undefined | Better HN

0 pointsedwintorok5y ago0 comments

DNS rebinding can be fixed at the DNS server level. OpenWRT has an option for it. But this websocket thing in browsers can't easily be turned off/mitigated AFAICT.

0 comments

bawolff5y ago

Well if you are going to use custom software to alter how protocols work, you could just change your web browser.

inetknght5y ago

> DNS rebinding can be fixed at the DNS server level.

Let me know how that works with DNS over HTTP

gruez5y ago

>DNS rebinding can be fixed at the DNS server level

You can't always depend on that. eg. when you're on public/enterprise wifi that intercepts DNS requests.

Avamander5y ago

This is why a local stub is a very good idea.

m00dy5y ago

Or you can have this on firewall level.

cjbprime5y ago

No you can't -- the request from the browser is coming from inside the firewall, on an internal IP.

m00dy5y ago

well, I meant that there are some special firewalls that you can handle dns-rebinding attacks.

oriettaxx5y ago

exactly!

j / k navigate · click thread line to collapse

0 comments

bawolff5y ago

Well if you are going to use custom software to alter how protocols work, you could just change your web browser.

inetknght5y ago

> DNS rebinding can be fixed at the DNS server level.

Let me know how that works with DNS over HTTP

gruez5y ago

>DNS rebinding can be fixed at the DNS server level

You can't always depend on that. eg. when you're on public/enterprise wifi that intercepts DNS requests.

Avamander5y ago

This is why a local stub is a very good idea.

m00dy5y ago

Or you can have this on firewall level.

cjbprime5y ago

No you can't -- the request from the browser is coming from inside the firewall, on an internal IP.

m00dy5y ago

well, I meant that there are some special firewalls that you can handle dns-rebinding attacks.

oriettaxx5y ago

exactly!

j / k navigate · click thread line to collapse