Website not Forwarding

Symptoms

I am not able to get a website to forward. (See the steps here.) I get the following error message: Address not found. Firefox can't find a server at www.golftrack.mobi.

The forwarding address is working. http://www.kevinmcreynolds.com/apps/gt/index.aspx.

Gathering Information

I called tech support and they told me to wait because of DNS latency. This could be the reason. I also found this website that lets you test your DNS setup: http://www.checkdns.net. I got a lot of information. See the appendix. These seem to indicate the site is setup.

Hypothesis

In 24 hours, the issue should be fixed. The address golftrack.mobi should show up.

Results

I will have to wait.

Reflection

This website (checkdns.net) can be a hacking tool. You get a lot of information that could be used to attack you website. This is a good example of security being decreased by availability. I could mark the website as private but I would have to pay for the services.

Appendix

CheckDNS.NET is testing golftrack.mobi

 

CheckDNS.NET is asking root servers about authoritative NS for domain

Got DNS list for 'golftrack.mobi' from TLD2.ULTRADNS.NET or TLD2.ULTRADNS.NET

Found NS record: ns52.domaincontrol.com[208.109.255.26], was resolved to IP address by c.gtld-servers.net

Found NS record: ns51.domaincontrol.com[216.69.185.26], was resolved to IP address by ans01.domaincontrol.com

Domain has 2 DNS server(s)

 

CheckDNS.NET is verifying if NS are alive

DNS server ns52.domaincontrol.com[208.109.255.26] is alive and authoritative for domain golftrack.mobi

DNS server ns51.domaincontrol.com[216.69.185.26] is alive and authoritative for domain golftrack.mobi

2 server(s) are alive

 

CheckDNS.NET checks if all NS have the same version

All 2 your servers have the same zone version 2008090300

 

CheckDNS.NET tests mail-servers

Domain golftrack.mobi has 2 mail-servers.

Checking mail server (PRI=0) smtp.secureserver.net [64.202.166.12]

Mail server smtp.secureserver.net[64.202.166.12] answers on port 25

<<< 220 pre-smtp15-02.prod.mesa1.secureserver.net ESMTP

>>> HELO www.checkdns.net

<<< 250 pre-smtp15-02.prod.mesa1.secureserver.net

>>> MAIL FROM: <dnscheck@uniplace.com>

<<< 250 ok

>>> RCPT TO: <postmaster@golftrack.mobi>

<<< 550 sorry, mail to that recipient is not accepted (#5.7.1)

>>> RCPT TO: <root@golftrack.mobi>

Connection to mail server smtp.secureserver.net [64.202.166.12] timed out waiting for status 250

Checking mail server (PRI=10) mailstore1.secureserver.net [64.202.166.11]

Mail server mailstore1.secureserver.net[64.202.166.11] answers on port 25

<<< 220 pre-smtp33-02.prod.mesa1.secureserver.net ESMTP

>>> HELO www.checkdns.net

<<< 250 pre-smtp33-02.prod.mesa1.secureserver.net

>>> MAIL FROM: <dnscheck@uniplace.com>

<<< 250 ok

>>> RCPT TO: <postmaster@golftrack.mobi>

<<< 550 sorry, mail to that recipient is not accepted (#5.7.1)

>>> RCPT TO: <root@golftrack.mobi>

Attacked on the Train Details

I was riding home on the training and someone tried to connect to my laptop through Bluetooth. See the graphic in the previous blog. I quickly removed my Bluetooth card.

I went around the train and found a young man and talked to him. He said he did it by accident.

I should not have had my Bluetooth working in discoverable mode.

Attacked on the Train Graphic

See the next blog for details.

Blocked on my Router

I decided to log the Ip addresses that are blocked from router. My router has a log function and I posted the blocked Ips in the previous BLOG.

 

Symptoms

I was not having any issues but I wanted to know how often my router was being attacked.

 

Gathering Information

I am not sure what port 1028 is used for. It might be for a calendar program. I found this information on a link logger site . The internet storm site shows a lot activity on this port. Click here

I found this website with this webpage that allows you to find names for IP addresses.

Ip Address		Host	Port Involved
69.59.240.75		ntp1a-wil.klax1.s.vonagenetworks.net	123
67.177.60.58		Host c-67-177-60-58.hsd1.ut.comcast.net	1026,1027,1028
24.64.199.10		S0106001c2346b44e.br.shawcable.net	1028
216.115.23.76		ntp1b-lv3mc.klga1.s.vonagenetworks.net	123

 

Vonage and Comcast are two of my vendors. The only outside IP is Shawcable. I have sent them an abuse email and I will wait to hear from the.

Reflection

I thought it was interesting that several of block ips were legitimate users. I am having time issues with my Vantage phone. I will open those ports and see what happens.

 

 

Blocking on Router

No Google Docs on Frontrunner

 

Symptoms

I could not connect to Google Documents. I got the error message that noted that I could not connect to a server at 192.168.10.6 with the port 15871. See the graphic in the previous blog. I have found it easier to blog the graphic through Picasa and then to write about.

 

Gathering Information

The ip address for docs.google.com is 209.85.172.100. My ip on the train was 10.0.5.149 and the router ip was 10.0.5.129. Tracert timed out on all hops except to the first router. I could not connect to a browser with 192.168.10.6. This was on a 6 am train and I was told that the train was #3. The text below is trace route output:

 

Tracing route to writely.l.google.com [209.85.173.100]
over a maximum of 30 hops:

 

1 1 ms <1 ms <1 ms 10.0.5.129
2 * * * Request timed out.
3 * * * Request timed out.

(Continues the down to 30)

30 * * * Request timed out.

Trace complete.

Here the complete configuration of my laptop:

 

IPv4 Address. . . . . . . . . . . : 10.0.5.149(Preferred)

Subnet Mask . . . . . . . . . . . : 255.255.255.128

Lease Obtained. . . . . . . . . . : Tuesday, September 23, 2008 6:04:06 AM

Lease Expires . . . . . . . . . . : Tuesday, September 23, 2008 6:34:05 AM

Default Gateway . . . . . . . . . : 10.0.5.129

DHCP Server . . . . . . . . . . . : 10.0.5.129

DNS Servers . . . . . . . . . . . : 10.0.5.129

No Google Docs on Frontrunner Graphic