Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    DNS-rebind attack detected

    Scheduled Pinned Locked Moved Español
    5 Posts 2 Posters 3.1k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • ZACZ Offline
      ZAC
      last edited by

      Bueno busque en el foro no entendí mucho de este hilo: https://forum.pfsense.org/index.php?topic=47941.0

      Al igual que en el hilo me aparece esa página, entre otras más:

      Sep 9 22:33:20 	dnsmasq[7282]: possible DNS-rebind attack detected: fbwallcheck.api-alliance.com
Sep 9 22:33:20 	dnsmasq[7282]: possible DNS-rebind attack detected: gwallcheck.api-alliance.com
Sep 9 22:33:24 	dnsmasq[7282]: possible DNS-rebind attack detected: fbwallcheck.api-alliance.com
Sep 9 22:33:24 	dnsmasq[7282]: possible DNS-rebind attack detected: gwallcheck.api-alliance.com
Sep 9 22:33:29 	dnsmasq[7282]: possible DNS-rebind attack detected: gwallcheck.api-alliance.com
Sep 9 22:33:29 	dnsmasq[7282]: possible DNS-rebind attack detected: fbwallcheck.api-alliance.com
Sep 9 22:41:50 	dnsmasq[7282]: possible DNS-rebind attack detected: gwallcheck.api-alliance.com
Sep 9 22:41:50 	dnsmasq[7282]: possible DNS-rebind attack detected: fbwallcheck.api-alliance.com
Sep 9 22:41:50 	dnsmasq[7282]: possible DNS-rebind attack detected: fbwallcheck.api-alliance.com
Sep 9 22:41:50 	dnsmasq[7282]: possible DNS-rebind attack detected: gwallcheck.api-alliance.com
Sep 9 22:41:50 	dnsmasq[7282]: possible DNS-rebind attack detected: fbwallcheck.api-alliance.com
Sep 9 22:41:50 	dnsmasq[7282]: possible DNS-rebind attack detected: gwallcheck.api-alliance.com
Sep 9 22:41:51 	dnsmasq[7282]: possible DNS-rebind attack detected: fbwallcheck.api-alliance.com
Sep 9 22:41:51 	dnsmasq[7282]: possible DNS-rebind attack detected: gwallcheck.api-alliance.com[

[/code]¿como puedo ver que equipo esta haciendo eso?, en más claro como puedo ver que esta intentado hacer :P
      1 Reply Last reply Reply Quote 0
      • pttP Offline
        ptt Rebel Alliance
        last edited by

        El "Buscador" es tu amigo  :P

        https://forum.pfsense.org/index.php?topic=78796.msg431028#msg431028

        1 Reply Last reply Reply Quote 0
        • ZACZ Offline
          ZAC
          last edited by

          xD, eso no lo encontré, pero ahora no veo donde poner lo que dicen, ni en Services: DNS forwarder, ni en Status: System logs, disculpa que pregunte, pero ¿donde le pongo esos logs querys de dns forwarder :(

          1 Reply Last reply Reply Quote 0
          • pttP Offline
            ptt Rebel Alliance
            last edited by

            Vas a: "Services –> DNS forwarder"

            Y allí tienes: "Advanced"

            log-queries.PNG
            log-queries.PNG_thumb

            1 Reply Last reply Reply Quote 0
            • ZACZ Offline
              ZAC
              last edited by

              jajaja, ah, había que escribirlo :P, perdón, el no dormir bien si que me hace daño, muchas gracias y disculpas ptt :)

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.