whfsdude
Premium
join:2003-04-05
Washington, DC
edit:
August 24th, @07:19AM
| reply to whfsdude
Re: Oh No They Didn't!
These are what I've been using
207.69.188.186, 207.69.188.185
Edit: It appears they've stopped doing it now but be aware they might start doing it again. |
|
Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI | OK, those are ns1/ns2.mindspring.com which I use as forwarders, so I'll see it if it happens again. Good catch. |
|
Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:
edit:
August 24th, @09:30AM
| reply to whfsdude
They are doing it now. Bastards!  |
|
Karl Bode
News Guy
join:2000-03-02 | Can I get some additional confirmation from other Earthlink users on this? |
|
whfsdude
Premium
join:2003-04-05
Washington, DC
| said by Karl Bode  :Can I get some additional confirmation from other Earthlink users on this? It should work if you just set your DNS servers to ns1.earthlink.net
Here are the IPs:
will$ host ns1.earthlink
ns1.earthlink has address 209.86.66.91
ns1.earthlink has address 209.86.66.92
ns1.earthlink has address 209.86.66.93
ns1.earthlink has address 209.86.66.94
ns1.earthlink has address 209.86.66.95
ns1.earthlink has address 209.86.66.90 |
|
vinnie97
join:2003-12-05
Mesquite, TX | With no DNS servers entered, I don't get this redirection. |
|
whfsdude
Premium
join:2003-04-05
Washington, DC
| said by vinnie97 :With no DNS servers entered, I don't get this redirection. I wonder if ASDL2+ uses Covad's DNS servers.  |
|
Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:
| I'm on Covad regular DSL and this is what IPCP feeds me:
2006-08-24 12:08:06 E |PPP |IPCP nak option: 3
2006-08-24 12:08:06 E |PPP |IPCP nak option: 129
2006-08-24 12:08:06 E |PPP |IPCP nak option: 131
2006-08-24 12:08:06 E |PPP |IPCP up ip: 68.165.8.10x, gw: 172.31.255.251, dns: 207.69.188.186, 207.69.188.185
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time? |
|
whfsdude
Premium
join:2003-04-05
Washington, DC | Doctor Olds, You're seeing the redirects right? |
|
Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
 ·EarthLink
edit:
August 24th, @12:59PM
| I suggest direct examples of this phenomena - I do NOT see it here, using below. If you don't like nslookup, use dig. :-)
C:\>nslookup earthlinkmustdie.dslreports.com 207.69.188.186
Server: ns2.mindspring.com
Address: 207.69.188.186
*** ns2.mindspring.com can't find earthlinkmustdie.dslreports.com: Non-existent domain
C:\>nslookup earthlinkmustdie.dslreports.com ns1.earthlink.net
Server: ns1.earthlink.net
Address: 207.217.126.41
*** ns1.earthlink.net can't find earthlinkmustdie.dslreports.com: Non-existent domain
|
|
whfsdude
Premium
join:2003-04-05
Washington, DC
| I get the same results as you when I do a ns lookup or a dig but yet the redirects continue to happen.
I'm just using the point of ping to point out that I don't have a proxy or anything on my web browser to cause this to happen.
PING www.fdashkadflskhh.com (209.86.66.94): 56 data bytes
64 bytes from 209.86.66.94: icmp_seq=0 ttl=56 time=671.848 ms
64 bytes from 209.86.66.94: icmp_seq=1 ttl=56 time=23.596 ms
64 bytes from 209.86.66.94: icmp_seq=2 ttl=56 time=28.662 ms ;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 58320
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;www.www.fdashkadflskhh.com. IN A
;; AUTHORITY SECTION:
com. 900 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 1156444249 1800 900 604800 900
;; Query time: 1133 msec
;; SERVER: 207.69.188.186#53(207.69.188.186)
;; WHEN: Thu Aug 24 14:33:31 2006
;; MSG SIZE rcvd: 117 |
|
Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:
| reply to whfsdude
said by whfsdude :Doctor Olds, You're seeing the redirects right? Sadly Yes.  I do not like it one bit. I thought Verisign pulled this redirect crap and ICANN got them to stop it from using SiteFinder. I didn't like it back then either.
