Software

Ask something
Question Locked

Westel And Verizon problem

0 helpful
4 replies

by jim

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Any one seen this or similar problem:

Can not go to one page of a site- the page cannot be found.

* bad page : http://tax-acct-info.goprincegeorgescounty.com/PropertyTaxes/TaxInquiry.aspx

Other pages can be resolved:

** good page: http://www.princegeorgescountymd.gov/Government/AgencyIndex/Finance/index.asp

I did not have problem at other sites that use aspx.

I do not have the problem with bad or good pages in work or on an other home network (Verizon NJ network).

On the problem page * DNS resolves to. 206.207.85.33 using NSlookup: http://tax-acct-info.goprincegeorgescounty.com.

After resetting the Browser and trying different settings sometimes it worked sporadically on one computer- however, the fonts and style were not correct.

I noticed that the good pages (**) referenced a CSS style sheet within the same folder (href="/CSS/fonts.css)
and the bad referenced a serve
href=?http://www.goprincegeorgescounty.com/CCC/menu_style.css.

Both (http://www.goprincegeorgescounty.com? and http://www.goprincegeorgescounty.com.) resolve to 206.207.85.33.

It seems that there is something in the Westel Modem/Router that is not mapping the DNS reponses correctly for this page.

1- Verizon network seems to be doing its thing,
2- Removed the wireless router to eliminate this part.
3- What can the modem do to the DNS or NAT translation to cause this problem?

*** The network having the problem is a Verizon DSL service (in MD) and linksys wireless router. Originally the DSL modem was in bridge mode and the Router used PPPOE. Generally after power problems the DSL modem ends up in a routing default mode providing private space 192.168.1. . My friend ?owner of network having problem-gets on the phone with Verizon and they have no clue what PPPOE even is (? You got me on this ?) and insist on forcing the modem to become a router. The linksys wireless router was changed to the 192.168.2 space and all seems to work fine. The above problem happens on both the 192.168.1. space (directly connected to DSL router and the 192.168.2 space (using wirless router behind the DSL router). We eliminated the linksys by directly connecting into the Westell DSL Modem/Router

4 replies

by robo_dev

the IP of www.goprincegeorgescounty.com and www.princegeorgescountymd.gov is 151.200.189.130.

That 206 address resolves to WESTNET and is asscoiated with a UTAH.edu and a colorado-based domain.

DNS hijack software will sometimes hard-code your DNS settings, even though you're using DHCP for DNS. One sure sign of it is if google search results do not work properly, or the same link within google returns different results depending on how many times you click on it.

BUT, there is another issue as well: whoever developed the web site has screwed it up.

The source of their main web page shows browser detection code from 2001, and it is probably not be detecting your browser correctly. What web browser are you using?

Whoever coded that web page has the tax inquiry page loading ASPX with OLD browser detection code from 2001. (no IE 7, no firefox, no safari).

ASPX is microsoft's latest and greatest html format. AND the page uses a lot of JAVA, which can be very browser dependent.

Here is what's in their browser detection:
"this.ie6 || this.ie5 || this.ie4 || this.ns4 || this.ns6 || this.opera5"

I bet their site works flawlessly with OLD OLD OLD IE4 if you goto www.java.com and make sure your Java VM is working and up-to-date. And you gotta get rid of the DNS hijack malware....

if you go to www.arin.net, and search by domain or by IP, the result is:

Prince Georges County Government VZ-PRNCGRGSCNTY-1 (NET-151-200-189-0-1)
151.200.189.0 - 151.200.189.255

by jim

Will Not be able to test untill tonight. Thabks again for tip.

by jim

Still having problem but did Did some more testing:

When surfing the network I am getting unreliable connections to various Web Sites (* see example below). In verifying the IP address of these Web Sites using NSlookup I get one IP address for all inquires including Googel.com (*see examples). The problem is happening on all machines on my network including an Apple MAC. I have made many attempts to look for malware and viruses but cannot resolve the problem.

I was able to do something to prove that when the Verizon Modem gets a DNS request it is redirecting me to this one IP address. On one of my computers I can use a VPN to another Verizon network in NJ. This network does not have this problem. After connecting a VPN to this network I then configure my adapter to a fixed IP address. The IP and gateway are fixed to operate on the local network, However, I use the remote networks router IP address for the fixed DNS address pointing to my other networks via the vpn tunnel Everything works fine; NSlookup gives the correct addresses and the sites the sites that did not work are working fine.

NSlookup on all sites= 206.207.85.33

Conditions:
Local Network?Router 192.168.1.1 DNS 192.168.1.1 (71.232.0.12?Verizon DNS MD)

Remote VPN Network -192.168.100.1 DNS 192.168.100.1 (71.250.0.12 ? Verizon DNS NJ)

Static setting in Adapter properties:
IP / Gateway/ DNS
192.168.1.12/ 192.168.1.1/ 192.168.1.1 ? Bad
192.168.1.12/ 192.168.1.1/ 71.252.0.12 - Bad
192.168.1.12 /192.168.1.1/71.250.0.12 ? Bad
192.168.1.12/192.168.1.1/192.168.100.1 - Good

It Looks like Verizon modem/router is Hacked?

This discussion is closed to new replies.