Text only | Text with Images

OPNsense Forum

English Forums => 25.7, 25.10 Series => Topic started by: iamhermes on November 17, 2025, 04:07:41 PM

Title: dnsmasq is flooding log, possible DNS-rebind attack detected: dns.msftncsi.com
Post by: iamhermes on November 17, 2025, 04:07:41 PM
Is there a way to solve or ignore?

OPNsense 25.7.7_4-amd64
Using dnsmasq DNS and DHCP

Code Select
2025-11-17T16:02:44 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:43 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:42 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:42 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:06 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:02 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:02 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:01 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:02:01 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:01:07 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:01:07 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:01:06 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T16:01:06 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:59:31 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:59:29 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:59:29 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:59:18 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:57:53 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:57:53 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:57:52 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:57:52 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:57:23 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:56:17 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:56:17 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:56:16 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:56:16 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:55:10 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:54:42 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:54:42 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:54:41 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:54:41 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:53:01 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:53:00 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:53:00 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:53:00 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:51:39 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:51:39 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:51:39 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:51:38 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
2025-11-17T15:51:38 Warning dnsmasq possible DNS-rebind attack detected: dns.msftncsi.com
Title: Re: dnsmasq is flooding log, possible DNS-rebind attack detected: dns.msftncsi.com
Post by: Monviech (Cedrik) on November 17, 2025, 05:15:17 PM
You can turn off the rebind protection in 'System - Settings - Administration'
Title: Re: dnsmasq is flooding log, possible DNS-rebind attack detected: dns.msftncsi.com
Post by: Maurice on November 17, 2025, 05:55:08 PM
How Microsoft Windows is flooding the dnsmasq log (https://forum.opnsense.org/index.php?topic=34970)
Text only | Text with Images