Thanks again to everyone that has responded to my post. I've also felt
that the problem is directly related to DNS. Priscilla, thank you for
the links that you sent as well. The overall information has been very
helpful. Our problem seems to have "disappeared" since we cleared the
cache on our DNS servers; however, I don't expect this to fix the
problem long term. Being armed with the information you have provided at
least helps me present my theories to management. I will continue to
monitor for changes.
Thanks again,
Lynne
-----Original Message-----
From: Mossburg, Geoff (MAN-Corporate) [mailto:Geoff.Mossburg@xxxxxxx]
Sent: Thursday, August 12, 2004 5:34 PM
To: cisco@xxxxxxxxxxxxxx
Subject: RE: OT:Web Browsing [7:91734]
>From what I've found online, this same problem has happened
intermittently since at least January of this year. There's a site I
found which seems to have a dialogue about the problem from around the
beginning of last month, but the MyFamily.com problem is mixed in with
other comments, and I haven't had time to read the posts all the way
through. Here's the link if you want to check it out (watch for word
wrap on the link):
http://forums.whirlpool.net.au/forum-replies.cfm?t=212763&p=2
You'll have to go about 3/4 of the way down the page before you'll see
the MyFamily.com posts start; do a "Find" on the page for the word
"redirected" and it will take you right there. This site seems to have
determined that the problem is related to transparent proxy, so maybe
that will help your search. Good luck!
Geoff Mossburg
-----Original Message-----
From: nobody@xxxxxxxxxxxxxx [mailto:nobody@xxxxxxxxxxxxxx] On Behalf Of
PADGETT.LYNNE
Sent: Thursday, August 12, 2004 4:55 PM
To: cisco@xxxxxxxxxxxxxx
Subject: RE: OT:Web Browsing [7:91734]
Thanks to both of the suggestions that have been presented so far. We
have pest patrol running on all of the 500 PCs that are affected, along
with the latest latest Trend stuff, latest Microsoft updates, and we've
flushed the DNS cache. The thing that's driving me nuts is that it's
intermittent.
Anyone else have any suggestions?
-----Original Message-----
From: Sam Sneed [mailto:vman76@xxxxxxxxxxxxx]
Sent: Thursday, August 12, 2004 4:44 PM
To: cisco@xxxxxxxxxxxxxx
Subject: Re: OT:Web Browsing [7:91734]
Check for spyware. I bet your connections are getting hijacked. Download
spybot and adaware and run them. I guarantee it will fix the problem.
PADGETT.LYNNE wrote:
> Just wondering if any of you guys have run into this situation in the
> past couple of days. When web browsing to random sites (so far it has
> affected delta.com, cnn.com, google.com, aa.com --just to name a few),
> we are being redirected to the myfamily.com website. Doing nslookups
> resolves the name to the proper IP address, but you are unable to
> browse to the site. It's like a bogus page is placed in front of your
> true destination. After about 3-5 minutes you are able to access the
> site again.
>
> We use and internal DNS server for outside queries. As a process of
> elmination excercise, in an effort to determine the source of the
> problem, I changed a couple of my PCs to resolve to a DNS server on
> the outside of our network. When I do this, the PCs on the outside
> are able to get to the sites that the internal DNS server is having a
> problem with, while the one that gets its DNS from our internal server
> is not. I suspect that our DNS server has been compromised, but was
> wondering if any of you have run into a similar problem.
>
> TIA,
>
> Lynne
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=91918&t=91734
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
