View Single Post
  #4   (View Single Post)  
Old 3rd August 2010
comet--berkeley comet--berkeley is offline
Real Name: Richard
Package Pilot
 
Join Date: Apr 2009
Location: California
Posts: 163
Default Apached checking its own status? No. Would you believe NoScript?

This is caused by a client browser running the new version of NoScript 2.0 which came out last week:

http: forums.informaction.com/viewtopic.php?f=7&t=4743

To fix it go to each browser and change the NoScript option:

"you're likely among the few people who may want to disable this feature, since you've got a web server meant to be public on that IP.

Just uncheck NoScript Options|Advanced|ABE|WAN IP ∈ LOCAL."

This new anti-dns-rebinding version of NoScript 2.0 was prompted by the recent Black Hat meeting where dns-rebinding was featured.

Craig Heffner
"How to Hack Millions of Routers"

http: blackhat.com/html/bh-us-10/bh-us-10-briefings.html#Heffner

The broken urls are because:
You are only allowed to post URLs once you have at least 5 posts.

--------------------------------------------------------------------------------------------------
OpenBSD Only two remote holes in the default install, in a heck of a long time!

Last edited by comet--berkeley; 3rd August 2010 at 04:13 AM. Reason: signature
Reply With Quote