dns spoofing not working with ettercap

[hongman]

Hi all

Just tried this a few times on my work LAN (it's all good I own it).

I dont know if this affects it - but my DNS server on my target PC is set to a DNS Server, not the default gateway (as it would sometimes be in home environments)

Here is what I did:

#locate etter.dns
/usr/local/share/ettercap/etter.dns
#nano /usr/local/share/ettercap/etter.dns

-I then changed the default microsoft.com to google.com and IP's of 1.1.1.1 (fake IP)

#ettercap -G

Turned on Unified Sniffing
Selected my LAN (eth0)
Scanned for Hosts
Added my Default Gateway and my Target PC as target 1 and 2 respectively
Chose Arp Poisoning, ticked Sniff Remote Connections
Started Sniffing

I then ran arp -a on my target machine to confirm MAC had been changed

Plugins -> Manage Plugins > Double Click on DNS Spoofing

Now, if I browse to www.google.com on the target machine I should be redirected to 1.1.1.1 right?

But it doesnt, and no DNS Spoof are logged in ettercap.

What am I doing wrong?

[LHYX1]

try pressing F5 a couple of times.
ipconfig /flushdns helps too

[hongman]

Yep tried those too

[melissabubble]

yes, I just tried it too and dns spoof isn't working correctly with BT5-RC2 32bit. It is saying that its spoof though in ettercap gtk but its not routing the target IP to my computer. Its just showing the internet connection problem page with the spoofed address still in the address bar.

[hongman]

For me I am running BT5-RC2 64bit installed on my laptop HDD.

Everything looks to be running as per numerous tutorials I have read but it doesnt actually redirect.

Command line is the same.

[LHYX1]

Try using arpspoof & dnsspoof those tools work fine.

[jusEE]

Has anyone got it working?

I'm having the same problem and using R2 too...

[hongman]

I never did get it working by itself, but I believe YAMAS uses ettercap? And it works like a charm, with sslstrip as well.