OPNsense Forum

English Forums => 24.7, 24.10 Series => Topic started by: amd.64 on September 06, 2024, 06:52:42 PM

Title: DNS Rebind attack
Post by: amd.64 on September 06, 2024, 06:52:42 PM
I am running my own webserver behind OPNSense. It is currently hosting two websites, my personal and business

When I go to my personal site whether on the local network or outside of it the website loads just fine.

When I go to my business sit I get the following error
QuoteA potential DNS Rebind attack has been detected.
Try to access the router by IP address instead of by hostname. You can disable this check if needed under System: Settings: Administration.

When I try to go to my business site, it appears to be trying to load the router page as the tab has the OPNSense icon just like it would if I typed the IP address of the router.

I have checked both the public and local (private) DNS settings for both sites and they are all correct. Locally both sites point to the local address of the server, remotely both sites point to a static public IP that I have set up in OPNSense as a virtual IP.

Any one have any idea what could be causing this
Title: Re: DNS Rebind attack
Post by: amd.64 on September 06, 2024, 06:54:30 PM
Both sites have their own SSL form lets encrypt

Server (Running Ubuntu, and Apache) and all software is up to date