Re: Very Very Strange Problem on port 80 with Apache, IIS, tomcat webservers.

[ABrady <kcsmart kc rr com>]

On Wed, 29 Aug 2001 08:01:20 +0530 (IST) Kiran Kumar M
<kiran pol net in> imparted to us:

> 
> Hai Mikkel,
> 
> Thank you for your reply.
> 
> On Tue, 28 Aug 2001, Mikkel L. Ellertson wrote:
> 
> > On Wed, 29 Aug 2001, Kiran Kumar M wrote:
> > 
> > >
> > > Hai,
> > >
> > > Recently, from Yesterday onwards, I am facing a very strange
> > > problem. Eventhough it is not directly related with Redhat Linux,
> but
> > > every page is pointing to a Redhat Machine, so I am trying to find
> a
> > > solution from this list, if someone help me.
> > >
> > > I have a windows NT machine, there I hosted some sites on Apache,
> and some
> > > in Apache, and some in tomcat web server. I applied the codered
> patch for
> > > IIS. My problem is when I type a particular website (hosted in
> NT), from
> > > any other system (other than hosted machine), pages are
> redirecting to a
> > > Redhat Linux 6.2 machine.
> > >
> > > When I checked the resolving of domain name, it point to properly
> to
> > > corresponding IP. Even, ping, traceroute, SMTP, FTP are working
> fine. But
> > > When I open it in browser (http) it is redircting to Redhat
> machine (for
> > > every site hosted in NT). I was suspected that my Redhat 6.2 was
> attacked,
> > > and finding some malicious function in frequent intervals. Does it
> is
> > > generating the problem?
> > >
> > > I completly reinstalled the NT machine, and again configured the
> sites,
> > > but still the same problem persisting. What could be the reason.
> What
> > > would be the best to proceed.
> > >
> > > I hope web gurus will respond..
> > >
> > > Thanks in advance.
> > >
> > > Thanks,
> > > Kiran
> > >
> > If you are connecting directly to the NT machine, and it is
> redirecting
> > you to another IP, then it is a problem in the NT setup.
> 
> No, it is not redicting when I am trying dirctly on NT machine.
> 
>  
> > If you are hitting another machine first, and it directs the
> connection
> > to another machine based on the host name, or the page requested,
> then
> > that is where to start looking
> >
> > If you have a firewall that is doing port forwarding to specific
> > machines inside the firewall, double check your rules.
> 
> I disablled the firewall, and checked but giving the same result.
>  
> > Another idea would be to telnet to the NT machine on port 80, and
> issue
> > the get for the page you want, and see what you get.
> 
> On NT telnet by default is not enabled. How to enable telnet in NT.

It isn't? Better not tell the workstation install I use at work or the
server install I have sitting next to my REAL machine at home. They both
think they can do telnet. The one at home also has this odd idea that
it's getting through, too!

You gotta choose the RUN command in the menu and type telnet. At least I
haven't seen a default icon for them. One could easily be added,

-- 
I believe the technical term is "Oops!"