<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 24/11/2009, at 8:43 PM, Trent Lloyd wrote:</div><blockquote type="cite"><div>Many web browsers and possibly even resolvers try to append ".com", ".com.au" etc to things that don't work - assuming they were mis-typed, I suspect you'll find theres some fairly specific bit of software being the main culprit here, and I'm not sure what it is, but it's fairly non surprising to me personally. I'd love to know what specifically is doing it, though.. i'm going to guess windows something.<br></div></blockquote></div><br><div>Yeah true - I remember back many years ago when it was perfectly valid to just hit up www.csiro, and your dns server would first try looking that up, then use it's local domain name, and step through stripping out parts until it got a hit - so back then (for me), it would have been trying <a href="http://www.csiro.netcon.net.au">www.csiro.netcon.net.au</a>, <a href="http://www.csiro.net.au">www.csiro.net.au</a>, then finally <a href="http://www.csiro.au">www.csiro.au</a>. And yeah, even today browsers will try to be 'helpful' and append .com, .com.au, etc.. - but being a reverse lookup, i was a little surprised - messing up an in-addr.arpa seems like it'd take an actual hands-on screwup ;)</div><div><br></div><div>Although I can't think of any way of tracking it back without one of the ISP's in question doing some logging and seing where on their network the requests are coming from.. Unless anyone has some thoughts on something I can inject in as a bogus record under in-addr.arpa.com.au that would cause whatever it is to reveal itself? If it was messed-up forward lookup, I'd just point it at an unused IP, and tcpdump it for a few hours..</div><div><br></div><div>Cheers,</div><div><br></div><div>DG</div><div><br></div><div><br></div><div><span class="Apple-style-span" style="font-size: 12px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Damien Gardner Jnr<br>VK2TDG. Dip EE. GradIEAust<br><a href="mailto:rendrag@rendrag.net">rendrag@rendrag.net</a> - <a href="http://www.rendrag.net/">http://www.rendrag.net/</a><br>--<br>We rode on the winds of the rising storm,<br> We ran to the sounds of thunder.<br>We danced among the lightning bolts,<br> and tore the world asunder</div><div><br></div></div></span></div></body></html>