[37861] in North American Network Operators' Group
Re: "Big Red"
daemon@ATHENA.MIT.EDU (Aaron)
Fri May 25 03:28:52 2001
Date: Thu, 24 May 2001 22:26:23 -0700 (PDT)
From: Aaron <epiphani@genesis.powertrip.net>
To: Mitch Halmu <mitch@netside.net>
Cc: "Tim Langdell, PhD" <langdell@technologist.com>, nanog@merit.edu
In-Reply-To: <Pine.SOL.3.91.1010524213948.2647z-100000@sunny.netside.net>
Message-ID: <Pine.LNX.4.21.0105242220080.1394-100000@genesis.powertrip.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Errors-To: owner-nanog-outgoing@merit.edu
If an address doesnt resolve, then how could the client have reached
webserver that redirects it on 404?
Chances are the client ran something that replaced the default lookup
error page for IE with redirect HTML. IE accually uses content from one
of their DLLs to generate those "This page cannot be displayed" things.
Check shdoclc.dll for hacks. I havent heard of anything that causes this
though.
-Aaron Wiebe
On Thu, 24 May 2001, Mitch Halmu wrote:
>
> It is probably a web server configuration for default error handling.
> Look for the following:
>
> <LOCATION /*>
> ErrorDocument 404 http://www.bigred.com
> </LOCATION>
>
> --Mitch
> NetSide
>
> On Thu, 24 May 2001, Tim Langdell, PhD wrote:
>
> >
> > Has anyone heard of "bigred.com"? A client has suddenly discovered that all
> > of its browser queries that do not resolve (www.rubbishcharacters.com for
> > e.g.) get diverted to the BigRed search engine web site. No one in the
> > company is aware of having installed anything that could have intentionally
> > have caused this effect for DNS failures. Anyone got any ideas what is going
> > on here? Is it a known problem? Viral or otherwise?
> >
> > T.L.
> >
> >
> >
> >
>
