I can't seem to access the website. It redirects to some qp.org,
which is not even remotely similar to opencores. It is run out of the
US and not out of SI like opencores is supposed to be registered to.

Will this be fixed soon?

-Arlen

I can't get to opencores.org either...as you say, it redirects me to some
spammer web site that should be shot and beaten.

On Monday 26 July 2004 04:27 pm, Austin Franklin wrote:

Looks like it. Right now, www.opencores.org resolves to 66.98.244.118 The web server at this IP address sends an immediate http redirect (302) to qp.org, at 204.228.229.168. This last IP address' reverse lookup is 168.anything.com, which is a domain registered out of the Grand Cayman islands. Uh huh. However, using a slightly different DNS lookup (via 'dig'), www.opencores.org resolves to 193.189.173.98, which, when put into a browser, is the real opencores website, running on the siol.net network. SO, what appears to have happened is the DNS record for opencores.org has gotten spoofed somewhere to return the fake 204.228.229.168 address, but whoever did it didn't do a good enough job as I was able to get the real IP address via a recursive look up. (Or something like that...still scratching my head on all the DNS protocol traces.) Anyway, the server itself appears to be fine, as you can see if you go to http://193.189.173.98/ -Johnathan

On Monday 26 July 2004 05:35 pm, Johnathan Corgan wrote:



An update...non-recursive DNS lookup returns the correct IP address; a
recursive one (the default type) returns the spoofed IP address. This
means the authoritative (real) DNS servers are not compromised, but
someone's cache (non-authoritative) is fubared.

-Johnathan

Yes the issue is known and people are working to solve it. Please send your name severs that you use to resolve host names into IP addresses to webmaster at opencores.org so that we can recreate the problem. Thanks regards, Damjan ----- Original Message ----- From: "Arlen Cox" arlencox at gmail.com> To: cores at opencores.org> Sent: Tuesday, July 27, 2004 1:12 AM Subject: [oc] Did opencores.org get compromised?

Hi Damjan,



How do I find out what the name server I use is? ipconfig does not have a
DNS listed, so I can only guess it is done by my ISP, Charter.

Regards,

Austin

Austin

if "ipconfig /all" doesn't tell you then start "nslookup" and it should tell
you. When you have nslookup running just type in www.opencores.org and it
should return you 193.189.173.98 (this is the correct IP address of the
master opencores web server)

regards,
Damjan

PS Example (start nslookup first):

Default Server: taurus-1.siol.net
Address: 193.189.160.11


Server: taurus-1.siol.net
Address: 193.189.160.11

Non-authoritative answer:
Name: www.opencores.org
Address: 193.189.173.98

----- Original Message ----- From: "Austin Franklin" austin at darkroom.com> To: "Discussion list about free open source IP cores" cores at opencores.org> Sent: Tuesday, July 27, 2004 4:39 AM Subject: RE: [oc] Did opencores.org get compromised?