I'm Not Seeing It w/ My Firewall & Konqueror or FFox
|
| Author | Content |
|---|---|
| moopst Mar 12, 2006 5:53 PM EDT |
I have seen it at work where I haven't logged in and I'm forced to use XP. I have seen it for about 3 days now and thought it was something nasty that installed itself through good old Active X or something. I'm not sure if something in my firewall blocks it or if Konqueror or Firefox are what stops it. I'll try it with my work laptop through the VPN and see if I can find out what does it. |
| moopst Mar 12, 2006 6:13 PM EDT |
Wrong, I am seeing it. Here is what I noticed when I clicked on one of the ads (updating my firewall now) cp 0 0 harpo.localdomain:33556 kt4a.kliptracker.c:http ESTABLISHED tcp 0 0 harpo.localdomain:33555 kt4a.kliptracker.c:http ESTABLISHED tcp 0 0 harpo.localdomain:33541 dyn-img-virt.cmpne:http ESTABLISHED tcp 0 0 harpo.localdomain:33544 dyn-img-virt.cmpne:http ESTABLISHED tcp 1 0 harpo.localdomain:33540 dyn-virt.cmpnet.co:http CLOSE_WAIT tcp 0 0 harpo.localdomain:33575 ads-virt.cmpnet.co:http TIME_WAIT tcp 0 0 harpo.localdomain:33571 ads-virt.cmpnet.co:http TIME_WAIT tcp 0 0 harpo.localdomain:33589 ads-virt.cmpnet.co:http TIME_WAIT tcp 0 0 harpo.localdomain:33592 ads-virt.cmpnet.co:http TIME_WAIT tcp 0 0 harpo.localdomain:33549 ads-virt.cmpnet.co:http TIME_WAIT tcp 0 0 harpo.localdomain:33551 ads-virt.cmpnet.co:http TIME_WAIT tcp 0 0 harpo.localdomain:33548 64.14.90.231:http ESTABLISHED tcp 0 0 harpo.localdomain:33553 unknown.dvlabs.com:http TIME_WAIT tcp 0 0 harpo.localdomain:33554 unknown.dvlabs.com:http TIME_WAIT tcp 0 0 harpo.localdomain:33538 216.34.77.41:http TIME_WAIT tcp 0 0 harpo.localdomain:33542 192.168.112.2O7.ne:http TIME_WAIT |
| PaulFerris Mar 12, 2006 6:22 PM EDT |
Okay, I'm only seeing it when I log out -- in FIREFOX?!?! what the heck gives there? Odd. The Linux word in the right-hand column points to their stupid get the facts campaign and so on. Awesome work. There's a good article in here somewhere. Lemme try some other linux sites and see what goes on. |
| sharkscott Mar 12, 2006 6:27 PM EDT |
I only see them when I am logged out. I use Mozilla 1.7.1 I have seen it many times on other sites. I figured it was only for people who do not create a user account. I was wrong. Its happened before. :-) |
| jboyd Mar 12, 2006 6:34 PM EDT |
hey Tom, heh,heh,don't let them get to you, they have won half the battle when they get you to use a word like "obnoxious". I have not seen that word for so long that I nearly had to copy and paste it into this post : ) Don't deprive your loyal readers, it seems that the more money Microsoft throws against Linux the faster Linux grows!! If I were a (microsoft) shareholder I would be worried that Microsoft and/or their affiliates would have to stoop to such childish tactics. |
| moopst Mar 12, 2006 6:34 PM EDT |
I can make it go away in Firefox with these, one or both of these guys may be the culprit: iptables -A OUTPUT -d 69.25.152.0/24 iptables -A OUTPUT -d 205.147.80.0/20 -j REJECT Here is what I have on them (from my updated fw script): ###################### these are still being evaluated ################# ############ #holderm@harpo:~$ revhost 69.25.152.12 #whois -h whois.arin.net 69.25.152.12 #Internap Network Services PNAP-12-2002 (NET-69-25-0-0-1) #69.25.0.0 - 69.25.255.255 #VPP Technologies, Inc. INAP-CHG-DITTO-2639 (NET-69-25-152-0-1) #69.25.152.0 - 69.25.152.255 iptables -A OUTPUT -d 69.25.152.0/24 #holderm@harpo:~$ revhost 205.147.80.34 #whois -h whois.arin.net 205.147.80.34 #OrgName: Qube Networks Ltd. #OrgID: QNL-1 #Address: c/o Level 3 Communications, 3rd Floor #Address: 111 8th Avenue #City: New York #StateProv: NY #PostalCode: 10011 #Country: US #NetRange: 205.147.80.0 - 205.147.95.255 #CIDR: 205.147.80.0/20 #NetName: QUBE-US-1 #NetHandle: NET-205-147-80-0-1 #Parent: NET-205-0-0-0-0 #NetType: Direct Allocation #NameServer: NS0.QUBENET.NET #NameServer: NS1.QUBENET.NET #Comment: #RegDate: 2005-07-01 #Updated: 2005-07-01 #OrgTechHandle: MJS188-ARIN #OrgTechName: Sharpe, Mat John #OrgTechPhone: +442071503806 #OrgTechEmail: mat-arin@qubenet.net iptables -A OUTPUT -d 205.147.80.0/20 -j REJECT |
| raopm Mar 12, 2006 6:38 PM EDT |
When I'm not logged in, the "Powered by Scif" has this embedded in the script tag:
src="http://lxer.us.intellitxt.com/intellitxt/front.asp?ipid=3338" When I'm logged in, the embedded text and the associated script tag disappears. Could that be it? |
| jboyd Mar 12, 2006 6:43 PM EDT |
Instead of making it go away , is it technically possible to set all words related to Microsoft and Windows point to here http://humorix.org/ |
| jdixon Mar 12, 2006 6:45 PM EDT |
Well, it's showing up on Firefox when I'm logged out. However, if I switch the User Agent to IE or any of the other options, it doesn't show up, only when it's set to default. It does show up with IE run under Wine, FWIW. |
| moopst Mar 12, 2006 6:45 PM EDT |
Gee, that's $ dig lxer.us.intellitxt.com ... ANSWER SECTION: lxer.us.intellitxt.com. 179 IN CNAME g14.nyc.intellitxt.com. g14.nyc.intellitxt.com. 179 IN A 205.147.80.34 which I'm now blocking with: iptables -A OUTPUT -d 205.147.80.0/20 -j REJECT |
| Bob_Robertson Mar 12, 2006 6:46 PM EDT |
While lxer.us.intellitxt.com isn't in mine (yet), there are 245 "intellitxt" host entries in the adware-blocking /etc/hosts file available from The Hosts File Project http://hostsfile.mine.nu Mine is the "personal" edition, from October 05. I guess I need to update it. But Oh Boy! does it work wonders. I wouldn't have a desktop system without it. |
| jdixon Mar 12, 2006 6:54 PM EDT |
The ads don't show up in lynx, but they do show up in IE under Windows. |
| ilde Mar 12, 2006 7:50 PM EDT |
I do not see anything (on Firefox 1.5 under Debian Linux). I Just replaced my "hosts" file with an empty one and I still can't see the adds. |
Posting in this forum is limited to members of the group: [ForumMods, SITEADMINS, MEMBERS.]
Becoming a member of LXer is easy and free. Join Us!