LinuxSA Mailing list archives
Index:
[thread]
[date]
[subject]
[author]
From: Alan Kennington <akenning@dog.topology.org>
To : LinuxSA <linuxsa@linuxsa.org.au>
Date: Tue, 16 Nov 1999 05:00:20 +1030
more spooky stuff on the net!
Linux cognoscenti:
Here's a telepathic Internet puzzle.
I browse the web from emu.topology.org
(SuSE 6.2, netscape 4.61), and I get:
www.geekboys.org => Swedish language web page
geekboys.org => English language web page.
I do the same thing from rat.topology.org
(Redhat 5.2, netscape 4.61), and I get:
www.geekboys.org => English language web page
geekboys.org => English language web page
=============================
Part II.
Obviously emu must be getting different DNS resolutions for
the two target addresses. But....
-----------------------------------------------
emu /home/ak> nslookup www.geekboys.org
Server: dog.topology.org
Address: 203.38.148.51
Non-authoritative answer:
Name: www.geekboys.org
Address: 212.78.193.215
emu /home/ak> nslookup geekboys.org
Server: dog.topology.org
Address: 203.38.148.51
Non-authoritative answer:
Name: geekboys.org
Address: 212.78.193.215
-----------------------------------------------
Thye look the same!
And just to check, I try the same on emu:
----------------------------------------------
emu /home/ak> nslookup - emu
Default Server: emu.topology.org
Address: 203.38.148.52
> www.geekboys.org
Server: emu.topology.org
Address: 203.38.148.52
Name: www.geekboys.org
Address: 212.78.193.215
> geekboys.org
Server: emu.topology.org
Address: 203.38.148.52
Name: geekboys.org
Address: 212.78.193.215
----------------------------------------------
I.e. even when the DNS server is emu, I get the same result.
==============================================
Part III.
I check the packet logs.
The results are the same.
I'm always talking to an address that reverse-translates
as theo.spray.se.
==============================================
Part IV.
I try the old telnet 80 trick (which someone mentioned a
week or so ago). I get the following for www.geekboys.org:
------------------------------------------------
emu /home/ak> telnet www.geekboys.org 80
Trying 212.78.194.207...
Connected to www.geekboys.org.
Escape character is '^]'.
GET / HTTP/1.0
HTTP/1.1 200 OK
Date: Mon, 15 Nov 1999 17:57:07 GMT
Server: Apache/1.3.6 (Unix) (Red Hat/Linux) ApacheJServ/1.0
Set-Cookie: Apache=203.38.148.52.12465942688657278; path=/
Last-Modified: Fri, 01 Oct 1999 11:05:33 GMT
ETag: "d6057-88-37f4957d"
Accept-Ranges: bytes
Content-Length: 136
Connection: close
Content-Type: text/html
<HTML>
<HEAD>
<TITLE>SPRAYdio.com</TITLE>
<META HTTP-EQUIV="refresh" CONTENT="0; url=/room1.jsp"/>
</HEAD>
<BODY>
</BODY>
</HTML>
Connection closed by foreign host.
emu /home/ak>
-------------------------------------------------
I.e. I get put through to the file room1.jsp,
which is a Swedish page.
Here is what I get from geekboys.org:
------------------------------------------------
emu /home/ak> telnet geekboys.org 80
Trying 212.78.193.215...
Connected to geekboys.org.
Escape character is '^]'.
GET / HTTP/1.0
HTTP/1.1 200 OK
Date: Mon, 15 Nov 1999 17:58:15 GMT
Server: Apache/1.3.9 (Unix) mod_perl/1.21
Set-Cookie: Apache=203.38.148.52.556942688696909; path=/
Last-Modified: Wed, 20 May 1998 14:59:42 GMT
ETag: "56a87-656-3562efde"
Accept-Ranges: bytes
Content-Length: 1622
Connection: close
Content-Type: text/html
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<TITLE>Test Page for Apache Installation on Web Site</TITLE>
</HEAD>
<!-- Background white, links blue (unvisited), navy (visited), red (active) -->
<BODY
BGCOLOR="#FFFFFF"
TEXT="#000000"
LINK="#0000FF"
VLINK="#000080"
ALINK="#FF0000"
>
<H1 ALIGN="CENTER">
It Worked! The Apache Web Server is Installed on this Web Site!
</H1>
<P>
If you can see this page, then the people who own this domain have just
installed the <A HREF="http://www.apache.org/">Apache Web server</A>
software successfully. They now have to add content to this directory
and replace this placeholder page, or else point the server at their real
content.
</P>
<HR>
<BLOCKQUOTE>
If you are seeing this page instead of the site you expected, please
<STRONG>contact the administrator of the site involved.</STRONG>
(Try sending mail to <SAMP><Webmaster@<EM>domain</EM>></SAMP>.)
Although this site is
running the Apache software it almost certainly has no other connection
to the Apache Group, so please do not send mail about this site or its
contents to the Apache authors. If you do, your message will be
<STRONG><BIG>ignored</BIG></STRONG>.
</BLOCKQUOTE>
<HR>
<P>
The Apache
<A
HREF="manual/index.html"
>documentation</A>
has been included with this distribution.
</P>
<P>
The Webmaster of this site is free to use the image below on
an Apache-powered Web server. Thanks for using Apache!
</P>
<DIV ALIGN="CENTER">
<IMG SRC="apache_pb.gif" ALT="">
</DIV>
</BODY>
</HTML>
Connection closed by foreign host.
---------------------------------------------------
This is totally different English page.
=========================================================
Part V.
Question:
How does the server know to send me different stuff according
as I refer to the same IP address by two names -- even when
I use telnet (which gives the same results as netscape)?
I think this is truly spooky.
The guy running the site is trying to fix things up
by latering the DNS. So this might not happen by the time
you get this message.
But if you _do_ get Swedish for www.geekboys.org,
please let me know.
And if you understand Internet telepathy, I'm happy to hear
any theory!
Cheerio,
Alan Kennington.
--
LinuxSA WWW: http://www.linuxsa.org.au/ IRC: #linuxsa on irc.linux.org.au
To unsubscribe from the LinuxSA list:
mail linuxsa-request@linuxsa.org.au with "unsubscribe" as the subject
Index:
[thread]
[date]
[subject]
[author]
Return to the LinuxSA Mailing List Information Page