Maverics, Safari, DNS

Hi,
I have, and not even me in my work, problem that Safari can't sometimes open web page because of DNS problem, not even ping. If I do "sudo killall -HUP mDNSResponder" in Terminal App, go to Safari and reload page - it is working. It is not a problem of local DNS, this problems persist on diffrenet local subnets.
I have OSX Mavericks 10.9.2 with Safari 7.0.2 on MacBook Pro early 2011.
Please help, Regards.

Almost local DNS on Mikrotik routers, which cached records and if record is not in cache it asks ISP. I'm using MacBook Pro on diffrenet subnets on different places with different ISPs.
I'm testing Google DNS 8.8.8.8 now if problem persist, if it isn't some DNS problem on Mikrotik OS.

Similar Messages

Safari DNS problem?

hi im using my g5 now for some time now and from time to time, im having problems opening webpages. its not that these pages are special in any way, what is strange is that it sometimes come up immediately and sometimes i have to hit return three times till teh site comes up. what happens is i enter the url, hit ok, than the progress bar starts but stops after a couple of seconds, i hit return again - no change - i hit return again page comes up. when i simply wait after i had entered the url, it only goes to the proigress bar and thats it. after a while 20 sec's or so page comes up. i have 2 boxes one mac and a windows based pc both connected to a gigabit switch with cat6 cables, checked network settings and they are set to autosensing. this problem occurs only on the mac, not the pc. when i do a ping on the console to lets say google.com i always get the response, i already entered the dns servers manulally in the network section but same result, any idea?

Go to the Safari Menu and select "empty cache". Try Safari again.
If no change, move to the trash the .com.apple.safari.plist file found in your User Library>Preference folder, then restart Safari. You may have a corrupted preference file. If Safari returns to normal operation, you'll need to go to the Preference file to restore any custom settings.
Post back with results.

How to configure profile manager in Maverics when DNS is externally managed?

Are there any guides to configuring Profile Manager as a MDM?
Here is my story.
Recently installed Mac mini at a school where the DNS is externally managed by the Education departments IT group. Upgraded to Maverics and installed Server app. Configured profile manager to the point where we could generate a trust profile and enrolment profile. Doesn't work because there is no DNS entry for Mac mini server. Create entry but need to change host name and computer name and local machine name to match entry. Suddenly profile manager not working at all. Delete server app and it's configuration file in ~/Library/. Reinstall. Now Profile manager won't even activate. Speak to Apple on phone, run various commands to reinitialise Open Directory and reset profile manager. To no avail. Apple say to reinstall Mavericks, Server and try again.
Funny thing is I got profile manager to work as an MDM in a test environment, but changing DNS after doing so much configuration seems to have made a real mess of things. Vowing to make a time machine backup as soon as Mavericks re-installs.
Anyone know of any guides other than the one on krypted.com, which appears to be for the previous version of Profile Manager.
Stom

In general, either your OS X Server box has a DNS translation for its address, or it doesn't.
If you don't have valid DNS, you will have problems with various services, as DNS is fundamental to distributed authentication and encryption, among other uses.
OS X Server doesn't recover well from installations that start off with DNS errors, and the wipe and reinstallation suggested by Apple is usually easier than resolving the various issues that tend to arise within the configurations of the various services.
If your server doesn't have a valid DNS translation, then either add the DNS translation into your organization's local DNS environment, or work to retrain or replace the folks that are unwilling or unable to administer and to properly maintain local DNS services, or (far less desirably) configure and start your own parallel DNS services. There are other options, of course.
I'd escalate this discussion to management, and let them sort this out — at its core, this very likely isn't a technical issue.

Safari DNS after Leopard install

Hi,
Hope this hasn't been asked. Prior to Leopard install, when I typed an address into Safari (and it wasn't in Bookmarks already), I would type "Fark" and it opened. Now, it has a search page provided by Verizon, who is my provider. A Clunky search page comes up. It appears I have to change DNS settings. Any suggestions?
Thanks, Joe

thanks for the reply;
I can quit safari fine; no need to force quit; I get a white screen and nothing happens.
I can quit safari normally;
I restart it and get the same white screen
However when I restart my Mac , safari works fine.
This process happens every morning; I close the cover to my Mac at night, and try to start it the following day.

Safari DNS problem in Yosemite? Works, then slow death...

