Firefox 11.0 "Server not found" even for this Apple Communities Page? Hack?

This is the server forum. Are you using Snow Leopard Server 10.6 OS X Server? (I'm guessing that you are using the OS X client software and not using the server software, in the following answer...)

Please provide details of the "problems" you have experienced and the "workarounds" that you have implemented. URLs, errors, diagnostics and related details could be useful in resolving this.

For the particular DNSchanger botnet attack (and more) that was what was apparently discussed in that SFGate article (and in little technical detail), verify that your OS X and Windows clients are using your ISP DNS servers, or using Google DNS, or the DynDNS folks, or (as various of us utilitize) your own DNS servers, and then usually without forwarders. AFAIK, that was specifically targetting Microsoft Windows platforms, as well.

In general, DNS attacks are independent of browser. They redirect everything. The question is how the changes are made to DNS. That can be via various low-level means, or through an operating system vulnerability, or through software that the user has downloaded and installed; whether it's a tool that was intentionally loaded (and that contained malware), or a bogus video player or other tools, or some other means. DNSchangrer got access into Windows.

I don't think DNSchanger is relevent here. (And much of what I've read about malware in the mass press hasn't been particularly accurate, or particularly useful.)

As for the trigger of your particular issue, this could easily be (innocent) issues with your ISP DNS server(s), with your network connection, with your gateway, or something with the particular client systems. Details of what you are encountering would be useful in help troubleshooting this.

My first assumption would be a DNS error within the ISP DNS server(s). Those can be common, and sometimes quite pernicious. Try setting your DNS to the Google DNS servers (8.8.8.8 and 8.8.4.4) and see if your DNS stabilizes. Here's the (Applications > Utilities > Terminal.app) Terminal.app command that will flush your local DNS caches (on 10.6 and later), and reload from your (existing, or new) DNS server(s); invoke this after changing your DNS servers.

sudo killall -HUP mDNSResponder

This requires you to enter your Administrative password, but will not make changes to your configuration beyond flushing your local DNS caches.

I use U-verse (about 4 years) and never have the problems like you describe. But I also don't use U-verse's DNS either. I recommend you use OpenDNS (208.67.222.222, 208.67.220.220).

Note, OpenDNS has an added benefit in attempting to intercept callbacks by flashback trojans.

Worried about Mac malware? Just set up OpenDNS.

Goldenbill wrote:

I've been having this problem for sometime now and find that many people have the same problem. Just read in the SFGate that there has been a monstrous hack on computers that the FBI have circumvented and recently jailed the perps but the FBI coverage will cease in July -- .

Please go to http://www.dcwg.org/ to detect, fix and prevent this issue.

Look at your local DNS settings. Launch System Preferences.app and > Networking > select your "connected" network controller in the left > click the Advanced... button > click DNS. Compare those DNS server IP address settings against either your ISP-recommended DNS server settings, or (as a test) switch those over to (just) the Google DNS servers (8.8.8.8 and 8.8.4.4), and see if those work.

If you don't know your ISP-recommended DNS settings, check your ISP support web page or call your ISP directly.

The DNS server settings will tend to vary by your particular location within your ISP's network; they're usually localized to where you are.

That OpenDNS blog entry was rather lacking in details (and entirely glossed over the need to learn how to not get infested by the next wave of malware junk that'll undoubtedly arrive), but then that earlier SFGate story was also rather light on details, too.