[email protected] writes:

> http://forums.vicsig.net [...] If using and older version of firefox
> (from debian 6.0.x everything works OK. If using the version of
> firefox from current testing or the chromium browser from debian 6 one
> gets a cpanel web page with an error message............

Have you reported this to [email protected] ?

> There is nothing real obvious I can see wrong, it only started
> happenning recently and no upgrades have been done on any of my
> systems in recent times and a number of systems do the same thing.

If they're using cpanel, they probably don't know what they're doing, so
it's not surprising they screwed up vhosts or whatnot.  My best guess is
you managed to go to HTTPS for one attempt and hit their default useless
https page.  I just tried to check it myself, but openssl chucks a
wobbly:

    $ openssl s_client -crlf -quiet -connect forums.vicsig.net:https
    139716608243368:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown 
protocol:s23_clnt.c:766:

It looks like they're not actually using TLS on the https port, because

    $ nc forums.vicsig.net https <<<'GET /'
    <html><head><META HTTP-EQUIV="refresh" 
CONTENT="0;URL=/cgi-sys/defaultwebpage.cgi"></head><body></body></html>

While you're at it, you might advise them to close their mysql and
rpcbind ports, to disable unencrypted POP3 and IMAP, and to disable FTP
entirely - http://mywiki.wooledge.org/FtpMustDie (SFTP is vastly
preferable for authenticated uploads; HTTP for serving the content).

All in all, their internet license should probably be revoked.
-- 
twb, extra grumpy because in non-caffeinated ground state

_______________________________________________
luv-main mailing list
[email protected]
http://lists.luv.asn.au/listinfo/luv-main

Reply via email to