Safari 8.0 + Yosemite seems to have a problem. It will work for a while, then begins to fail to load and is unable to resolve top level domains - "Safari Can't Find the Server ... [e.g. apple.com]"
Restarting Safari often resolves the issue for a while (minutes, hours?), then performance deteriorates until it finally gives up and generates the error. Chrome, on the same machine, does not suffer this problem.
17" Intel iMac, Safari 8.0, Yosemite, Exede broadband (satellite).
Anybody else see this issue and/or have a solution?
iMac (27-inch Mid 2011), OS X Yosemite (10.10)

Hi Phillip...
I'm not having issues with Facebook on either Safari or Chrome running Yosemite. Try maintenance for Safari.
Might be a cookies, cache, or extensions, issue.
From your Safari menu bar click Safari > Preferences then select the Privacy tab.
Click: Remove All Website Data
Then delete the cache.
Open a Finder window. From the Finder menu bar click Go > Go to Folder
Type or copy paste the following
~/Library/Caches/com.apple.Safari/Cache.db
Click Go then move the Cache.db file to the Trash.
Quit and relaunch Safari to test.
If that doesn't help, troubleshoot Safari extensions.
From the Safari menu bar click Safari > Preferences then select the Extensions tab. Turn that OFF, quit and relaunch Safari to test.
If that helped, turn one extension on then quit and relaunch Safari to test until you find the incompatible extension then click uninstall.
If nothing above worked, restart your internet modem and router if you use one then try Facebook on Safari.

Major bug in Safari 6: previous domain persists in URL bar when clicking a link

I've noticed an extremely weird and significant bug in Safari 6 / Mountain Lion:
When I'm navigating through a site, sometimes when clicking a link, Safari tries to open the corresponding URL on a previously visited site's domain instead of the current site.
For example:
First, I'm surfing on apple.com. Then, I navigate to another site, say estibot.com. On estibot.com, I click on a link that should take me to:
http://www.estibot.com/tools.html
Instead, safari takes me to http://www.apple.com/tools.html, which of course produces a 'not found' error. Nothing wrong with the link; this is purely Safari's doing.
This happens often, and apparently can happen with any site.
In other words, the domain name of a previously visited site persists in the URL, and the page that I'm trying to navigate to is added to the domain of the PREVIOUS site, not the actual site I'm using.
This is a major bug and is often rendering Safari useless for my workflow. How could a bug like this end up in the finished product?
Cheers
Esa

Having the same problem. It is randomly consistent, i.e. some links consistently get redirected to a specific domain. For example, I am experiencing this issue when using Basecamp and links being misdirected to a specific client's website. However, the criteria for why some links redirect and some do not appears random. This issue does not occur in Firefox. This leads me to believe that it is not a DNS issue. May be a Safari/DNS pair issue or solely a Safari issue. We do use an internal DNS (OS X Server) for browsing internal development wbsites which then rolls over to a public DNS. Again, this problem has never occured in Firefox and consistently occurs in Safari.
Safari Version 6.0 (7536.25)
Mac OS X Lion 10.7.4
On a side note...
Safari's strong-handed rewriting in the address bar as you type is crazy anoying. Or should I say "too helpful?" It seems to break the first rule of usuability: don't change the interface while the user is interacting with it.
And the unified address/search is rediculously annoying for developers who use non-complient top level domains for internal development (such as .dev)
And the new inspector seems like a huge step backwards in usuability. (debatable considering I'm probably not as advanced as some developers.)

IMAGE LOADING DELAY - HOW SOLVE?

Safari allows check box to display images on loading a page or turn them off.
However, unlike IE, there's no menu selection to 'load images' once at the page. Is there a solution I've missed? Example: OtherWorldComputing.com has many images. IE will load it, Safari won't (it just hangs on the images.) With the 'display image on opening page' unchecked the OWC pages load but to then get the images in Safari seems impossible. I tossed cookies, cleaned the cache, run Disk Unility today and reset Safari some weeks back) but it didn't help. What's the solution other than IE which I wish to avoid if possible.
Thanks!!
Amber
MINI 1 GB Ram First Version Mac OS X (10.3.9) DSL 979 KBPS Thruput downloads during event</<br>
MINI 1 GB Ram First Version Mac OS X (10.3.9)

