Does the latest firmware have the ability to block DNS rebinding requests?
I am currently handling those with an external DNS, but given the high number I am experiencing, I’d rather stop them at the Balance.
Personal opinion, I would force proxy all DNS requests passing through your router to a certain server. It will somewhat help to protect against rebinds. Then on whatever DNS service you are using, make sure to tell it not to return private address ranges.
Turn on local proxy…
Turn on advanced resolver settings…
Set your custom DNS service you want to use and which connection to send the traffic down…
Force all DNS requests (Port 53 UDP) to your local proxy…
Here’s the setting on OpenDNS that tells it not to return private ranges…
2 Likes