DSL rerouting to an error page?

Forums › One New Zealand (including Vodafone, WxC, Farmside) › DSL rerouting to an error page?

funnyfela

352 posts

Ultimate Geek

#196284 25-May-2016 19:25

Hi guys

A friend of mine has Vodafone DSL a couple of weeks old, all of a sudden all sites she visits route to the above image. I've changed the DNS to 4.4.4.4 and was able to get google to work but thats it.

Tried a new modem, same thing. And no internet on her iPad and iPhone.

Anyone have any ideas?

An IP lookup shows Vodafone core?

203.118.158.93

Neighborhood

Host

unassigned.core.vf.net.nz

Country

New Zealand

If you have to run heating in winter, you don’t own enough computers.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#1559603 25-May-2016 19:45

has she checked the internet connection itself is enabled on vodafones side?

the fact that its forcefully redirecting pages to a given address leads me to suspect its somewhat of a captive portal. Why it is not showing a descriptive page is another question all together.

i would jump to an infection, but that address does appear to be within vodafones core (as per trace results not only the rdns)

i have seen vodafone use the 203.118.158.0/24 range for some of their cache equipment, depend on which you land on.

Google would have worked as likely its set to allow connections to vodafones core, ofwhich they have google caches.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

funnyfela

352 posts

Ultimate Geek

#1559616 25-May-2016 20:05

hio77:

has she checked the internet connection itself is enabled on vodafones side?

the fact that its forcefully redirecting pages to a given address leads me to suspect its somewhat of a captive portal. Why it is not showing a descriptive page is another question all together.

i would jump to an infection, but that address does appear to be within vodafones core (as per trace results not only the rdns)

i have seen vodafone use the 203.118.158.0/24 range for some of their cache equipment, depend on which you land on.

Google would have worked as likely its set to allow connections to vodafones core, ofwhich they have google caches.

Internet was going fine until the other day.

I thought spyware too, so I connected my android phone and still no internet.

and yeah, if its Vodafone's, as an error page it needs more info.

Hmmmm

If you have to run heating in winter, you don’t own enough computers.

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#1559618 25-May-2016 20:10

Maybe vodafone have a "grace" period?

I know a few isps dont enable things on their side until you confirm, but normally thats bloody obvious by something on screen. not a standard nginx page.

Suspect the issue is likely that its meant to be on a vhost and the ip is being redirected to instead. I would say wouldnt that be tested, but we are talking about Vodafone who seem to make that mistake too often with their network core lately.

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.