Hi Amber
Help me understand why it might or might not work, please
I must be honest here & say that I really don't know ! The 4.2.2.1/2 works like a dream for some people & not for others.
Overall, ( & I can only comment on 10.4.x & safari 2.x ) safari & dns lookups/caching can sometimes seem like a work in progress. I haven't been able to locate much useful info on exactly how the various parts integrate so far, but I will !.
Anyway, you're on 10.3.9 which I've never used, but I'd try running system maintenance , either using a 3rd party app.... or by entering the commands in Terminal ( I'll check which ones are correct for 10.3.9 in a minute )
How are you connected to the web? do you have a router that you can enter dns settings for? ( try the 4.2.2.1 & 2 in there )
Also try creating a fresh new location in System Preferences-Network & switching to that; this has helped others with the same problems as you.

Difficulty with some sites after last Security update..

anyone else had any problems?
I've found that with my bank, and a couple of other sites like myspace, Safari keeps instantly coming up with 'server cannot be found' error, without even trying to access the sites. Sometimes shift-click/return does the trick (after 10 hits!) or I end up having to reset Safari, and it'll work for a couple of visits. And even then, once I've managed to get into the site, clicking links is a chance in itself, that I don't get the same error.
My mac at work was fine (didn't do the last Security update), and all this only started after the last update..
GAAAH!!!!

Terrible Problem, and I'm certain attributable to the latest Security Update. I have tried EVERYTHING, including deep system cache clearning, combined update, permission repairs, Purging ALL plugins from Safari, DNS cache reset... you name it. I am an EE, Mac User for 20 years, computer/Unix savvy, and am completely stumped, having tried EVERY trick in book short of the Windows Style "Reformat and Reload the Hard Disk." I can't log into gmail, or this site for that matter (using an old laptop presently). The problem occurs with the following common denominators: ASP page, Screen Name/Password dialog box, and then either a return to blank dialog page, or an endless string of redirects. THIS AFFECTS EVERY BROWSER I TRY, INCLUDING THE LATEST FIREFOX. Needless to say, this problem is driving me NUTS, and of course I can't get any help directly from Apple, since my laptop is over a year old. I doubt I would find tech help sophisticated enough anyway. Does ANYBODY have any suggestions? This is one of these maddening problems that can consume entire evenings. I wish I had never installed the latest security update.
AL PB G4 Mac OS X (10.4.8) 1.5GB Ram

Slow download of webpages

Hi,
I connect via WLan with the internet, using safari 5 or firefox 10. The airport signal is 100 %, downstream speed nearly 18.000 kbit/s. Although, sometimes pages open slowly or the whole download is stopping inbetween. In this case I also cannot send and receive E-Mails. Until yet, I tried the following to solve the problem:
- new router (my internet provider means: my router is too old, so I tried a new one, same problem as before!)
- download latest apple security update
- changed DNS- server
- deactivated safari DNS- Prefetching
- router reset
No chance. Something is interfering the internet connection. If I try to open the router configuration programm, there is a notification: your java script is deactivated. But in my browser settings, java script is activated!
Is there a flashback trojaner on my computer? Or just a fault in the network settings?
Hope someone can help me.
Thanks in advance, Felizitas

After some experimenting, it seems like my poor speed and sluggishness is the result of my computer heating up. I have always turned my computer on at 6 AM and put it to sleep at 10 PM. But with Leopard, if I leave it on all day, it gets extremely hot by late afternoon. Most of my computer work involves accessing a number of websites to monitor sales, auctions, etc. for our businesses. By evening, I can't get most of the sites to open and instead the browsers time out. Today I tried putting it to sleep everytime I needed to leave my desk and it stayed a lot cooler and I'm still working this evening!
When I turn on the computer in the morning, it is lightning fast and pages open almost before I finish clicking!
Are there any suggestions as to why it is heating up and how I can overcome this problem?
Thanks!

