Home page logo
/

nanog logo nanog mailing list archives

Re: "Big Red"
From: Aaron <epiphani () genesis powertrip net>
Date: Thu, 24 May 2001 22:26:23 -0700 (PDT)


If an address doesnt resolve, then how could the client have reached  
webserver that redirects it on 404?

Chances are the client ran something that replaced the default lookup
error page for IE with redirect HTML.  IE accually uses content from one
of their DLLs to generate those "This page cannot be displayed" things.

Check shdoclc.dll for hacks.  I havent heard of anything that causes this
though.

-Aaron Wiebe

On Thu, 24 May 2001, Mitch Halmu wrote:


It is probably a web server configuration for default error handling.
Look for the following:

<LOCATION /*>
ErrorDocument 404 http://www.bigred.com
</LOCATION> 

--Mitch
NetSide

On Thu, 24 May 2001, Tim Langdell, PhD wrote:


Has anyone heard of "bigred.com"? A client has suddenly discovered that all
of its browser queries that do not resolve (www.rubbishcharacters.com for
e.g.) get diverted to the BigRed search engine web site. No one in the
company is aware of having installed anything that could have intentionally
have caused this effect for DNS failures. Anyone got any ideas what is going
on here? Is it a known problem? Viral or otherwise?

T.L.








  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]