DNS Hijacking

How are you setting your DNS servers? In the dhcp server of your router? I use either Google or OpenDNS and haven't had a problem. Never use Cox DNS.

After the initial setup I access my modem/router and change the DNS server setting to either OpenDNS and Google Public DNS. Then I started noticing that some of the website that should be block are not blocked. That is when using network tools like ping and traceroute I noticed that even my modem setting has not be "change" the connection is hijacked to use cox dns servers.

What model gateway do you have?

I suggest you to disable enhanced error results

how were you able to find your router login information?

Dubh00 said:

how were you able to find your router login information?

Depends on the model router/gateway you have. Please post your model and we should be able to get the defaults for you.

It sounds like you have figured out already how to resolve the issue:

After the initial setup I access my modem/router and change the DNS server setting to either OpenDNS and Google Public DNS. Then I started noticing that some of the website that should be block are not blocked. That is when using network tools like ping and traceroute I noticed that even my modem setting has not be "change" the connection is hijacked to use cox dns servers.

Essentially, Cox has implemented a module in their DNS servers that redirects you to a sponsored search page instead of giving you a straight DNS error.  For a significant portion of their customer base (at least that's the story and they are sticking to it) this 'enhancement' helps when they've accidentally mis-spelled a website address.

So, to disable it, I do recommend using the Google Open DNS servers at 8.8.8.8 and 8.8.4.4.

I have set up the DNS. However, it might not be right. If the DNS is as follows, what else to try?