Problem with DNS - ping/Safari cannot resolve, but host/dig work OK

Hi All,
Have a weird problem with DNS which is a bit similar to the following ones:
http://discussions.info.apple.com/thread.jspa?threadID=2190208
http://forums.macrumors.com/showthread.php?t=337942
I connect with remote internal network via OpenVPN and from time to time (yes, intermittent problem :)) internal DNS names cannot be resolved.
When it happens I can still resolve names using host or dig utilities, but applications (like Safari) and ping cannot resolve them.
resolv.conf has proper DNS server set:
*$ cat /etc/resolv.conf*
*# Mac OS X Notice*
*# This file is not used by the host name and address resolution*
*# or the DNS query routing mechanisms used by most processes on*
*# this Mac OS X system.*
*# This file is automatically generated.*
*domain openvpn*
*search openvpn*
*nameserver 10.0.0.1*
More than that - it can resolve those internal names when queried directly, for example using host:
*$ host YYY.XXX.ru 10.0.0.1*
*Using domain server:*
*Name: 10.0.0.1*
*Address: 10.0.0.1#53*
Aliases:
*YYY.XXX.ru has address 192.168.x.y*
but at the same time ping reports "*Unknown host*":
*$ ping YYY.XXX.ru*
*ping: cannot resolve YYY.XXX.ru: Unknown host*
I tried "*dscacheutil -flushcache*" and it did not help. Also tried to comment out domain and search directives in resolv.conf and it did not help as well (and actually it should not matter).
Any ideas why this can happen and what else can I check when it happens again?
Thanks!

I have the same issue. It cropped up after I installed updates to MS Office 2008 and Firefox in which I also saw issues with the icons disappearing in the dock of the applications that were open when I started the Office update. I rebooted to try to get them back, but ended up deleting them and restoring from the Applications folder. I don't know if that's a red herring or not, but I generally try to figure out what has recently changed that may cause something to suddenly start failing.
I'd been working successfully all morning before it started acting up. Switching from wifi to cat5 had no effect.
@realaaa, were you able to resolve without a major undertaking, like reinstalling your OS?
pnmbp:~ pn$ dig goo.gl
; <<>> DiG 9.6.0-APPLE-P2 <<>> goo.gl
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40996
;; flags: qr rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;goo.gl. IN A
;; ANSWER SECTION:
goo.gl. 140 IN A 74.125.45.139
goo.gl. 140 IN A 74.125.45.102
goo.gl. 140 IN A 74.125.45.113
goo.gl. 140 IN A 74.125.45.138
goo.gl. 140 IN A 74.125.45.101
goo.gl. 140 IN A 74.125.45.100
;; Query time: 27 msec
;; SERVER: 192.168.2.1#53(192.168.2.1)
;; WHEN: Mon Dec 13 16:59:34 2010
;; MSG SIZE rcvd: 120
pnmbp:~ pn$ ping goo.gl
ping: cannot resolve goo.gl: Unknown host
pnmbp:~ pn$ curl <a class="jive-link-external-small" href="http://">http://goo.gl
curl: (6) Couldn't resolve host 'goo.gl'
pnmbp:~ pn$ host goo.gl
goo.gl has address 74.125.45.100
goo.gl has address 74.125.45.101
goo.gl has address 74.125.45.138
goo.gl has address 74.125.45.113
goo.gl has address 74.125.45.102
goo.gl has address 74.125.45.139
pnmbp:~ pn$

Safari 5 issues resolved since using OPEN DNS/working fine here at WEGMAN'S

my issues have been resolved since using OPEN DNS codes. have been using the internet at home and also am using it at WEGMAN'S right now and seems to run fine. i'm satisfied! btw, cnet.com gave Safari 5 an excellent rating.

HI,
Use Open DNS Free / Basic No more problems with DNS. Includes anti phishing filters.
For Safari. Empty the cache more often. From your Safari menu bar click Safari / Empty Cache. A faster way is: Option + Command + E on your keyboard.
And from your Safari menu bar click Safari / Preferences then select the Advanced tab.
Click: Change Settings next to: Proxies. That will prompt the System Preferences / Network pane
Make sure none of the boxes are selected under: *Select a protocol to configure* If there are, deselect the box, then click: OK.
Carolyn

Safari, Open DNS ect.

Recently was having problems with Safari being slow. Came across a forum, possibly even an Apple Discussions thread, and someone mentioned changed the DNS settings, for Safari to run faster - (http://reviews.cnet.com/8301-13727_7-10354948-263.html).
I don't have much knowledge about it, other than reading this article (http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /) but I changed the settings nonetheless.
Seems to be working a littler faster, but just in case... is it possible to change back to my original DNS settings? Would the numbers be the same as on my wifi? Thanks.

It will automatically revert to your networks gateway/router address - usually 10.0.1.1. It's displayed in your Network prefs.

