-in-x04.1e100.net Address 2: 83.140.66.42 83.140.66.42.biz.sta.port80.se Address 3: 83.140.66.38...
  3. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    Now this was very interesting ColinTaylor. Now, how would I go about verifying this? And on a side note... just checked nslookup again and this is what I got: nslookup google.com Server: 127.0.0.1 Address 1: 127.0.0.1 localhost.localdomain Name: google.com Address 1...
  4. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    How would Windows effect my router? My router is not running windows... I'm only analyzing this in my router running Asuswrt-Merlin. (but of course, any computer, including windows, connected via DHCP to my router will display the same symptoms, as was the case when this was first discovered.)
  5. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    No
  6. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    Problem was first observed while using the setting you are suggesting (IPS DNS). Then also checked with googleDNS and openDNS. Flushed in between. (and also checked with cache disabled)
  7. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    None returned a rule (added "-L" to the second and third command line).
  8. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    I checked the signature before I installed using QuickHash. No discrepancies. Uploaded using web GUI. cat /etc/dnsmasq.conf: pid-file=/var/run/dnsmasq.pid user=nobody bind-dynamic interface=br0 interface=ppp1* no-dhcp-interface=ppp1* resolv-file=/tmp/resolv.conf...
  9. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    My ISP is Bahnhof.se. They are not affiliated in any way with port80.se (afaik). And coincidentally, port80.se (availo) is not a public ISP but rather a data center provider. Availo (through IP-only) is actually a competitor to Bahnhof and many companies in Sweden use both to achieve critical...
  10. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    I contacted my ISP. They say they are not manipulating my DNS queries in any way. If I set up a VPN tunnel on the router; will DNS traffic go through the VPN or do I need to set up an external VPN? If I have to set up an external VPN I think I would rather share my mobile internet an feed it...
  11. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    I will check that out. If you could point me in the right direction, I would be very interested in how they would be able to come about such manipulations. Thanks! I'll be back. :cool:
  12. D

    Suspected (DNS) exploit kit on ASUS RT-N66U

    Hi Installed the lastest firmware (380.58) and erased nvram through SSH. nslookups from console does not resolve into expected domains (except for IPv6). For example google.com does not resolve into a 1e100.net domain (which it does outside my network). Tried changing DNS to both 8.8.8.8 and...
See more
Back
Top
✖