Disable DNS Rebind Protection

[asusphile81]

Hello

Is there a config file we can edit to disable DNS Rebind Protection. Currently running firmware 380.69. This is in order to use private dns server address.

Thank you in advance

 

[ColinTaylor]

Yes. dnsmasq.postconf or dnsmasq.conf.add

https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files
http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

 

[asusphile81]

Yes. dnsmasq.postconf or dnsmasq.conf.add

https://github.com/RMerl/asuswrt-merlin/wiki/Custom-config-files
http://www.thekelleys.org.uk/dnsmasq/docs/dnsmasq-man.html

thank you very much for your help:

just to check:

all i need to add is /jffs/configs/dnsmasq.config.add with this line:

rebind-domain-ok=/192.168.1.1/

thanks

 

[ColinTaylor]

I'll have to leave it up to you as to what the appropriate command would be. But yes, it's /jffs/configs/dnsmasq.config.add if you're just adding a new line to the config file (and enable it at Administration -> System).

EDIT: It looks like rebind-domain-ok requires a domain name not an IP address.

 

[asusphile81]

I'll have to leave it up to you as to what the appropriate command would be. But yes, it's /jffs/configs/dnsmasq.config.add if you're just adding a new line to the config file (and enable it at Administration -> System).

EDIT: It looks like rebind-domain-ok requires a domain name not an IP address.

I believe you are correct. In this case is there a way to allow private ip range to rebind? Im trying to use pi-hole to be my dns

 

[ColinTaylor]

I'm assuming (because I've never tried it) that you just give it the domain name associated with your local network. That would seem logical, after all a DNS server's job is to resolve domain names.

 

[sfx2000]

Can't one just go under "Advanced Settings/LAN" and set the DNS server there?

Seems a lot easier that diving into the CLI...