Autchirion Posted March 9, 2022 Share Posted March 9, 2022 Hey Guys, my router is sending me a warning every 30 seconds: Mon Mar 7 18:14:28 2022 daemon.warn dnsmasq[3219]: possible DNS-rebind attack detected: rebindtest.unraid.net Do you guys know how to prevent this (or at least reduce frequency)? I'm not sure if this is due to a plugin or what is happening, so every Idea is wellcome. Thank you in advance Autchi Quote Link to comment
Squid Posted March 9, 2022 Share Posted March 9, 2022 If it's any plugin, it would be the MyServers plugin. I have no idea how often it performs tests like this. Perhaps @ljm42 could offer some suggestions Quote Link to comment
Autchirion Posted March 9, 2022 Author Share Posted March 9, 2022 (edited) I just double checked by uninstalling the plugin. @ljm42 can this be deactivated please? I'm using your plugin only becaus it is the only way (known to me) for flash backups and I don't want to activate any other features. Edited March 9, 2022 by Autchirion Quote Link to comment
Solution itimpi Posted March 9, 2022 Solution Share Posted March 9, 2022 1 hour ago, Autchirion said: becaus it is the only way (known to me) for flash backups Two alternatives that have existed for ages are automated backups via the CA Backup/Restore plugin and manual backups by clicking on the drive on the Main tab and selecting the backup option. Quote Link to comment
Autchirion Posted March 9, 2022 Author Share Posted March 9, 2022 This of course is the best solution, I somehow assumed this was taken out with the introduction of the My Servers Plugin, thank you for the reminder! Quote Link to comment
ljm42 Posted March 9, 2022 Share Posted March 9, 2022 Is it running literally every 30 seconds? Or is it more like every 10 minutes? This is related to SSL certificate support, but it sounds like you aren't using our SSL certs so I can rework things to avoid making this call. Would you please upload your diagnostics so I can confirm some of my assumptions? Quote Link to comment
Autchirion Posted March 9, 2022 Author Share Posted March 9, 2022 Wed Mar 9 12:47:11 2022 daemon.warn dnsmasq[3219]: possible DNS-rebind attack detected: rebindtest.unraid.net Wed Mar 9 12:47:42 2022 daemon.warn dnsmasq[3219]: possible DNS-rebind attack detected: rebindtest.unraid.net Wed Mar 9 12:48:12 2022 daemon.warn dnsmasq[3219]: possible DNS-rebind attack detected: rebindtest.unraid.net Wed Mar 9 12:48:42 2022 daemon.warn dnsmasq[3219]: possible DNS-rebind attack detected: rebindtest.unraid.net Could you let me know which part of the diagnostics you want? I'd want to remove some of the information, ideally only provide what you want to look at, but of course I'll gladly help. Btw, after removing the plugin the "issue" is gone. If you want me to reinstall it before getting the diagnostics let me know as well! Quote Link to comment
ljm42 Posted March 9, 2022 Share Posted March 9, 2022 The point of the zip file is to save a bunch of back and forth requests for more information. Simply uploading the whole file is always appreciated. Quote Link to comment
ljm42 Posted March 9, 2022 Share Posted March 9, 2022 I have made some changes to conditionally do the rebind check only when needed, it will be included in the next release. Thanks for reporting. Quote Link to comment
Autchirion Posted March 9, 2022 Author Share Posted March 9, 2022 Dude, you are fast. Let me know if you still need something! Sorry, had to take care is other matters. 1 Quote Link to comment
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.