Hmmm, tcpdump gave me some useful information and I have come up with a theory

At the end of this email is the results I got, there will be other things in there.

My theory is that the name the client gives - jons.dotnet.com gets lost when the redirection happens, you see it mentioned a couple of times and then after redirection 
, northing.

This would ties up the ends, why I get the web server with the request and why nothing happens, it loses the name so it can;t use if for the name based virtual host!

Anyone think that is the truth or does someone else have another idea, I need to try to figure out this file a bit better.

If I am right then that sucks, and it is impossible!

-----------------------------------------------------
07:44:25.899893 bubba.ssh > roamer.iosys.net.1030: P 1491625650:1491625718(68) ack 1723993051 win 17520 [tos 0x10]
07:44:25.912320 roamer.iosys.net.1030 > bubba.ssh: . ack 68 win 16060 (DF)
07:44:26.529811 rachet.iosys.net.netbios-ns > 192.168.1.255.netbios-ns:  udp 50
07:44:26.530408 arp who-has rachet.iosys.net tell punky.iosys.net
07:44:26.802803 roamer.iosys.net.1025 > 128.9.0.107.domain:  62215 NS? . (17)
07:44:26.803235 bubba > roamer.iosys.net: icmp: host 128.9.0.107 unreachable
07:44:26.805967 roamer.iosys.net.1105 > bubba.domain:  37033+ PTR? 1.1.168.192.in-addr.arpa. (42)
07:44:26.807737 bubba.domain > roamer.iosys.net.1105:  37033* 1/1/1 PTR[|domain]
07:44:34.802220 roamer.iosys.net.1025 > 198.41.0.10.domain:  62215 NS? . (17)
07:44:34.802670 bubba > roamer.iosys.net: icmp: host 198.41.0.10 unreachable
07:44:34.805347 roamer.iosys.net.1106 > bubba.domain:  37034+ PTR? 1.1.168.192.in-addr.arpa. (42)
07:44:34.807673 bubba.domain > roamer.iosys.net.1106:  37034* 1/1/1 PTR[|domain]
07:44:35.556496 roamer.iosys.net.1107 > bubba.domain:  39477+ A? jons.dotnet.com. (33)
07:44:35.558238 bubba.domain > roamer.iosys.net.1107:  39477* 1/1/1 A bubba (94)
07:44:35.591808 roamer.iosys.net.1108 > bubba.domain:  4018+ A? jons.dotnet.com. (33)
07:44:35.593539 bubba.domain > roamer.iosys.net.1108:  4018* 1/1/1 A bubba (94)
07:44:35.600475 roamer.iosys.net.1176 > bubba.www: S 3140384747:3140384747(0) win 512 <mss 1460>
07:44:35.602452 arp who-has rachet.iosys.net tell bubba
07:44:35.602815 bubba > roamer.iosys.net: icmp: redirect bubba to host rachet.iosys.net
07:44:35.602910 arp reply rachet.iosys.net is-at 0:80:5f:5c:4d:a4
07:44:35.603082 roamer.iosys.net.1176 > rachet.iosys.net.www: S 3140384747:3140384747(0) win 512 <mss 1460>
07:44:35.606521 roamer.iosys.net.1109 > bubba.domain:  37035+ PTR? 1.1.168.192.in-addr.arpa. (42)
07:44:35.611437 bubba.domain > roamer.iosys.net.1109:  37035* 1/1/1 PTR[|domain]
07:44:38.591382 roamer.iosys.net.1176 > bubba.www: S 3140384747:3140384747(0) win 16060 <mss 1460>
07:44:38.591852 roamer.iosys.net.1176 > rachet.iosys.net.www: S 3140384747:3140384747(0) win 16060 <mss 1460>
07:44:38.592215 bubba > roamer.iosys.net: icmp: redirect bubba to host rachet.iosys.net
07:44:38.595233 roamer.iosys.net.1110 > bubba.domain:  37036+ PTR? 1.1.168.192.in-addr.arpa. (42)
07:44:38.597501 bubba.domain > roamer.iosys.net.1110:  37036* 1/1/1 PTR[|domain]
---------------------------------------------------------------------------------------