Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

for some reason, certain outgoing traffic on my server gets routed to the apache webserver i am running. this problem just started happening. i have the webserver set up to use vhosts, the webserver config hasn't been changed for probably a month.

if i try to open a connection to say google.com (note their is no www in the address), the page that shows is the default page for my webserver (meaning the site doesn't have a vhost). if i would have used www.google.com, it would show the expected google homepage.

i don't know why this started happening, it is really weird. any help? running centos 6.3 x64

edit: i see the default page for my webserver if i use the webserver as a socks proxy for my computer at home. i just downloaded vnc and firefox on the server and tried navigating on there, it goes to the default webserver page too. if i use wget, it gets the proper page from the real google website. other processes on the server that try to open a connection to google.com (as well as other websites) show up in apache log files as well. from the machine, i can ping google.com and get the proper ip address it maps to.

share|improve this question
    
Have you changed anything related to DNS recently? For example, do you have the wildcard *.yourdomain.com referring to your webserver, and have 'search yourdomain.com' in your /etc/resolve.conf on your client? – jsbillings Aug 3 '12 at 18:44
    
i haven't changed anything recently related to dns or the webserver. the webserver runs a few websites, all with different domains. i dont have a search directive in /etc/resolv.conf (i never really understood what it does) – Soaz Aug 3 '12 at 18:50
    
If you run curl http://google.com (or wget ... on the command line, does it go to your web server? Can you narrow it down to it being your browser alone? – jsbillings Aug 3 '12 at 19:14
    
i added a paragraph to the end of original post with more information on when it occurs and when it doesnt – Soaz Aug 3 '12 at 19:45
1  
It sounds like you didn't intentionally setup your system to proxy, but yet it is. Were you hijacked? Am I reading this wrong? – Tim Aug 3 '12 at 20:50

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.