14.06.12 09:56, Marcus Meissner написав(ла):
On Thu, Jun 14, 2012 at 01:56:49AM +0300, Gruz wrote:
I've enabled the daemon, surfed a little to meet the problme (several fisrt minutes that pravda.com.ua work ok) and met that redirect again. Here is the log for this time. Beginning from the previous stop.
You quoted in a private mail that pravda.com.ua changed to a redirect to a fishy meta search website.
What I suspect is:
- Your DNS nameresolution goes via the WORKGROUP$ browser
- It either hangs (because this windows box is not online or some such), OR
- The windows machine serving that is affected by a DNS entry changing virus and serves back this strange search engine.
Or your local system might point to a DNS entry that belongs to such a spam company.
If you stop nmbd, is the redirect still there?
Check /etc/resolv.conf for the nameserver in use.
Ciao, Marcus
If I stop nmbd the redirect is gone. That is the only way I can stop redirecting. After enabling it for a couple of minutes I don't have the redirect. pravda.com.ua is an oppositional media. I thought that it could be a government test before elections to block it. But I have another non-media, small commercial web-site radion.com.ua blocked. In a very alike way, but not the same way. The blocking stops when nmbd is stopped, so the root of the problem is the same. I have no windows machines in my LAN (2 PCs and ADSL modem-router). I tried to use google DNSes at both - my machine and the ADSL modem. When nmdb is on the redirect is still there. gruz@linux-7dyq:~> cat /etc/resolv.conf ### /etc/resolv.conf file autogenerated by netconfig! # # Before you change this file manually, consider to define the # static DNS configuration using the following variables in the # /etc/sysconfig/network/config file: # NETCONFIG_DNS_STATIC_SEARCHLIST # NETCONFIG_DNS_STATIC_SERVERS # NETCONFIG_DNS_FORWARDER # or disable DNS configuration updates via netconfig by setting: # NETCONFIG_DNS_POLICY='' # # See also the netconfig(8) manual page and other documentation. # # Note: Manual change of this file disables netconfig too, but # may get lost when this file contains comments or empty lines # only, the netconfig settings are same with settings in this # file and in case of a "netconfig update -f" call. # ### Please remove (at least) this line when you modify the file! nameserver 192.168.1.1 #nameserver 8.8.8.8 192.168.1.1 is my ADSL router. It seems that the problem is in my software rather then a remote problem as I have another machine in my LAN whish is not affected. Well, but the other machine has no nmbd process running. Mine, the affected, is OpenSuse 12.1. The other has lubuntu. I have to investigate how to run samba at lubutntu to be sure that the other machine is or is not affected. That would be a useful info. -- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-security+owner@opensuse.org