On Thu, 30 Jun 2005 12:55:42 +0300 (IDT)
Peter <[EMAIL PROTECTED]> wrote:
>
> I caught Mozilla connecting to 140.211.166.210:443
>
> This ip resolves to '.' but all its neighbors 140.211.166.{209,211} etc
> resolve to mozilla hosts. The ip range is owned by the Oregon (USA)
> Education System (cf. ARIN Whois).
>
> Can anyone confirm that their Firefox connects to an address in this
> range without being asked to at least once a day. The connection causes
> a certain amount of disk activity. I will try to look at what changed.
>
> I have software updates turned off. I will search the firefox binary and
> all files for this IP in many forms and I will booby trap my dns to log
> any activity in this range.
>
> Please share information on this.
>
> Questions:
>
> 1. If it's a RSS feed update or such public information, then why does
> it use 443 (https)
> 2. If it is not public information, then WHAT is it ?
> 3. Why has this IP no human-readable DNS name when all its neighbors
> have one.
>
> Peter
it does have a human readable dns name (and you can connect
https://140.211.166.210:443)
$ dig addons.mozilla.org
; <<>> DiG 9.2.4 <<>> addons.mozilla.org
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16706
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 5, ADDITIONAL: 2
;; QUESTION SECTION:
;addons.mozilla.org. IN A
;; ANSWER SECTION:
addons.mozilla.org. 60 IN A 140.211.166.211
addons.mozilla.org. 60 IN A 140.211.166.210
;; AUTHORITY SECTION:
mozilla.org. 558 IN NS ns.meer.net.
mozilla.org. 558 IN NS ns.mozilla.org.
mozilla.org. 558 IN NS ns1.oregonstate.edu.
mozilla.org. 558 IN NS ns2.meer.net.
mozilla.org. 558 IN NS ns2.oregonstate.edu.
;; ADDITIONAL SECTION:
ns.meer.net. 157341 IN A 140.174.164.2
ns2.meer.net. 157341 IN A 216.206.136.2
;; Query time: 268 msec
;; SERVER: 212.150.49.10#53(212.150.49.10)
;; WHEN: Fri Jul 1 17:37:44 2005
;; MSG SIZE rcvd: 211
>
> =================================================================
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
>
> +++++++++++++++++++++++++++++++++++++++++++
> This Mail Was Scanned By Mail-seCure System
> at the Tel-Aviv University CC.
>
+++++++++++++++++++++++++++++++++++++++++++
This Mail Was Scanned By Mail-seCure System
at the Tel-Aviv University CC.
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
