undefined | Better HN

0 pointsedwintorok6y ago0 comments

DNS rebinding can be fixed at the DNS server level. OpenWRT has an option for it. But this websocket thing in browsers can't easily be turned off/mitigated AFAICT.

0 pointsedwintorok6y ago0 comments

DNS rebinding can be fixed at the DNS server level. OpenWRT has an option for it. But this websocket thing in browsers can't easily be turned off/mitigated AFAICT.

0 comments

8 comments · 4 top-level

m00dy6y ago· 3 in thread

Or you can have this on firewall level.

cjbprime6y ago

No you can't -- the request from the browser is coming from inside the firewall, on an internal IP.

m00dy6y ago

well, I meant that there are some special firewalls that you can handle dns-rebinding attacks.

oriettaxx6y ago

exactly!

gruez6y ago· 1 in thread

>DNS rebinding can be fixed at the DNS server level

You can't always depend on that. eg. when you're on public/enterprise wifi that intercepts DNS requests.

Avamander6y ago

This is why a local stub is a very good idea.

bawolff6y ago

Well if you are going to use custom software to alter how protocols work, you could just change your web browser.

inetknght6y ago

> DNS rebinding can be fixed at the DNS server level.

Let me know how that works with DNS over HTTP

j / k navigate · click thread line to collapse