I'm running Ubuntu 12.04. On my work network, there's a single-word address (let's call it
foobar) that is responding to pings and HTTP requests, only from my machine. The address is not a TLD, just a generic, project-related acronym.
Said address shouldn't be responding: There's no foobar entry in my
/etc/hosts file. There's no reference to
foobar in apache's
sites-enabled, neither on my
resolv.conf file, as follows:
nameserver 127.0.0.1 search redacted.mycompany.com
Initially I thought it was redirecting to
localhost, but if I open it on my browser it shows the nginx welcome page, and I'm running apache on my machine.
eth0 shows the traffic is indeed coming from the network. Restarting the
resolvconf service doesn't fix the issue. If I run:
service resolvconf stop resolvconf --wipe-runtime-directories service resolvconf start
foobar stops resolving, but if I restart my machine it resolves again
foobar gets a reply from
foobar.redacted.mycompany.com, a real address that works fine for other machines besides my own. Tracerouting or
foobar shows a 5 hops until the destination, the same as tracerouting or mtr'ing
Here's the output of the
dig foobar command:
; <<>> DiG 9.8.1-P1 <<>> foobar ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 52484 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;foobar. IN A ;; Query time: 1 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Fri Mar 8 14:32:02 2013 ;; MSG SIZE rcvd: 22
The issue happens both on Firefox (19.0) or Chrome (24.0.1312.56-0ubuntu0.12.04.1). Pressing CTRL+F5 doesn't change anything. It doesn't happen on other two coworker's machines I've tested on the same subnetwork.