cancel
Showing results for 
Search instead for 
Did you mean: 

Disabling DNS Rebind attack protection on Hub 3

lriley06
Tuning in

I use my Hub 3 in modem mode, with a Pfsense box as my router. I have my own internal hostname for the Hub 3 to avoid having to type the IP address in each time I need to access it. I used to be able to access the web interface via this hostname, rather than typing the IP. Presumably, Virgin have pushed a new update to the Hub 3, as I now just get redirected to a rebind_warning.html page with the contents "DNS REBIND ATTACK" when using the hostname, and the only to access without this is via IP. Is there any way to disable this behaviour?

14 REPLIES 14

Client62
Hero

Our Hub 3 has been on  Software version 9.1.2208.100 for many months.

Try a ping of the Hub 3 via the host name.

Tudor
Very Insightful Person
Very Insightful Person

As far a I know the VM hubs in modem mode do not do or handle any DNS requests. I should look elsewhere for the problem. 


Tudor
There are 10 types of people: those who understand binary and those who don't and F people out of 10 who do not understand hexadecimal c1a2a285948293859940d9a49385a2

legacy1
Alessandro Volta
This is something VM are doing around the DNS servers so don't use VM DNS if you want you could setup your own bind to have hostname point to where you want.

Or edit the hosts fine.
---------------------------------------------------------------

So I’ve edited my /etc/hosts file to make the following entry:

192.168.100.1 modem.test

And I can ping this fine from my machine:

liamriley@Mac-Mini ~ $ ping modem.test
PING modem.test (192.168.100.1): 56 data bytes
64 bytes from 192.168.100.1: icmp_seq=0 ttl=62 time=2.663 ms

But when I try to access http://modem.test in my browser, I get redirected to http://192.168.100.1/rebind_warning.html

Really stumped on this one, because this problem definitely did not occur before, and Client62 tells me that the software has not been updated for some time.

legacy1
Alessandro Volta

Must be your browser doing this then try another like Edge

Or maybe it is the hub? when it see modem.test in http request?

 

---------------------------------------------------------------

用心棒
Very Insightful Person
Very Insightful Person

What result does the following command return:

curl -IL modem.test

-- 
I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more
Have I helped? Click helpful.jpeg Mark as Helpful Answer and solved, or use thanks.jpeg Kudos to say thanks

 

Just seem to be getting a 301 redirect to the warning page:

liamriley@Mac-Mini ~ $ curl -IL modem.test

HTTP/1.1 301 Moved Permanently

Location: http://192.168.100.1/rebind_warning.html

Date: Mon, 06 Feb 2023 08:28:34 GMT

Server: lighttpd

 

HTTP/1.1 200 OK

Content-Type: text/html

Accept-Ranges: bytes

ETag: "512586486"

Last-Modified: Thu, 11 Aug 2022 10:09:53 GMT

Cache-Control: no-cache, must-revalidate

X-Frame-Options: SAMEORIGIN

Content-Length: 62

Date: Mon, 06 Feb 2023 08:28:34 GMT

Server: lighttpd

 

Hi @lriley06,

Welcome back to our community forums and sorry to hear you are having issues when using hub 3 in modem mode. Unfortunately, as this involves third-party equipment, we are unable to best advise on this. Please would advise getting in contact with the company of your main router who can best advise. Please let us know if you need any help.

Thanks,

Akua_A
Forum Team

New around here? Check out the do's and don'ts, in our Community FAQs


legacy1
Alessandro Volta

Test modem mode with a PC no router and see if you get the DNS Rebind

---------------------------------------------------------------