Menu
Reply
lriley06
  • 8
  • 1
  • 1
Tuning in
618 Views
Message 1 of 15
Flag for a moderator

Disabling DNS Rebind attack protection on Hub 3

I use my Hub 3 in modem mode, with a Pfsense box as my router. I have my own internal hostname for the Hub 3 to avoid having to type the IP address in each time I need to access it. I used to be able to access the web interface via this hostname, rather than typing the IP. Presumably, Virgin have pushed a new update to the Hub 3, as I now just get redirected to a rebind_warning.html page with the contents "DNS REBIND ATTACK" when using the hostname, and the only to access without this is via IP. Is there any way to disable this behaviour?

Tags (3)
0 Kudos
Reply
Client62
  • 1.82K
  • 112
  • 415
Super solver
607 Views
Message 2 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

Our Hub 3 has been on  Software version 9.1.2208.100 for many months.

Try a ping of the Hub 3 via the host name.

0 Kudos
Reply
Tudor
  • 13.86K
  • 1.07K
  • 2.81K
Very Insightful Person
Very Insightful Person
605 Views
Message 3 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

As far a I know the VM hubs in modem mode do not do or handle any DNS requests. I should look elsewhere for the problem. 


Tudor
There are 10 types of people: those who understand binary and those who don't and F people out of 10 who do not understand hexadecimal c1a2a285948293859940d9a49385a2
0 Kudos
Reply
legacy1
  • 20.45K
  • 828
  • 2.2K
Alessandro Volta
569 Views
Message 4 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

This is something VM are doing around the DNS servers so don't use VM DNS if you want you could setup your own bind to have hostname point to where you want.

Or edit the hosts fine.
---------------------------------------------------------------
0 Kudos
Reply
lriley06
  • 8
  • 1
  • 1
Tuning in
552 Views
Message 5 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

So I’ve edited my /etc/hosts file to make the following entry:

192.168.100.1 modem.test

And I can ping this fine from my machine:

liamriley@Mac-Mini ~ $ ping modem.test
PING modem.test (192.168.100.1): 56 data bytes
64 bytes from 192.168.100.1: icmp_seq=0 ttl=62 time=2.663 ms

But when I try to access http://modem.test in my browser, I get redirected to http://192.168.100.1/rebind_warning.html

Really stumped on this one, because this problem definitely did not occur before, and Client62 tells me that the software has not been updated for some time.

0 Kudos
Reply
legacy1
  • 20.45K
  • 828
  • 2.2K
Alessandro Volta
528 Views
Message 6 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

Must be your browser doing this then try another like Edge

Or maybe it is the hub? when it see modem.test in http request?

 

---------------------------------------------------------------
0 Kudos
Reply
用心棒
  • 8.13K
  • 898
  • 2.67K
Very Insightful Person
Very Insightful Person
518 Views
Message 7 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

What result does the following command return:

curl -IL modem.test

-- 
I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more
Have I helped? Click helpful.jpeg Mark as Helpful Answer and solved, or use thanks.jpeg Kudos to say thanks

 

0 Kudos
Reply
lriley06
  • 8
  • 1
  • 1
Tuning in
453 Views
Message 8 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

Just seem to be getting a 301 redirect to the warning page:

liamriley@Mac-Mini ~ $ curl -IL modem.test

HTTP/1.1 301 Moved Permanently

Location: http://192.168.100.1/rebind_warning.html

Date: Mon, 06 Feb 2023 08:28:34 GMT

Server: lighttpd

 

HTTP/1.1 200 OK

Content-Type: text/html

Accept-Ranges: bytes

ETag: "512586486"

Last-Modified: Thu, 11 Aug 2022 10:09:53 GMT

Cache-Control: no-cache, must-revalidate

X-Frame-Options: SAMEORIGIN

Content-Length: 62

Date: Mon, 06 Feb 2023 08:28:34 GMT

Server: lighttpd

 

0 Kudos
Reply
Akua_A
  • 4.71K
  • 121
  • 324
Forum Team
Forum Team
370 Views
Message 9 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

Hi @lriley06,

Welcome back to our community forums and sorry to hear you are having issues when using hub 3 in modem mode. Unfortunately, as this involves third-party equipment, we are unable to best advise on this. Please would advise getting in contact with the company of your main router who can best advise. Please let us know if you need any help.

Thanks,

Akua_A
Forum Team



New around here? To find out more about the Community check out our Getting Started guide


0 Kudos
Reply
legacy1
  • 20.45K
  • 828
  • 2.2K
Alessandro Volta
354 Views
Message 10 of 15
Flag for a moderator

Re: Disabling DNS Rebind attack protection on Hub 3

Test modem mode with a PC no router and see if you get the DNS Rebind

---------------------------------------------------------------