LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - General
User Name
Password
Linux - General This Linux forum is for general Linux questions and discussion.
If it is Linux Related and doesn't seem to fit in any other forum then this is the place.

Notices


Reply
  Search this Thread
Old 01-14-2008, 12:22 PM   #1
davcefai
Member
 
Registered: Dec 2004
Location: Malta
Distribution: Debian Sid
Posts: 863

Rep: Reputation: 45
linuxsucks.org


I came across a reference to www.linuxsucks.org and tried to visit the site to see what it is about.

To my surprise, on 2 Debian Linux PCs I found myself connected to localhost! Pinging the site also returned localhost.

On a Windows 2000 PC (No web server installed) I got a 404 error and pinging also returned localhost.

My network is a 192.168...... one and connects via a router and ADSL modem. I cannot find anything in the router setup to explain this behaviour.

Could anybody help explain this and have I been compromised?
 
Old 01-14-2008, 12:32 PM   #2
b0uncer
LQ Guru
 
Registered: Aug 2003
Distribution: CentOS, OS X
Posts: 5,131

Rep: Reputation: Disabled
I hardly think you've "been compromised" - does the same for me as well. And I doubt it's nothing brain-cracking, but something is forwarding you (me) back to localhost as soon as the address is resolved funny, I'd say. Traceroute might give something..
 
Old 01-14-2008, 01:08 PM   #3
okmyx
Member
 
Registered: May 2004
Location: Cornwall, UK
Distribution: Ubuntu 8.04
Posts: 464

Rep: Reputation: 31
Lol.......

DNS resolution for www.linuxsucks.org resolves to 127.0.0.1

http://network-tools.com/default.asp...linuxsucks.org

Someone somewhere is having a joke =)
 
Old 01-14-2008, 01:35 PM   #4
davcefai
Member
 
Registered: Dec 2004
Location: Malta
Distribution: Debian Sid
Posts: 863

Original Poster
Rep: Reputation: 45
Thanks for the feedback. This is probably a consequence of this article:

http://hacktivision.com/index.php?bl...&c=1&tb=1&pb=1
 
Old 01-14-2008, 03:12 PM   #5
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Mint
Posts: 17,809

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
well......

whois linuxsucks.org gives address and phone number for the domain owner---why not give them a call?

partial output:
Quote:
Registrant Organization:linuxsucks.org
Registrant Street1:6429 W97TH PL STE 101
Registrant Street2:
Registrant Street3:
Registrant City:Westminster
Registrant State/Province:CO
Registrant Postal Code:80021
Registrant Country:US
Registrant Phone:+1.7209886666
Registrant Phone Ext.:
Registrant FAX:
 
Old 01-14-2008, 03:47 PM   #6
Emerson
LQ Sage
 
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~amd64
Posts: 7,661

Rep: Reputation: Disabled
Hmh, setting domainname to resolve to loopback is fairly common practice. This is what registrars do when a site is spamvertised or otherwise breaks rules.
 
Old 01-14-2008, 03:58 PM   #7
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Rep: Reputation: Disabled
Dont think you will get much joy phoning 1.7209886666!!
 
Old 01-15-2008, 07:49 AM   #8
pixellany
LQ Veteran
 
Registered: Nov 2005
Location: Annapolis, MD
Distribution: Mint
Posts: 17,809

Rep: Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743Reputation: 743
Quote:
Originally Posted by dive View Post
Dont think you will get much joy phoning 1.7209886666!!
I guess I'm slow this AM....it looks like a real phone number (1 = usa, 720 = Denver, etc.)
Did you try it?
 
Old 01-15-2008, 07:53 AM   #9
dive
Senior Member
 
Registered: Aug 2003
Location: UK
Distribution: Slackware
Posts: 3,467

Rep: Reputation: Disabled
Not phoning it from the UK. But we usually would write it +17209886666 without the .
 
Old 01-17-2008, 11:25 AM   #10
d3k4y
LQ Newbie
 
Registered: Jan 2008
Posts: 1

Rep: Reputation: 0
[QUOTE=davcefai;3022223]Thanks for the feedback. This is probably a consequence of this article:


Yeah, the site was up when I wrote the article. Note, that I did not mean for the site to get hit with a ton of traffic or encourage anyone to do anything malicious. The article actually got dugg, and linked to by 5 or 6 very popular sites resulting in thousands of visitors to my article in a short period of time. I'm guessing most of the visitors could not resist the temptation to check out a site with a URL linuxsucks.org. At first, it just was giving a 500 error, and then someone flipped the DNS to point to 127.0.0.1. If anyone knows the guy who runs the site, traffic has since died down on that article and it is probably safe to put the site back up.

Also Note: Yes, I still google my own site, cuz I'm lame.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
freebsdforum.org or bsdforum.org are they 'jeremy' forum websites? t3gah LQ Suggestions & Feedback 1 06-12-2005 10:06 PM
X11.org and Xfree86.org question caps_phisto Linux - General 1 11-16-2004 05:42 PM
Have a look at this site www.linuxsucks.com! Bert Linux - General 20 05-19-2002 02:49 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - General

All times are GMT -5. The time now is 06:05 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration