Michael F. Robbins on Thu, 12 Jun 2003 11:20:16 -0400


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] DNS Packet Redirecting/Rewriting by ISPs


On Thu, 2003-06-12 at 06:36, Chris Magnus Hedemark wrote:
>
> On Thursday, June 12, 2003, at 03:07 AM, Michael F. Robbins wrote:
> > Of all the other hops between my workstation and the
> > server, where might this rewriting be occuring?
> 
> Can you correlate the results of a traceroute to the block of IP's that 
> the DNS query seems to be coming from when it hits your server?

Not at all.  My traceroute results don't even hit the same Class-A block
as the origin of the rewritten DNS requests.  My workstation is on
Verizon DSL, and my server is with DCA (both in Philly).  However, an
arin.net reverse lookup of the IP of packet origin reveals that the
particular block of IPs is owned by a telecom company in Taiwan. 
Indeed, this makes things even more strange.

Michael F. Robbins
mike@gamerack.com

_________________________________________________________________________
Philadelphia Linux Users Group        --       http://www.phillylinux.org
Announcements - http://lists.netisland.net/mailman/listinfo/plug-announce
General Discussion  --   http://lists.netisland.net/mailman/listinfo/plug