DNS-rebind attack ¿?¿?



  • Hola a todos.
    Sigo revisando logs… y me encuentro con esto.

    Jul 17 11:59:19 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 17 05:25:20 	dnsmasq[26561]: possible DNS-rebind attack detected: findresigned.corp.ne1.yahoo.com
    Jul 16 10:54:51 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 15 12:20:34 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 15 08:58:21 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 15 08:39:46 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 15 08:37:35 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 15 07:36:21 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 14 10:42:28 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 14 09:50:11 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 14 08:41:20 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 11 11:28:02 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    Jul 10 17:05:07 	dnsmasq[26561]: possible DNS-rebind attack detected: mystartantiphishing.com
    

    Debería preocuparme??? tengo esto de mystartphishing.com y de de yahoo…....
    Saludos y gracias.


  • Rebel Alliance

    Arriba, botón "Search"  y buscas con el término "DNS-rebind attack"

    También puedes consultar la documentación Oficial:

    https://doc.pfsense.org/index.php/Potential_DNS_Rebind_Attack_Detected