CentOS - Dec 2019 - midco stealling searches, was browsers slowing Centos 7 installation to a crawl

On Tue, Dec 03, 2019 at 02:03:10PM -0600, Michael Hennebry
wrote:
> I'm using the default I got when I installed centos 7.
> Was not aware of any alternatives.
> 
> > ... Run 'nmcli con' to get a list of your network
> 
> [root at localhost ~]# nmcli con
> NAME                UUID                                  TYPE      DEVICE
> Wired connection 1  e4c3a05e-5f33-3ae8-af71-31b70ecf040b  ethernet  enp0s25
Your connection's name is "Wired connection 1".  The device name
is
enp0s25. 

> [root at localhost ~]#
> 
> > connections, and then run 'nmcli con edit "Connection
Name"' (replace
> > "Connection Name" with the name of your ethernet
connection).  You can
> > then set ipv4.ignore-auto-dns to 'yes' and then set ipv4.dns
and
> > ipv4.dns-search.  This should override what DHCP sets.
> 
> [root at localhost ~]# nmcli con edit enp0s25
> Error: Unknown connection 'enp0s25'.
> [root at localhost ~]# nmcli con edit eth0
> Error: Unknown connection 'eth0'.
> [root at localhost ~]# nmcli con edit  enp0s25 Error: Unknown connection
> 'enp0s25'.
> [root at localhost ~]#
You need to use the connection name, not the device name.

-- 
Jonathan Billings <billings at negate.org>

For whatever reason,
the problem I was trying to solve seems to have gone away.
I can type in firefox's search box without midco stealing searches.
Something changed resolv.conf behind my back.
search midcoip.net
is there again.
I hadn't rebooted or changed firefox's preferences.
I'm guessing it was when I turned the connection off and on.
To be sure my joy was not tempory, I rebooted.
midco still not stealing searches.

I wish I knew what the problem had been and what fixed it.

-- 
Michael   hennebry at web.cs.ndsu.NoDak.edu
"Sorry but your password must contain an uppercase letter, a number,
a haiku, a gang sign, a heiroglyph, and the blood of a virgin."
                                                              --  someeecards

On Tue, 2019-12-03 at 16:33 -0600, Michael Hennebry
wrote:
> For whatever reason,
> the problem I was trying to solve seems to have gone away.
> I can type in firefox's search box without midco stealing searches.
> Something changed resolv.conf behind my back.
> search midcoip.net
> is there again.
> I hadn't rebooted or changed firefox's preferences.
> I'm guessing it was when I turned the connection off and on.
> To be sure my joy was not tempory, I rebooted.
> midco still not stealing searches.
> 
> I wish I knew what the problem had been and what fixed it.
> 
The search parameter in resolv.conf is not related in any way to the
searches in the browser. It just defines the domain to be added to
hostnames that you want to resolve. So if you do a name lookup for foo,
the resolver would add  midcoip.net so you get the ip-address for
foo.midcoip.net if foo on its own could not be resolved.

It midcoip wanted to steal your browser searches, it would have to
hijack google.com, but that would not work as the browser would not
connect as the https certificate wold be invalid.
So you need to look at the browser settings to see what is happening
there. DNS is most likely not involved. 
/Louis