• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Dnsmasq[46769]: possible DNS-rebind attack detected ?

Scheduled Pinned Locked Moved DHCP and DNS
2 Posts 2 Posters 12.6k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    bmironb
    last edited by Mar 5, 2012, 10:32 AM

    I saw this in my sistem logs menu? what this means

    Mar 5 12:30:11 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:11 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:15 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:15 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:22 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:22 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:30 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:30 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:38 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:38 dnsmasq[46769]: possible DNS-rebind attack detected: static.oanam.okazii.newdev.ro
    Mar 5 12:30:47 dnsmasq[46769]: possible DNS-rebind attack detected: okazii.newdev.ro
    Mar 5 12:30:47 dnsmasq[46769]: possible DNS-rebind attack detected: okazii.newdev.ro

    1 Reply Last reply Reply Quote 0
    • J
      jimp Rebel Alliance Developer Netgate
      last edited by Mar 6, 2012, 5:07 PM

      It means that your upstream DNS server (Whatever is under System > General) is giving back private IPs for those hostnames. So you may need to disable the DNS rebinding protection under System > Advanced to get those responses.

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      2 out of 2
      • First post
        2/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received