TRY OPEN DNS OR GOOGLE'S NAMEBENCH TO RESOLVE SAFARI 5 ISSUES

HI,
2 DAYS AGO, I EXPERIENCED ALL THE PROBLEMS YOU GUYS ARE HAVING WITH THE SAFARI 5 UPGRADE. I THEN SAW A POST ABOUT OPEN DNS CODES CLICKED ON THE ARTICLE ABOUT IT AND PLUGGED IN THE APPROPRIATE NUMBERS. HAS WORKED FINE SINCE. SOMEONE ELSE POSTED ABOUT DNS CODES AND USING GOOGLE'S NAMEBENCH WHICH I HAVEN'T TRIED SINCE THE INTERNET SPEED I AM AT CURRENTLY SUFFICES. HERE IS THE LINK FOR GOOGLE'S NAMEBENCH FOR ANYONE WHO WANTS TO DOWNLOAD IT: http://code.google.com/p/namebench/ USING THE OPEN DNS RESOLVED ALL ISSUES THAT SAFARI 5 HAD WHEN I UPGRADED. WORKS FINE AND I HAVEN'T EXPERIENCED ANY PROBLEMS SINCE. HERE'S THE ARTICLE EXPLAINING OPEN DNS: http://appletoolbox.com/2010/06/safari-5-0-hangs-while-loading-pages-fix/

No, that link doesn't work but the information is correct!
Adding DNS codes to your Network Preferences, should give good results in terms of speed-up as well as added security:
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

OPEN DNS HAS SOLVED MY SAFARI 5 ISSUES

Thought previously that the disk permissions would completely resolve the issue but was still experiencing some problems that others have described. Saw another post on open dns so googled it and found this article: http://appletoolbox.com/2010/06/safari-5-0-hangs-while-loading-pages-fix/
Plugged in the numbers for the open dns and all seems to be fine in the Safari 5 universe now!

No, that link doesn't work but the information is correct!
Adding DNS codes to your Network Preferences, should give good results in terms of speed-up as well as added security:
If you are using a single computer: Open System Preferences/Network. Double click on your connection type, or select it in the drop-down menu, and in the box marked 'DNS Servers' add the following two numbers:
208.67.222.222
208.67.220.220
(You can also enter them if you click on Advanced and then DNS)
Sometimes reversing the order of the DNS numbers can be beneficial in cases where there is a long delay before web pages start to load, and then suddenly load at normal speed:
http://support.apple.com/kb/TS2296
If your computer is part of a network: please refer to this page: http://www.opendns.com/start/bestpractices/#yournetwork and follow the advice given.
(An explanation of why using Open DNS is both safe and a good idea can be read here: http://www.labnol.org/internet/tools/opendsn-what-is-opendns-why-required-2/2587 /
Open DNS also provides an anti-phishing feature: http://www.opendns.com/solutions/homenetwork/anti-phishing/ )
Wikipedia also has an interesting article about Open DNS:
http://en.wikipedia.org/wiki/OpenDNS

