Does ISP hijack DNS?

[dryteletubby]

Can I ask of a favour from you guys?
Do post a screenshot of the results from
https://www.dnsleaktest.com
Also include your ISP and 3rd party DNS server you are using.

Thanks in advance

 

[-Grift-]

Test complete

Query round Progress... Servers found
  1          ......              1
  2          ......              1
  3          ......              1
  4          ......              1
  5          ......              1
  6          ......              1
IP	Hostname	ISP	Country
119.56.**.***	***.**.56.119.unknown.m1.com.sg	M1	Singapore

Local hosted pihole + Unbound as resolver

 

[miloaisdino]

Yes, once i saw singtel replace google ip with internal transparent proxy which caches google.

 

[uncle_josh]

ISP : SH

Using OpenDNS

 

[Ah-Pin-Kor]

I think you should also indicate whether you are using ONT or ONR and also whether you are using ISP provided router running their ISP customised firmware.

From my previous experience with SH fibre using ONT and own router I was able to pass the OpenDNS check.

Salting the land using HardwareZone Forums app

 

[dryteletubby]

So currently M1 and starhub pass

Singtel probably is spying on their users.

Still waiting for viewquest, whizcomms & myrepublic users

 

[FatalityV]

So currently M1 and starhub pass

Singtel probably is spying on their users.

Still waiting for viewquest, whizcomms & myrepublic users

VQ.

Using 8.8.8.8

 

[eric3743]

ISP : Starhub 1Gbps

DNS : Default / SH

 

[squarepipe]

Why does an ISP want to do DNS hijack?

 

[Proximus]

VQ

1.1.1.1 (DNSSEC enabled)

 

[dryteletubby]

Why does an ISP want to do DNS hijack?

https://en.m.wikipedia.org/wiki/DNS_hijacking

In Singtel case is probably to force the use of their own cache server

 

[miloaisdino]

Why does an ISP want to do DNS hijack?

Spying maybe, but also to route traffic thru transparent proxies and apply traffic shaping... definitely not for caching as if yr dns request does not match a 'targeted' domain, they wont poison.

 

[Henry Ng]

Spying maybe, but also to route traffic thru transparent proxies and apply traffic shaping... definitely not for caching as if yr dns request does not match a 'targeted' domain, they wont poison.

Recently M1 did something like that.

 

[dryteletubby]

Recently M1 did something like that.

M1 doesn't hijack DNS. If the dnsleaktest doesn't show your ISP DNS being used when you selected a 3rd party DNS resolver, you are safe.

https://www.dnsleaktest.com/what-is-transparent-dns-proxy.html

 

[squarepipe]

I see. I think I will avoid subscribing to Singtel.

 

[amazingone]

Extended test

On Singtel fibre, w/o using any third-party DNS services.

 

[squarepipe]

Is there any advantage of not using the ISP DNS server?

 

[dryteletubby]

Is there any advantage of not using the ISP DNS server?

Well you can bypass censorship, as for Google DNS and cloudfare both of them supports dnssec and DNS over https. Both should prevent ISP (Singtel) form hijacking your DNS traffic.

 

[chengsun]

M1 doesn't hijack DNS. If the dnsleaktest doesn't show your ISP DNS being used when you selected a 3rd party DNS resolver, you are safe.

https://www.dnsleaktest.com/what-is-transparent-dns-proxy.html

don't waste your time explain to this guy......

 

[chengsun]

Well you can bypass censorship, as for Google DNS and cloudfare both of them supports dnssec and DNS over https. Both should prevent ISP (Singtel) form hijacking your DNS traffic.

escape censorship as in ... porn, ect?

I think ISP block them at another level, like firewall. At least the ISP that I worked for last time did it that way. they have 1 equipment just for this purpose. every now and then IDA would send letter/email to the company telling them to block sites, a whole list. after legal team vent through, it was passed to system team process. one of my task was to process that..... well, that censorship only applies to residential customers. commercial customer no such censorship.