Using next DNS: possible DNS attack rebind detected issue

[kannanni]

Hi there,

Using latest Merlin on my ac68u

Managed to connect manually to nextdns via DoT using my nextdns ID

However my sysinfo is constantly flooded with errors: possible DNS rebind attack detected.. false positives

This does not happen when using Google or Cloudflare..

Any cure to this without having to turn off DNS rebind protection from router?

 

[Dabombber]

Looks like nextdns is filtering ad sites for you. Your options are to disable it on their website, turn off rebind protection, or block the hosts on your router as well. They put their blocked hosts lists on their github if you want to take the third option, which you should be able to dump straight into diversion.

 

[Zastoff]

Not sure i am correct on this but think it has been a lot of issues when using NextDNS with DoT
Some options:
NextDNS with DoH is working well from DNSCrypt installer (how to)
NextDNS also have their own installer (DoH)for Asuswrt-Merlin

 

[XIII]

Not sure i am correct on this but think it has been a lot of issues when using NextDNS with DoT
Some options:
NextDNS with DoH is working well from DNSCrypt installer (how to)
NextDNS also have their own installer (DoH)for Asuswrt-Merlin

NextDNS does not work great with Stubby (used for DoT) indeed.

However, for this particular issue it should be enough to turn off "Enable DNS Rebind protection" in the router GUI.

(NextDNS already performs DNS Rebind protection on their servers for you)

 

[jim trudel]

NextDNS does not work great with Stubby (used for DoT) indeed.

However, for this particular issue it should be enough to turn off "Enable DNS Rebind protection" in the router GUI.

(NextDNS already performs DNS Rebind protection on their servers for you)

better to disable DNS rebind protection on the router or on the nextdns setup?

 

[SomeWhereOverTheRainBow]

NextDNS does not work great with Stubby (used for DoT) indeed.

However, for this particular issue it should be enough to turn off "Enable DNS Rebind protection" in the router GUI.

(NextDNS already performs DNS Rebind protection on their servers for you)

(Basically, in a nutshell, they need the dns-stuffs from your router to be uninterrupted in order to manage it)

 

[jim trudel]

(Basically, in a nutshell, they need the dns-stuffs from your router to be uninterrupted in order to manage it)

So finaly, we can ignore the warning dns rebind attack in router's log.?

Envoyé de mon SM-G960W en utilisant Tapatalk

 

[jim trudel]

I wonder if unbound would be better with next Dns?

 

[gattaca]

^^^ On your router, let nextdns do the work... IMHO.

 

[jim trudel]

^^^ On your router, let nextdns do the work... IMHO.

got it, you have stubby?