http://3505021947 - how does this resolve?

Lawrence Chan webmaster at montevino.com
Wed Jun 9 07:02:57 UTC 1999


Jeff Schreiber wrote:
> 
> Dan Winchester <andy.stowell at virgin.net> writes:
> >
> >I'm seeing more and more addresses in the format above.
> >
> >How do they resolve? What organisation allocates them? Are they in any
> >way derived from the IP address?
> >
> 
>     Quite simply
> 
>     It's an IP address.  Most resolvers will take IPaddrs in regular dotted
>     form, or in hex or decimal form.
> 
>     3505021947 is in hex 0xD0EA63FB
>     Which D0 = 208, EA = 234, 63 = 99, FB = 251.
> 
>     So... try connecting to http://208.234.99.251
> 
>     Or even:
> 
>     % nslookup 208.234.99.251
>         Name:    www.freestation.com
>         Address:  208.234.99.251
> 
>     http://www.freestation.com/
> 
>     People often use the hex or decimal representation to sneak by poorly
>     written web filters.
> 
>                                                 -Jeff
> 
> --
> Jeff Schreiber,            Process Software Corp.
> schreiber at mx.process.com   http://www.process.com
>       TCPware & MultiNet: Stronger than Ever

Hi Jeff,

Interesting thought on the non-dotted IP format.  But even if say a host
is able to resolve non-dotted IPs, wouldn't it have to convert them to
normal dotted format first before resolving them?  And a filter set in
either format would still be able to do the job, wouldn't it?

Lawrence Chan
lchan at montevino.com



More information about the bind-users mailing list