Question on a safari symptom that implies dns wierdness

This question is posted here because to problem shows up best in Safari. However, as I understand the process, I do not believe the core of the problem is specifically Safari.
When I try to browse to a nonexistant domain (for example, typing in xyzzy.apple.com into Safari's browser), I am shown a Network Solutions page which reads among other things:
This Site Is Under Construction and Coming Soon.
This Domain Is Registered with Network Solutions
It's not as robust as the usual Network Solutions Under construction page.
A screen shot of this can be seen at
http://www.notnap.com/browsing/UnderConstruction.png
I also get this when I type in partial urls. For example, if I simply type in ford to the address bar in Safari, I get the same page. Once upon a time, the browser would assume I meant to add a .com to the end of the url if I did not do so. While showing as a sign of laziness, I must admit I like this "feature."
I NEVER see the standard Safari page saying "Safari can't find the page you are looking for."
Some details:
- Network consists of a DSL connection to Verizon.
DSL modem - Linksys router = iMac G5, iMac G3
Router is connecting to modem via PPPoE
Router is configuring local network (192.168.1.x) via DHCP
- I see the same results from IE5 on the OS9 Imac G3
- I know I did not have these results until recently. Recent changes include:
- upgrading firmware on linksys
- changing internal network range from 192.0.1.x (wsa a typo) to 192.168.1.x
Here is my thinking:
There are two "problems" going on here.
1) I'd like the browser address bar to assume I mean .com when I do not include a standard TLD
2) I'd like to know how Network Solutions is rerouting my browser when my dns resolver falis to find an ip when searching on behalf of my browser.
(1) is admitedly a behavioral preference.
(2) is getting me worried. Doesn't this mean some local process is doing this?
Here's a simplification of the entire process as I understand how dns and web browsing works...
1) In Safari, I enter a bogus url domain, like "xyzzy.apple.com"
2) the Safari process realizes I have not entered an IP number, and goes to the network stack in search of my dns resolver
3) I've entered no custom host information, so the dns resolver on my system must go to whatever dns servers I have configured for use on my ethernet connection. (The only active connection, by the way). There are two dns servers, both in Verizon's space (they are my ISP)
4) My system makes a query on port 53 to their first server. Let's assume they are playing by the rules and not proxying without my knowledge. Let's also assume there is nothing in their dns server cache for xyzzy.apple.com. After all, why should there be? Finally, let's assume their dns servers are recursive.
5) Their dns server checks it's cache and realizes it has nothing for xyzzy.apple.com. It also quickly realizes it has no zone for apple.com, so it goes out on the quest. It hits the root servers, gets directed to the GTLD-SERVERS, gets directed to nserver.apple.com, which finally answers no such host.
6) Verizon's dns server tells my computer's dns resolver no such host
7) My computers dns resolver tells Safari no such host
8) Safari should display the typical site not found page.
As far as I can tell, when I do the search from a purely dns query standpoint, I get the expected results. Here's a clip from the terminal. Comments in italics:
xxxxx:~ xxxxx$ cat /etc/resolv.conf
domain xxx.com
search xxx.com
nameserver 141.154.0.68
nameserver 151.203.0.84
........these are the correct names servers as provided by my isp........
xxxxxx:~ xxxxxx$ dig @141.154.0.68 xyzzy.apple.com +trace
; <<>> DiG 9.2.2 <<>> @141.154.0.68 xyzzy.apple.com +trace
;; global options: printcmd
. 197789 IN NS C.ROOT-SERVERS.NET.
.........skipping a bit.........
. 197789 IN NS B.ROOT-SERVERS.NET.
;; Received 436 bytes from 141.154.0.68#53(141.154.0.68) in 55 ms
com. 172800 IN NS A.GTLD-SERVERS.NET.
.........skipping a bit.........
com. 172800 IN NS M.GTLD-SERVERS.NET.
;; Received 493 bytes from 192.33.4.12#53(C.ROOT-SERVERS.NET) in 40 ms
apple.com. 172800 IN NS nserver.apple.com.
apple.com. 172800 IN NS nserver.asia.apple.com.
apple.com. 172800 IN NS nserver.euro.apple.com.
apple.com. 172800 IN NS nserver2.apple.com.
apple.com. 172800 IN NS nserver3.apple.com.
apple.com. 172800 IN NS nserver4.apple.com.
;; Received 274 bytes from 192.5.6.30#53(A.GTLD-SERVERS.NET) in 34 ms
apple.com. 86400 IN SOA nserver.apple.com. hostmaster.apple.com. 2006032800 1800 900 2016000 86500
;; Received 88 bytes from 17.254.0.50#53(nserver.apple.com) in 94 ms
In other words, it got what you'd expect - the host does not exist.
So what I want to know is, how is it that Safari is set to shown a Network Solutions page instead of the default Server not Found page? As far as I can tell, that page is not on my system, so Safari must be retrieving it from elsewhere.
But how? When the local process trying to resolve the bogus host xyzzy.apple.com is dig, host, nslookup or the like, I get the correct host not found. How then is that information being changed between my local dig process and the safari process, so that Safari then shows the Network Solutions page? Remember that the only processes which "know" this query was originated by a browser and not by a dns utility like dig are local to my box. So, how can this substitution be done without local access?
Wouldn't this imply a local security problem?
I've tried (although I cannot imagine how some of these would affect a resolution):
- Reset Safari
- emptying cache and history
- manually entering the dns information in system prefs (allowing the system to be configured via dhcp does work - according to network utils, the dns info is there - but they do not show up in the network prefs panel.
- adding ".com" "com" or a few other variations to the default domain in the network prefs.
- Deleting Safari's prefs (~/Library/Safari/)
I did find some discussion about something similar from back around 2002 complaining that similar action could potentially cause host verification problems for email servers and the like. Though, I'd guess most of these kinds of verifications would be for the reverse lookups. Still, I dould not find an exmplanation of how it was done, or more importantly, how to stop it, short of petitioning the ISP's to upgrade their version of BIND.
I'd love to be able to stop this annoying free ad for Network Solutions from appearing whenever I'm wither lazy or sloppy typing in the url. But more importantly, I want to know how this process works. The fact I see similar results on my OS9 ImacG3 strongly implies I'm not looking at a security issue - it's unlikely my conclusion there is a local process intercepting the dns results between my resolver process and my safari process is correct, as the same thing seems to be happening there as well. But I gotta know. How is this happening? How did Network Solutions do this?