»www.icann.org/topics/wildcard-history.html
Who does EL think they are?
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time? |
|
Doctor Olds
I Need A Remedy For What's Ailing Me.
Premium,VIP
join:2001-04-19
1970 442 W30
clubs:
edit:
August 24th, @05:27PM
| reply to whfsdude
They are using bearfruit.com / barefruit.co.uk to do this. Looks to be UK based.
»barefruit.com/?page=home
The IPs EL has setup to redirect when DNS fails:
209.86.66.90 elydm.01.am.barefruit.com
209.86.66.91 elydm.02.am.barefruit.com
209.86.66.92 elydm.03.am.barefruit.com
209.86.66.93 elydm.04.am.barefruit.com
209.86.66.94 elydm.05.am.barefruit.com
209.86.66.95 elydm.06.am.barefruit.com
Go watch the Flash Intro at bearfruit to see what they do.
»www.barefruit.com/?page=home
Q&A
»www.barefruit.com/?page=Q+%26+A
»www.bluecoat.com/solutions/sp/internet.html
quote:
ISPs can also provide revenue from the errors that users produce. By redirecting requests to services such as from Barefruit (www.barefruit.com), ISPs can receive advertising revenue from error pages at the same time as providing a branded and differentiated service to their users.
The more I look the madder I get!!
»www.barefruit.co.uk/?page=solution
quote:
The Barefruit Solution
Because Barefruit operates at the proxy server level, when subscribers encounter errors from any URL they visit, the error pages are replaced with Barefruit Results Pages.
Barefruit pages are flexible in design and can be adapted to represent your brand using an agreed template. Subscribers perceive the pages to be an improvement in the service and technology from their ISP.
The Barefruit Process
This sucks!
Regards,
Doctor Olds
--
What’s the point of owning a supercar if you can’t scare yourself stupid from time to time? |
|
Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·EarthLink
edit:
August 24th, @08:33PM
| reply to Doctor Olds
Nevermind... I see it now
AHA! Only Windows queries get occasional redirects!
I have to set my box to use ns2.mindspring.com and about 50% of nslookups for the SAME MALFORMED DOMAIN gets the 209.86.66.9x addresses returned. Hmmm... at least I know I'm not nutso.
My usual BIND-NT server, even when using ns2.mindspring.com as a forwarder, refuses to show this even when trying random jibberish domains. Not sure this means anything, just a curiosity.  |
|
whfsdude
Premium
join:2003-04-05
Washington, DC
| reply to Bill_MI
Re: Nevermind... I see it now
said by Bill_MI :AHA!My usual BIND-NT server, even when using ns2.mindspring.com as a forwarder, refuses to show this even when trying random jibberish domains. Not sure this means anything, just a curiosity. I think if you set your DNS timeout low it wpn't show. I know it doesn't show all the time in Safari because of that. However, in Camino (Firefox engine over cool cooca app interface goodness) it shows all the time. Unless you get so pissed off you change the DNS servers on your router |
|
Bill_MI
Bill In Michigan
Premium,MVM
join:2001-01-03
Royal Oak, MI
·EarthLink
edit:
August 24th, @10:25PM
| Yes, timing seems to be everything and this almost looks like some kind of kloodge in Earthlink's DNS. When the redirects respond it's always delayed slightly while a failure to find the domain is very quick.
I happen to be playing with VMWare running a Ubuntu appliance and nslookup must give up very quickly because I cannot get those IPs noway nohow. On my Win2K box it's easy but no 50% anymore... more like 10% does it get the redirected IPs.
EDIT: I run:
nslookup fhyudsghedghdv.com 207.69.188.186
...over and over and eventually get the 209.86.66.9x addresses in between several "Non-existent domain" responses. |
|
