Where did the Parking Pages on my sub-domain come from?

[tgo316]

Hello,
Am attaching a screenshot of my problem, from time to time i have faced this one issue. Parking Pages.

Lets say i have a domain abc.com -> abc.com works fine and opens up the pages it intends to. 1.abc.com would also open up contents from the sub-directory 1 and everything works fine.
All of a sudden, the issue of parking pages comes up, for a few days or a week, 1.abc.com would open up a parking page/search results page.

I've checked my entire server and still don't find anything. This happens to some of the sub-domains of most of my domains hosted on my server.
I've checked 1.abc.com from proxy servers like anonymouse.org and megaproxy.com and i find parking pages on 1.abc.com even there. So it's not my ISP's fault.

Help Please :confused: :confused: :confused:

PS: the issue also can't be of my domain registering company, since i have 2-3 different companies from whom i register the domains. and whenever this parking pages bug hits, it hits all around.

[nobaloney]

Since you blocked the domain name it's impossible to do any tracing, so you're on your own. When this happens do a dig +trace command (or Windows equivalent if you use a Windows desktop) from your location to see if you can figure out the DNS.

Make sure your DNS is being served where you think it is.

Make sure your DNS is serving what it should.

Is the DNS server you use for authoritative DNS for these domains also serving cached DNS (this is all stuff we can't tell since you didn't give us a domain name)? If so, did you update your BIND since the exploit came out a week or two ago?

Jeff

[tgo316]

http://shoeshunt.com
http://shoesfront.com

Once your on these sites, click on a few sub-domains and see some of them will open just fine, whereas the others will open a parking page like the screenshot i posted.

No i haven't updated my bind? how do i do that?

I'll try doing the dig+trace command in a few moments.

[tgo316]

dig +trace


; <<>> DiG 9.2.5 <<>> +trace
;; global options: printcmd
;; connection timed out; no servers could be reached


am running fc3

[nobaloney]

The error means you don't have working resolving nameservers set up properly in /etc/resolv.conf. You've got to resolve that before you can go further.

That said, what do you think the nameservers should be for shoeshunt.com?

The rootservers say they should be:
ns.discountskiosk.com
ns2.discountskiosk.com

but your nameservers say they're:
ns.timesshop.com
ns2.finalhalt.com

Here are the IP#s for these nameservers:


ns.discountskiosk.com NOT FOUND
ns2.discountskiosk.com 66.29.24.81
ns.timesshop.com 66.246.187.47
ns2.finalhalt.com 66.246.187.47

It's time to fix your DNS and your authoritative nameserver settings first.

Jeff

[tgo316]

actually that was it :) ;)

Thanks, i just re-did my nameserver settings and it's back working like a gem :cool:

Thank You