From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id 121AF138CBD for ; Tue, 10 Mar 2015 19:09:54 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 22390E07AE; Tue, 10 Mar 2015 19:09:48 +0000 (UTC) Received: from mail.web-xs.org (mail.web-xs.org [148.251.4.204]) (using TLSv1.1 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id F2AF5E076D for ; Tue, 10 Mar 2015 19:09:46 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.web-xs.org (Postfix) with ESMTP id 1DFA06EC1B7F for ; Tue, 10 Mar 2015 20:09:45 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mail.web-xs.org Received: from mail.web-xs.org ([127.0.0.1]) by localhost (mail.web-xs.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qK68wNiHoeXY for ; Tue, 10 Mar 2015 20:09:43 +0100 (CET) Received: from server-1.localdomain (p54A7000B.dip0.t-ipconnect.de [84.167.0.11]) (Authenticated sender: lukas@der-erste-sinn.de) by mail.web-xs.org (Postfix) with ESMTPA id 805D36EC1675 for ; Tue, 10 Mar 2015 20:09:43 +0100 (CET) Received: from hal9000.localdomain (hal.localdomain [192.168.0.2]) by server-1.localdomain (Postfix) with ESMTP id D14743F210 for ; Tue, 10 Mar 2015 20:09:42 +0100 (CET) Date: Tue, 10 Mar 2015 20:09:26 +0100 From: To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] [OT] Mysterious vanishing of DNS entry of www.youtube.com...was I hacked? Message-ID: <20150310200926.3235542f@hal9000.localdomain> In-Reply-To: <20150310181612.GA4128@solfire> References: <20150310181612.GA4128@solfire> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: 14dacd70-7f61-42e8-b99b-b4cf8c8adc84 X-Archives-Hash: 5457327bb63b97b8a3e147866f9d8392 Am Dienstag, 10.03.2015 um 19:16 schrieb Meino.Cramer@gmx.de: > Hi, > > the following happens some minutes before: > I was searching on youtube for some reviews... > and suddenly BOOM: "Server not found: Unknow host" > > I restarted firefox...which did not help. > > I did a ping & traceroute to www.youtube.com from > the commandline...same results... > > Wireshark shows the DNS query to my DSL modem... > and the answer was that from above. > > I rebooted my Gentoo box...no help... > > The problem vanishes as I powercycled my DSL modem. > > Any other access was working the whole time. > > Was my DSL modem hacked? > Does anyone else noticed a glithc in the matrix? I'm using youtube only occasionally and last use was some days ago, so I don't know if there was something unusual today. When I do a nslookup www.youtube.com, I get a whole bunch of IP addresses. Maybe the DNS implementation on your DSL modem only cache the first one. If this IP then is not reachable for some reason, it would lead to an "Unknow Host Error" till the TTL of the cached entry is reached and the modem is doing the next lookup. But that's just a thought. Maybe your modem really was hacked. -- Regards wabe