RE: Microsoft Is Using Linux To Protect Its Own Web Site - hehe

["Paul Hieb" <phieb () columbus rr com>]

There's just one problem with the theory here guys -- Reverse DNS of
www.microsoft.com is showing "unknown.Level3.net" hence they are having
Level3 filter traffic for them, they might even be co-located at
Level3's facilities. I presume that you all know who Level3
communications is? (www.level3.net) Also I would assume that for load
balancing purposes, that DNS entries are round-robining to at least two
different hosts. So, keep probing!

-----Original Message-----
From: Fyodor [mailto:fyodor () insecure org] 
Sent: Thursday, August 21, 2003 4:23 PM
To: nmap () rugh org
Cc: nmap-dev () insecure org
Subject: Re: Microsoft Is Using Linux To Protect Its Own Web Site - hehe

On Thu, Aug 21, 2003 at 10:28:14AM -0700, Dave Rugh wrote:
> Hi Fyodor,
>   
> Can I prove out the story below using NMAP?  If I can, what params
should I
> have used?  
>
> The params I used, and the results (via NMAPWIN) are below)

[ Cut story from
  http://story.news.yahoo.com/news?tmpl=story&u=/cmp/13100775 on
  Microsoft using Linux ]

Yes, you can.  The problem is that you are using a year-old version of
Nmap.  Download 3.30 Windows .zip binaries instead of Nmapwin.  It
should show the same (pleasing) results as this:

nmap -sS -O -p80,81 www.microsoft.com

Starting nmap 3.40PVT10 ( http://www.insecure.org/nmap/ ) at 2003-08-21
13:15 PDT
Interesting ports on unknown.Level3.net (166.90.133.198):
PORT   STATE  SERVICE
80/tcp open   http
81/tcp closed hosts2-ns
Device type: general purpose
Running: Linux 2.5.X
OS details: Linux Kernel 2.4.18 - 2.5.70 (X86)
Uptime 8.740 days (since Tue Aug 12 19:30:43 2003)

Nmap run completed -- 1 IP address (1 host up) scanned in 5.782 seconds

Cheers,
Fyodor

PS: The above is a test version of Nmap that I hope to release in the
next week, but 3.30 gives the same OS detection results.

PPS: I copied this resposne to nmap-dev, 'cause I think it is
interesting to see www.microsoft.com served by a Linux machine, even
if there is a good explanation (using Akamai).

---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).