Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

for some reason, certain outgoing traffic on my server gets routed to the apache webserver i am running. this problem just started happening. i have the webserver set up to use vhosts, the webserver config hasn't been changed for probably a month.

if i try to open a connection to say google.com (note their is no www in the address), the page that shows is the default page for my webserver (meaning the site doesn't have a vhost). if i would have used www.google.com, it would show the expected google homepage.

i don't know why this started happening, it is really weird. any help? running centos 6.3 x64

edit: i see the default page for my webserver if i use the webserver as a socks proxy for my computer at home. i just downloaded vnc and firefox on the server and tried navigating on there, it goes to the default webserver page too. if i use wget, it gets the proper page from the real google website. other processes on the server that try to open a connection to google.com (as well as other websites) show up in apache log files as well. from the machine, i can ping google.com and get the proper ip address it maps to.

share|improve this question
    
Have you changed anything related to DNS recently? For example, do you have the wildcard *.yourdomain.com referring to your webserver, and have 'search yourdomain.com' in your /etc/resolve.conf on your client? –  jsbillings Aug 3 '12 at 18:44
    
i haven't changed anything recently related to dns or the webserver. the webserver runs a few websites, all with different domains. i dont have a search directive in /etc/resolv.conf (i never really understood what it does) –  Soaz Aug 3 '12 at 18:50
    
If you run curl http://google.com (or wget ... on the command line, does it go to your web server? Can you narrow it down to it being your browser alone? –  jsbillings Aug 3 '12 at 19:14
    
i added a paragraph to the end of original post with more information on when it occurs and when it doesnt –  Soaz Aug 3 '12 at 19:45
1  
It sounds like you didn't intentionally setup your system to proxy, but yet it is. Were you hijacked? Am I reading this wrong? –  Tim Aug 3 '12 at 20:50

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.