What you're describing sounds suspiciously like
VeriSign's SiteFinder from ... the
fall of 2003, which is when it was up and running.
That's one thing I did find from my searches. What I didn't find was an understanding of how they did it then, and by inference how they're doing it now, assuming we're seeing a recurrance.
I find thousands of similar hits by searching on the text in the page, though it's unclear how many of these are legit - some of these pages are truthful. Hitting xyzzy.apple.com and being told "This Domain Is Registered with Network Solutions" is another matter entirely.
This looks like your page doesn't it:
http://underconstruction.networksolutions.com/
You know what would be interesting? The output of
this Terminal command:
curl -I
http://xyzzy.apple.comSee what headers get
returned from whatever server is answering the
call...
I'll do you one better... from terminal:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
notnAP:~ notnap$ curl -Iv http://www.apple.com
* About to connect() to www.apple.com port 80
* Trying 17.112.152.32... * connected
* Connected to www.apple.com (17.112.152.32) port 80
HEAD / HTTP/1.1
User-Agent: curl/7.13.1 (powerpc-apple-darwin8.0) libcurl/7.13.1 OpenSSL/0.9.7i zlib/1.2.3
Host: www.apple.com
Pragma: no-cache
Accept: /
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Age: 7
Age: 7
< Date: Fri, 31 Mar 2006 03:13:09 GMT
Date: Fri, 31 Mar 2006 03:13:09 GMT
< Content-Length: 30692
Content-Length: 30692
< Content-Type: text/html
Content-Type: text/html
< Expires: Fri, 31 Mar 2006 03:18:09 GMT
Expires: Fri, 31 Mar 2006 03:18:09 GMT
< Cache-Control: max-age=300
Cache-Control: max-age=300
< nnCoection: close
nnCoection: close
< Server: Apache/1.3.33 (Darwin) PHP/4.3.10
Server: Apache/1.3.33 (Darwin) PHP/4.3.10
* Connection #0 to host www.apple.com left intact
* Closing connection #0
notnAP:~ notnap$ curl -Iv http://xyzzy.apple.com
* About to connect() to xyzzy.apple.com port 80
* Trying 216.168.224.70... * connected
* Connected to xyzzy.apple.com (216.168.224.70) port 80
HEAD / HTTP/1.1
User-Agent: curl/7.13.1 (powerpc-apple-darwin8.0) libcurl/7.13.1 OpenSSL/0.9.7i zlib/1.2.3
Host: xyzzy.apple.com
Pragma: no-cache
Accept: /
< HTTP/1.1 200 OK
HTTP/1.1 200 OK
< Server: Sun-ONE-Web-Server/6.1
Server: Sun-ONE-Web-Server/6.1
< Date: Fri, 31 Mar 2006 02:59:12 GMT
Date: Fri, 31 Mar 2006 02:59:12 GMT
< Content-type: text/html
Content-type: text/html
* Connection #0 to host xyzzy.apple.com left intact
* Closing connection #0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
I'll save you the trouble:
VeriSign Infrastructure & Operations NSI-NETBLK1 (NET-216-168-224-0-1)
216.168.224.0 - 216.168.255.255
Network Solutions, Inc. NETSOL-SWIP-216-168-224 NET-216-168-224-0-2)
216.168.224.0 - 216.168.224.255
So what does it mean, and can anyone tell me how they're doing this? I hate not understanding how this is being done, and it directly proves my understanding of dns and the network stack on my iMacs is wrong, or at least incomplete. Inconceivable!

Maverics, Safari, DNS

Similar Messages

Maybe you are looking for