[olug] Cox Speed Increase

Wed Jul 9 12:46:30 CDT 2014

I was temporarily using Googles public DNS when I noticed the hijack.  It
didn't notice the Cox redirected search page when the wrong url is entered
thing....or whatever you call it, I would call it a custom 404 but that
isn't really what it is because it isn't a webserver response. 
.......but my queries ended up going to 92.242.140.2.

What I believe may have happened is Snort blocked 8.8.8.8 and 8.8.4.4 and it
switched to Cox's DNS somehow.  I originally thought they were doing
protocol or port based DNS hijacking, I don't think they are, if they were
the opt out seems to have corrected it.

Thanks for the tool T.J.!
Here is the graph of my benchmark.  
I am using the Cox DHCP provided servers with pfSense's  dnsmasq DNS
forwarder.  It seems to be the fastest.
68.105.28.13
68.105.29.13
68.105.28.14
68.105.29.14
http://omahax.com/img/dnsbench.png

I used OpenDNS for a bit years ago but switched because it was noticeably
slower.  
As far a privacy goes, it might be best just to use Cox's DNS since they
already know where you are going, unless you are using TOR or something.

-----Original Message-----
From: olug-bounces at olug.org [mailto:olug-bounces at olug.org] On Behalf Of Chad
Homan
Sent: Wednesday, July 09, 2014 10:30 AM
To: Omaha Linux User Group
Subject: Re: [olug] Cox Speed Increase

+1 on OpenDNS. +1 on 50m
On Jul 8, 2014 11:18 PM, "Justin Reiners" <justin at hotlinesinc.com> wrote:

> I assumed it were hijacking any dns lookups for residential period, 
> seems like something they would do. Although I had to deal with both 
> ATT and Time Warner today at the sales office, 2 different ISP's both 
> down due to a fiber cut. Ahh excitement, Makes me love Cox.
>
>
> On Tue, Jul 8, 2014 at 8:40 PM, Justin Reiners 
> <justin at hotlinesinc.com>
> wrote:
>
> > Ahh that explains it. I use my own DNS server.
> > On Jul 8, 2014 8:39 PM, "T. J. Brumfield" <enderandrew at gmail.com> wrote:
> >
> >> I've been using OpenDNS rather that Cox's DNS for years so I've 
> >> never
> seen
> >> their DNS hijacking.
> >>
> >> Google also has a Namebench tool to help you find the DNS server 
> >> that
> will
> >> give you the best performance.
> >>
> >> http://www.beststuff.com/gadgets/google/29622/
> >>
> >>
> >> On Tue, Jul 8, 2014 at 8:36 PM, Aric Aasgaard <aric at omahax.com> wrote:
> >>
> >> >
> >> >
> >>
> http://www.omaha.com/money/increase-in-cox-residential-internet-speeds
> -comin
> >> > g-this-week/article_d62501ac-05f2-11e4-ba25-0017a43b2370.html
> >> >
> >> >
> >> >
> >> > So Cox residential is getting a speed increase this week, I hope 
> >> > the Ultimate tier gets a boost.  Any luck getting Century Link 
> >> > gigabit to
> >> work
> >> > well?
> >> >
> >> >
> >> >
> >> > Last week I opted out of the "advance error page" DNS hijacking 
> >> > (I
> >> thought
> >> > I
> >> > had already done this in the past)
> >> >
> >> >
> >> >
> >>
> http://www.cox.com/residential/support/internet/article.cox?articleId=
> bd71bb
> >> > c0-6446-11df-ccef-000000000000
> >> >
> >> > My Cox Ultimate internet now seems laggier than normal.  By doing 
> >> > this
> >> did
> >> > I
> >> > get added to some goofy traffic filter group that is really laggy?
> >> >
> >> > _______________________________________________
> >> > OLUG mailing list
> >> > OLUG at olug.org
> >> > https://lists.olug.org/mailman/listinfo/olug
> >> >
> >>
> >>
> >>
> >> --
> >> "I'm questioning my education
> >> Rewind and what does it show?
> >> Could be, the truth it becomes you
> >> I'm a seed, wondering why it grows"
> >> -- Pearl Jam, Education
> >> _______________________________________________
> >> OLUG mailing list
> >> OLUG at olug.org
> >> https://lists.olug.org/mailman/listinfo/olug
> >>
> >
>
>
> --
>
> [image: Hotlines Inc] <http://www.partshotlines.com>
>
> Justin Reiners /
> 800.308.9712/ Justin at HotlinesInc.com
>
> Hotlines Inc Office: 800.807.2867 / Fax: 800.211.0843
> 427 E. Kanesville Blvd. Suite 403, Council Bluffs, IA 51503 
> http://www.partshotlines.com
>
> [image: Google Plus] <http://htmlsig.com/#%23%23%23> [image: Linkedin] 
> <http://htmlsig.com/#%23%23%23> [image: Skype] < 
> http://htmlsig.com/jreiners>
>
> This e-mail message may contain confidential or legally privileged 
> information and is intended only for the use of the intended recipient(s).
> Any unauthorized disclosure, dissemination, distribution, copying or 
> the taking of any action in reliance on the information herein is
prohibited.
> E-mails are not secure and cannot be guaranteed to be error free as 
> they can be intercepted, amended, or contain viruses. Anyone who 
> communicates with us by e-mail is deemed to have accepted these risks. 
> Company Name is not responsible for errors or omissions in this 
> message and denies any responsibility for any damage arising from the 
> use of e-mail. Any opinion and other statement contained in this 
> message and any attachment are solely those of the author and do not
necessarily represent those of the company.
> _______________________________________________
> OLUG mailing list
> OLUG at olug.org
> https://lists.olug.org/mailman/listinfo/olug
>
_______________________________________________
OLUG mailing list
OLUG at olug.org
https://lists.olug.org/mailman/listinfo/olug