CentOS - May 2011 - Apache in chroot reporting every client is 16.0.0.0

Not sure where to start on this. I went to examine a log file today and noticed
a password protected internal file was being accessed from 16.0.0.0. Upon
further review every log entry has the same IP. Accessing apache from localhost
also reports 16.0.0.0.

Google is not being my friend right now, any advice?

Kernel: 2.6.9-89.0.29.Elsmp

In the chroot:

httpd-suexec-2.0.52-41.ent.7.centos4
httpd-devel-2.0.52-41.ent.7.centos4
httpd-2.0.52-41.ent.7.centos4

-jason 

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.

On Saturday 14 May 2011 20:50:54 Jason Pyeron wrote:
> Not sure where to start on this. I went to examine a log file today and
> noticed a password protected internal file was being accessed from
> 16.0.0.0. Upon further review every log entry has the same IP. Accessing
> apache from localhost also reports 16.0.0.0.
> 
> Google is not being my friend right now, any advice?
> 
> Kernel: 2.6.9-89.0.29.Elsmp
> 
> In the chroot:
> 
> httpd-suexec-2.0.52-41.ent.7.centos4
> httpd-devel-2.0.52-41.ent.7.centos4
> httpd-2.0.52-41.ent.7.centos4
> 
> -jason
Check the resolv setup in the chroot. etc/resolv.conf, etc/hosts, 
etc/nsswitch.conf 

Marian
> 
> --
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> -                                                               -
> - Jason Pyeron                      PD Inc. http://www.pdinc.us -
> - Principal Consultant              10 West 24th Street #100    -
> - +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
> -                                                               -
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> This message is copyright PD Inc, subject to license 20080407P00.
> 
> 
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
-- 
Best regards,
Marian Marinov
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL:
<http://lists.centos.org/pipermail/centos/attachments/20110514/281bff05/attachment-0005.sig>

> -----Original Message-----
> From: centos-bounces at centos.org 
> [mailto:centos-bounces at centos.org] On Behalf Of Marian Marinov
> Sent: Saturday, May 14, 2011 16:06
> To: CentOS mailing list
> Subject: Re: [CentOS] Apache in chroot reporting every client 
> is 16.0.0.0
> 
> On Saturday 14 May 2011 20:50:54 Jason Pyeron wrote:
> > Not sure where to start on this. I went to examine a log file today 
> > and noticed a password protected internal file was being 
> accessed from 
> > 16.0.0.0. Upon further review every log entry has the same IP. 
> > Accessing apache from localhost also reports 16.0.0.0.
> > 
> > Google is not being my friend right now, any advice?
> > 
> > Kernel: 2.6.9-89.0.29.Elsmp
> > 
> > In the chroot:
> > 
> > httpd-suexec-2.0.52-41.ent.7.centos4
> > httpd-devel-2.0.52-41.ent.7.centos4
> > httpd-2.0.52-41.ent.7.centos4
> > 
> > -jason
> 
> Check the resolv setup in the chroot. etc/resolv.conf, 
> etc/hosts, etc/nsswitch.conf 
Hosts are resolving and /etc/resolv.conf is good. 

Etc hosts and nsswitch are defaulted.

-Jason

--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-                                                               -
- Jason Pyeron                      PD Inc. http://www.pdinc.us -
- Principal Consultant              10 West 24th Street #100    -
- +1 (443) 269-1555 x333            Baltimore, Maryland 21218   -
-                                                               -
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
This message is copyright PD Inc, subject to license 20080407P00.