SOLVED DNS Rebinding (501)

[swbartley]

Im getting an error when I type in my dynamic dns associated with freenas. I type in my hostname then the username and password pulls up then it tells me.
https://server.securenas.org/index.php?logout
Potential DNS Rebind attack detected, see http://en.wikipedia.org/wiki/DNS_rebinding
Try accessing the router by IP address instead of by hostname.
https://server.securenas.org/index.php?logout

 

[Rilo Ravestein]

Are you trying to get access from in- or outside of your private network?

 

[swbartley]

I'm accessing it from inside my private network. I do have ports 443 and 80 open so that I can access outside my network as well.

 

[Rilo Ravestein]

I think you should only use the dynamic DNS address from outside your private network. I don't know if and how this works in FreeNAS, but I do know that some routers also have a security option to block access to local servers from local pc's using the public address. Doesnt block access to the server using the lan address (nas.local for example). This is for security reasons. Maybe this has something to do with that.

 

[swbartley]

Thanks I'm sure it has something to do with pfsense as all my devices are going bananas but I'll check it outside of my network and see what I get.

 

[Rilo Ravestein]

Ah.. You are using pfsense... https://doc.pfsense.org/index.php/DNS_Rebinding_Protections