DNS Rebind attack

Started by amd.64, September 06, 2024, 06:52:42 PM

Previous topic - Next topic
I am running my own webserver behind OPNSense. It is currently hosting two websites, my personal and business

When I go to my personal site whether on the local network or outside of it the website loads just fine.

When I go to my business sit I get the following error
QuoteA potential DNS Rebind attack has been detected.
Try to access the router by IP address instead of by hostname. You can disable this check if needed under System: Settings: Administration.

When I try to go to my business site, it appears to be trying to load the router page as the tab has the OPNSense icon just like it would if I typed the IP address of the router.

I have checked both the public and local (private) DNS settings for both sites and they are all correct. Locally both sites point to the local address of the server, remotely both sites point to a static public IP that I have set up in OPNSense as a virtual IP.

Any one have any idea what could be causing this

Both sites have their own SSL form lets encrypt

Server (Running Ubuntu, and Apache) and all software is up to date