Let us suppose, as a not entirely hypothetical example, that you haveadded an A record for your subdomain name that points to one of yourlogin servers, so that people can do 'ssh subdomain' and have it work.Let us further suppose that this login server is not your web serverand you now want to make https://subdomain/ also do something useful,instead of giving connection refused errors.

One way to do this is to use iptables on the login server to redirectany connections to

Broadly speaking, websites can be inward facing, aimed at providingservices to people in your organization, or outwards facing, aimedat providing information (and sometimes services) to outsiders. Thedifference is not just a matter of keeping sensitive information fromoutside people, it is that the two groups generally want completelyseparate sorts of information; the procedures for arranging workstationsupport are probably as uninteresting to outsiders as the press releasesare to insiders.

I think that this gets especially confusing in universities, becausegroups in a university have

Here is how to tell if you were getting phish spam from a compromisedserver with an exceedingly RFC complaint mailers: you were getting emailfrom addresses like service@park.funnel.revenuedirect.com.akadns.net.

What was going on is that paypal.us was a CNAME to that hostname.(I say was because paypal.us has since been changed to an A recordand an MX to localhost. , possibly because they got tired of beingforged on phish spam.)

According to the RFCs,