{"id":1439,"date":"2023-04-10T11:07:17","date_gmt":"2023-04-10T16:07:17","guid":{"rendered":"https:\/\/zewwy.ca\/?p=1439"},"modified":"2023-04-10T17:33:56","modified_gmt":"2023-04-10T22:33:56","slug":"asus-calling-microsoft","status":"publish","type":"post","link":"https:\/\/zewwy.ca\/index.php\/2023\/04\/10\/asus-calling-microsoft\/","title":{"rendered":"ASUS calling Microsoft"},"content":{"rendered":"

<\/span>Back Story<\/span><\/h1>\n

I’ll try to keep this post short as I’m behind on many other posts I have to finish. hahah :S<\/p>\n

Anyway, I was thinking it’s time to update my pihole, when I checked the admin web interface to check for clients to see who’d still be using it for DNS, and then I’d make a list and be prepared to change them as required (any outside of DHCP of course, as I’d simply change the IP there). Now you might be wondering, why change the IP address? Which is a fair question, I could just update the one in question, but I had bigger plans to move it to another server, I didn’t want to give the other server multiple IPs, so I figured it be easier to spin up the new service on that server and simply change the DNS on the DHCP server\/service. Anyway… where was I, oh right, checking the web admin I noticed the top client was my new ASUS RT-AX88U. I was hoping to get a model that supported Tomato like the old RT-N16 I had for so many years which I recently broke and so replaced it with this unit. It currently can’t run Tomato like I managed to do with the RT-N16. So, I just had configured it for AP mode. Figured it doesn’t need to do much else for now besides serve unreal good WiFi.<\/p>\n

Yet it’s calling home to “dns.msftncsi.com”, when I looked up this domain it seems to be used mostly by windows machines to check to make sure they are online.<\/p>\n

<\/span>Fix This<\/span><\/h1>\n

Looking a bit further into it I managed to find this magical Reddit post<\/a> (I really love reddit, I’ve found so many helpful posts there). Anyway let’s see if we can follow the steps on this router.<\/p>\n

<\/span>Step 1 – Enable Access<\/span><\/h2>\n

The source uses telnet, but I’m not a fan of transferring creds in cleartext, unless I know for certain it’s a completely isolated network. Since the router supports SSH, I enabled that instead and logged in. *note* I had to remove the fingerprint from the old RT-N16 I used to SSH into.<\/p>\n

<\/span>Step 2 – Gain Shell Access to your Router<\/span><\/h2>\n

login & password is the same as the web interface.<\/p>\n

\"\"<\/a><\/p>\n

K, with that done, let’s see if we can edit the nvram, but let’s take a look as the OP suggests.<\/p>\n

<\/span>Step 3 – Look deep into NVRAM<\/span><\/h2>\n
nvram show | sort | less<\/pre>\n
I used the less command instead, as my old linux instructor once said “less is more” using less you can use the up and down arrow keys to scroll through the results, and look-e-here: (Press Q to exit less)<\/p>\n
<\/span>Step 4 – Finding the Droids<\/span><\/h2>\n
\"\"<\/a><\/p>\n
The droids I was after. Time to eliminate them.<\/p>\n
<\/span>Step 5 – Kill the Probe Content Droid<\/span><\/h2>\n
nvram set dns_probe_content=127.0.0.1<\/pre>\n
<\/span>Step 6 – Kill the Probe Host Droid<\/span><\/h2>\n
nvram set dns_probe_host=\"\"<\/pre>\n
<\/span>Step 7 – Prevent Droid Resurrection<\/span><\/h2>\n
nvram commit<\/pre>\n
<\/span>Step 8 – Fully Enforce Your New Empire<\/span><\/h2>\n
reboot<\/pre>\n
Verify:<\/p>\n
<\/p>\n
Noice!<\/p>\n","protected":false},"excerpt":{"rendered":"
Back Story I’ll try to keep this post short as I’m behind on many other posts I have to finish. hahah :S Anyway, I was thinking it’s time to update my pihole, when I checked the admin web interface to check for clients to see who’d still be using it for DNS, and then I’d … <\/p>\n
Continue reading “ASUS calling Microsoft”<\/span><\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"sfsi_plus_gutenberg_text_before_share":"","sfsi_plus_gutenberg_show_text_before_share":"","sfsi_plus_gutenberg_icon_type":"","sfsi_plus_gutenberg_icon_alignemt":"","sfsi_plus_gutenburg_max_per_row":"","footnotes":""},"categories":[6,8],"tags":[433,348,434,228],"class_list":["post-1439","post","type-post","status-publish","format-standard","hentry","category-networking","category-server-administration","tag-asus","tag-dns","tag-microsoft","tag-pihole"],"_links":{"self":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/1439","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/comments?post=1439"}],"version-history":[{"count":1,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/1439\/revisions"}],"predecessor-version":[{"id":1440,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/posts\/1439\/revisions\/1440"}],"wp:attachment":[{"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/media?parent=1439"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/categories?post=1439"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/zewwy.ca\/index.php\/wp-json\/wp\/v2\/tags?post=1439"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}