Odd happening with Firefox

Jon Radel jon at radel.com
Thu Sep 1 23:01:30 UTC 2016


On 9/1/16 4:28 PM, Mike Clarke wrote:
> On Thursday 01 Sep 2016 22:12:57 Ralf Mardorf via freebsd-questions wrote:
>> Did you try
>>
>>   about:config
>>
>>   network.dns.disableIPv6 true
>>
>> ?
> 
> Thanks for the suggestion. I've just tried it now but still no joy.
> 

Unless there is different domain data floating around that's fed to
different resolvers, there's no ipv6 data in sight for any of the
related names.

If I understand the scenario, after all the redirects and CNAME data is
waded through, you're talking to (or having it refuse to talk to you):

cmbr.ent.sirsidynix.net.uk. 3600 IN	CNAME	gefion.sirsidynix.net.uk.

gefion.sirsidynix.net.uk. 3600	IN	A	206.187.52.169


which has a single A record.

In any case, I can get the final server to do something similar if I use
wget:

$ wget -v http://www.cumbria-libraries.org.uk/
--2016-09-01 21:48:41--  http://www.cumbria-libraries.org.uk/
Resolving www.cumbria-libraries.org.uk (www.cumbria-libraries.org.uk)...
185.26.230.131
Connecting to www.cumbria-libraries.org.uk
(www.cumbria-libraries.org.uk)|185.26.230.131|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: http://cmbr.ent.sirsidynix.net.uk/client/en_GB/default/
[following]
--2016-09-01 21:48:41--
http://cmbr.ent.sirsidynix.net.uk/client/en_GB/default/
Resolving cmbr.ent.sirsidynix.net.uk (cmbr.ent.sirsidynix.net.uk)...
206.187.52.169
Connecting to cmbr.ent.sirsidynix.net.uk
(cmbr.ent.sirsidynix.net.uk)|206.187.52.169|:80... connected.
HTTP request sent, awaiting response... 403 Forbidden
2016-09-01 21:48:41 ERROR 403: Forbidden.

$

even though, as you point out, fetch does work:

$ fetch -vvv http://www.cumbria-libraries.org.uk/
scheme:   [http]
user:     []
password: []
host:     [www.cumbria-libraries.org.uk]
port:     [0]
document: [/]
---> www.cumbria-libraries.org.uk:80
looking up www.cumbria-libraries.org.uk
connecting to www.cumbria-libraries.org.uk:80
requesting http://www.cumbria-libraries.org.uk/
>>> GET / HTTP/1.1
>>> Host: www.cumbria-libraries.org.uk
>>> Accept: */*
>>> User-Agent: fetch libfetch/2.0
>>> Connection: close
>>>
<<< HTTP/1.1 301 Moved Permanently
<<< Date: Thu, 01 Sep 2016 21:52:55 GMT
<<< Server: Apache/2.2.22 (Debian) proxy_html/3.0.1 mod_perl/2.0.7
Perl/v5.14.2
<<< Location: http://cmbr.ent.sirsidynix.net.uk/client/en_GB/default/
<<< Vary: Accept-Encoding
301 redirect to http://cmbr.ent.sirsidynix.net.uk/client/en_GB/default/
scheme:   [http]
user:     []
password: []
host:     [cmbr.ent.sirsidynix.net.uk]
port:     [0]
document: [/client/en_GB/default/]
<<< Content-Length: 402
<<< Connection: close
content length: [402]
<<< Content-Type: text/html; charset=iso-8859-1
<<<
---> cmbr.ent.sirsidynix.net.uk:80
looking up cmbr.ent.sirsidynix.net.uk
connecting to cmbr.ent.sirsidynix.net.uk:80
requesting http://cmbr.ent.sirsidynix.net.uk/client/en_GB/default/
>>> GET /client/en_GB/default/ HTTP/1.1
>>> Host: cmbr.ent.sirsidynix.net.uk
>>> Accept: */*
>>> User-Agent: fetch libfetch/2.0
>>> Connection: close
>>>
<<< HTTP/1.1 200 OK
<<< Date: Thu, 01 Sep 2016 21:52:55 GMT
<<< Server: Apache
<<< Set-Cookie:
JSESSIONID=0E205461CDB21D013C629D8B130F0652.enterprise-19400; Path=/client
<<< Content-Type: text/html;charset=UTF-8
<<< Connection: close
<<< Transfer-Encoding: chunked
<<<
offset 0, length -1, size -1, clength -1
fetch: http://www.cumbria-libraries.org.uk/: size of remote file is not
known
local size / mtime: 18572 / 1472766741
fetch.out                                                0  B    0
Bps<<< 1ff8
http_new_chunk(): new chunk: 8184 (8184)
<<< 1ff8
http_new_chunk(): new chunk: 8184 (16368)
<<< 89c
http_new_chunk(): new chunk: 2204 (18572)
<<< 0
http_new_chunk(): end of last chunk
fetch.out                                               18 kB   72 kBps
00m00s
$

So I can confirm that the final server is looking at....something.....

If you can engage their attention, the folks who run the server should
be able to find something in the logs.  As an alternative, you could use
tcpdump to look at the actual data and see if you can spot anything odd
that Firefox is sending.

-- 
--Jon Radel
jon at radel.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3890 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20160901/f8f45dc2/attachment.bin>


More information about the freebsd-questions mailing list