Facebook or Twitter Redirecting to Myspace or Other Websites
Came across this admittedly weird issue. Randomly over the past few months, I try to go to Facebook or Twitter and end up being redirected to another website, usually MySpace. See screenshot for an example of what I saw a few moments ago.
This time, it just forwarded me to a Samuel Garcia (SR388) so I punched it into Google, and low and behold others are having this same exact issue! Facebook redirects to MySpace.
They also posted a fix -- flush the DNS cache on your local system via the command:
ipconfig /flushdns
So what could be causing this issue? I thought it might be some sort of DNS hijacking but everything I could check seemed OK. It happens to multiple computers on my network. Finally a comment on that threat points over to the Linksys forum about DNS issues with many others having the same problem. It appears that it might be some sort of Linksys firmware issue.
Other specifics of my network - I have one router running stock Linksys firmware (WRT310N) and an old model WRT54G running Tomato firmware. I have the WRT310N getting DNS from the WRT54G, and the WRT54G is using OpenDNS servers for DNS resolution.
Next time this happens I'm going to use wireshark to try to get some insight into the problem.
Is anyone else seeing this weird issue?


Comments 28 Comments
Just to see if there is a pattern here, I'm On a Linksys WRT160Nv3 on Comcast
dscacheutil -flushcache
In the Terminal.
What I'm trying now is overriding the DHCP assigned DNS servers with my ISP ones, rather than having the machines relay DNS requests through the router. Something is causing the DNS cache on the router itself to become poisoned somehow.
Location: Northern Alabama, AT&T DSL.
If it persists, I'll try going to DD-WRT firmware next.
Thanks for the input everyone!
Maybe now John will know how to help me fix it - hahaaaa
1) Do an ipconfig and you'll see that your first DNS server is 192.168.1.1
2) write down the last two DNS server IP addresses
3) go to your network adapter settings and change the TCP/IP DNS properties from automatic to manual and add your two IP addresses
4) verify the changes by typing ipconfig /all
(confirm that 192.168.1.1 is no longer in the list)
5) make this change on every computer on your network
C:\Documents and Settings\Sasquatch>tracert www.facebook.com
Tracing route to www.facebook.com [216.178.39.11]
over a maximum of 30 hops:
1 * <1><1>
2 7 ms 9 ms 16 ms cpe-24-94-20-1.san.res.rr.com [XX.XX.XX.XX]
3 8 ms 9 ms 7 ms wcsdca1-gsr1-ge2-1-6.san.rr.com [24.25.193.97]
4 9 ms 7 ms 8 ms gig5-0-0.wcsdca1-gsr3.san.rr.com [24.25.192.14]
5 8 ms 8 ms 10 ms so-0-0-0.gar1.SanDiego1.Level3.net [209.0.8.1]
6 9 ms 10 ms 9 ms ae-14-14.car1.SanDiego1.Level3.net [4.69.142.74]
7 15 ms 17 ms 17 ms ae-5-5.ebr1.LosAngeles1.Level3.net [4.69.133.206]
8 11 ms 12 ms 12 ms ae-4-90.edge1.LosAngeles9.Level3.net [4.69.144.202]
9 11 ms 12 ms 11 ms ve201.lax.myspace.com [4.71.32.22]
10 191 ms * 14 ms vl341.cs1.lax1.myspace.com [204.16.35.133]
11 13 ms 11 ms 13 ms vl3551.cs1.els2.myspace.com [216.178.35.73]
12 13 ms 13 ms 13 ms 216.178.39.11
Trace complete.
must not use router dns server, but configure so that only isp dns servers are used.
always liked linksys products, now this was my last if they don't fix it.
Virus trojans, spyware all scanned removed up to date and nothing detected.
I've found my own solution, but I'm using dnsmasq on a ubuntu server and using the specific nameservers in the dnsmasq.conf (server=<isp>t have to change the network properties on every every machine connected to my network. May help someone with a similar set up.