[PLUG] Internet access certificate issues

[Larry Brigman]

If the wireless router was providing the DNS lookup services for wireless
clients, then the conclusion that the router was hacked and providing bogus
DNS info was correct.  Figuring that out would need to recreate the
situation and check the IP against the DNS name received.

Earlier references to DNS poisoning were the correct term.

On Sep 15, 2017 9:16 AM, "Denis Heidtmann" <denis.heidtmann at gmail.com>
wrote:

> The router is out of service,  not powered.  Is there any way to diagnose
> it at this  point, or would I have to place it back in service and observe
> a repeat of the problem?  Or is the problem not in  the router at all; just
> coincidence that it went away when I removed the router?  Clearly I need
> some very basic understanding of how all  these things operate.
>
> -Denis
>
> On Fri, Sep 15, 2017 at 2:52 AM, Russell Senior <russell at personaltelco.net
> >
> wrote:
>
> > >>>>> "Denis" == Denis Heidtmann <denis.heidtmann at gmail.com> writes:
> >
> > Denis> [...] My son suggested that the router was attacked.  Other
> > Denis> explanations could be poor wired connections: one end of one of
> > Denis> the Ethernet cables is missing the mechanical lock. Maybe it got
> > Denis> noisy.  Also, it could be the power supply to the router is
> > Denis> failing.  I have not checked it yet.
> >
> > Denis> My son want to examine the router.  How about you, Russell?
> >
> > That sounds like maybe DNS poisoning, someone giving incorrect answers
> > to your device's DNS requests in order to try to redirect your browser
> > to a spoofed site, possibly to try to steal your credentials.
> >
> > Don't tell your browser to accept invalid certificates!  Rebooting the
> > AirRouter should clear its cache.  Diagnosing probably involves running
> > tcpdump to see what's going on.
> >
> >
> > --
> > Russell Senior, President
> > russell at personaltelco.net
> > _______________________________________________
> > PLUG mailing list
> > PLUG at lists.pdxlinux.org
> > http://lists.pdxlinux.org/mailman/listinfo/plug
> >
> _______________________________________________
> PLUG mailing list
> PLUG at lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>