Skip to content

Instantly share code, notes, and snippets.

  • Star 83 You must be signed in to star a gist
  • Fork 2 You must be signed in to fork a gist
Star You must be signed in to star a gist
Embed
What would you like to do?
How to disable the very little-known AT&T setting that can appear to hijack your home DNS lookups and redirect to 104.239.207.44

How to disable the very little-known AT&T setting that can appear to hijack your home DNS lookups and redirect to 104.239.207.44

Issue

DNS queries on home network suddenly resolving hosts to 104.239.207.44.

Symptoms

You will see SPORADIC mis-resolutions of EVERYTHING to that 104.239.207.44 address if their crappy router happens to hear your PC's DHCP request - EVEN IF ANOTHER DHCP SERVER ON THE NETWORK assigns the ultimate address.

Do an IPCONFIG /ALL on the PC in question, and look carefully only at the DNS SERVER line....and note it is wrongfully THE ATT ROUTER (192.168.1.254 in my case)!.  In almost every case, simply preforming a IPCONFIG /RENEW right there and again performing the /ALL, will then correctly show that YOUR DHCP SERVER'S ASSIGNED DNS SERVER is now listed.

Cause

Now, what REALLY took friggin digging including phone calls to finally find an engineer to let the cat out of the bag is why the "104.239.207.44" address?  Where is that coming from?

So my bet is you also don't know that by default AT&T has taken upon itself to forcibly inject it's own DNS server (as the router) with the latest round of firmware and unless you TAKE ACTION TO OPT-OUT, will intercept your DNS queries via new changes in router firmware pushing out the router as DNS server.

AT&T's VERY HIDDEN "helper" redirection for DNS that YOU MUST OPT-OUT of is named "DNS Error Assist" which causes this unwanted behavior.

Solution

Here is how to disable AT&T's "DNS Error Assist" service on your account. 

NOTE, this does NOT fix the recent router firmware issues that also re-enabled IPv6 without notifications that is also allowing THEIR ROUTER to continue to hand-out DNS even when you set a single IP pool range for DHCP with a non-existent reservation (which should in effect kill all DHCP on their router from handing out ANYTHING). This appears to be a firmware issue with no known current workarounds other than to take precautionary measures to ensure your DHCP replies first.

  1. Navigate to att.com and in the upper-right LOGIN
  2. Click YOUR NAME, then VIEW PROFILE
  3. Click "Communication preferences".
  4. Click "Privacy Settings".
  5. Click "DNS Error Assist " and FRIGGIN CLICK OPT-OUT!!  This is what is redirecting (via the router) your DNS queries ACTIVELY TO THEIR SERVER (104.239.207.44 is an AT&T address via Rackspace).

(OPTIONAL):  While there, you may also choose to click "External Marketing & Analytics Reports", "Relevant Advertising", and "Enhanced Relevant Advertising" and also OPT-OUT of all of those that they also DO NOT TELL YOU THAT YOU HAVE ENABLED ON YOUR ACCOUNT.

Note this is actually a per-use back-end server setting and as you will see the DNS setting says it can take up to 24hrs whereas the more "typical" privacy crap of the advertising etc. will tell you up to a week to be effective, further supporting that the "DNS error assist" is an infrastructure-based setting being pushed to your router that they not only know they have recently put into place, but have the ability to disable.

@MisterMeanor
Copy link

MisterMeanor commented Apr 28, 2023

Update: This setting doesn't work. DNS redirection still occurs.

Sometimes it worked for me and sometimes it didn't. I had to be persistent. When it works, you will know it. You'll get to screens that allow you to actually turn off the redirect. Be patient!

It appears to be a little different now. In the upper left, select My AT&T, then Privacy Settings. Then the third box should have the button that turns it off.

@csmicfool
Copy link

Update: This setting doesn't work. DNS redirection still occurs.

Sometimes it worked for me and sometimes it didn't. I had to be persistent. When it works, you will know it. You'll get to screens that allow you to actually turn off the redirect. Be patient!

That page appears during a redirect? in the modem?

@ksylvan
Copy link

ksylvan commented Apr 29, 2023

Update: This setting doesn't work. DNS redirection still occurs.

Sometimes it worked for me and sometimes it didn't. I had to be persistent. When it works, you will know it. You'll get to screens that allow you to actually turn off the redirect. Be patient!

That page appears during a redirect? in the modem?

Yes. @csmicfool The ATT Gateway sometimes did this.

I had the great joy of ditching that shit recently when I switched to XFINITY where their XFi gateway has a real "bridge" mode so I can use their cable modem as a simple modem and have my nice ASUS mesh router handle my in-home network.

Also, using Quad9 DNS settings in my WAN setup (instead of accepting the defaults handed down by their handshake process) means my home network browsing info isn't collectible by XFINITY either.

@tance77
Copy link

tance77 commented Jul 7, 2023

Screenshot 2023-07-07 at 11 29 40 AM

To turn off "Personalized" you must turn off "Personalized Plus".

As of 2023-07-07 they also be sharing your personal details as well here is the direct link once you are logged in to https://att.com

https://www.att.com/acctmgmt/profile/privacychoices

@Drew-Daniels
Copy link

Thanks a lot for this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment