Question DNS rebinding attacks

[Jonny Quest]

Just installed Chrome (may God forgive me)
The same results

View attachment 293354View attachment 293355

I don't know, I think the 11th commandment is, "Thou shalt not download and install Chrome, but Brave, that's okay and can be forgiven".

 

[Victor M]

Thank you; this worked.
But still no luck with the test.

I am using 3 extensions: Privacy Badger, Osprey, and SafeToOpen .
I also have static ipv6 addresses and ipv6 dns addresses specified too. ( google dns: 2001:4860:4860::8888 and 2001:4860:4860::8844 )
I also have a MikroTik router/VLAN/firewall, pretty basic firewall rules: block incoming TCP/UDP 135,137-139,445.
I am on Linux.

Maybe some of them made the difference ?

 

[Parkinsond]

If you get this Edge, you'll get it in Chrome, Brave, Opera, Vivaldi, SRWare Iron, Ungoogled Chromium and other Chromium based browsers; no need to install any of them. This is why I specifically mentioned Firefox as it's completely different and DoH works in a different way

All with passed test using FF?

 

[Parkinsond]

Or just use ControlD Setup Utility to make ControlD system-wide

I tried free dns providers only.

 

[Parkinsond]

I don't know, I think the 11th commandment is, "Thou shalt not download and install Chrome, but Brave, that's okay and can be forgiven".

For the sake of experiments and science

 

[Parkinsond]

I am using 3 extensions: Privacy Badger, Osprey, and SafeToOpen .
I also have static ipv6 addresses and ipv6 dns addresses specified too. ( google dns: 2001:4860:4860::8888 and 2001:4860:4860::8844 )
I also have a MikroTik router/VLAN/firewall, pretty basic firewall rules: block incoming TCP/UDP 135,137-139,445.

Maybe some of them made the difference ?

Using a large arsenal to the extent you do not have to worry about dns rebinding attacks

 

[Kongo]

I have DNS Rebind Protection disabled, but I have AI Protection, maybe it's related. Or maybe it's the browser/extensions.

Nah, DRP is a seperate feature, so it shouldn't be related. Then I am out of ideas also.

 

[Victor M]

Also router is not at any of the standard addresses. 192.168.0.1 ....

 

[Marko :)]

All with passed test using FF?

I don't understand what you're asking.

I tried free dns providers only.

ControlD allows you to setup any ControlD DNS server including the free ones. You just need to enter resolver ID of free one and that is it. For example, resolver ID for HaGeZi Pro Plus is x-hagezi-proplus. Enter this and click on Connect.

Once you do this, ControlD Free DNS will be applied system-wide, meaning all apps will use it over DoH/3 protocol. Then go and run the test to see if it helped. If it didn't, something is either wrong with your network settings or your system installation.

 

[Templarware]

Nah, DRP is a seperate feature, so it shouldn't be related. Then I am out of ideas also.

AI Protection has features that double down or complement some standard features.

 

[Sorrento]

I have AI setup exactly as @Templarware,& Rebind disabled on my ASUS Router, the interesting thing this is the test mentioned a bit back passes on Brave always but fails on Firefox, I'm using the DNS from Mullvad...

 

[Parkinsond]

I don't understand what you're asking

All MT members reporting passing the test with other dns providers than nextdns and ag dns where using FF?

Once you do this, ControlD Free DNS will be applied system-wide

I do not have controld app installed; just pasting the resolver in browser settings.

 

[Parkinsond]

passes on Brave always but fails on Firefox

According to Marko, only FF has a different way of handling doh, the remaining chormium browsers behave in a similar way; what applies to brave, apply to the rest.

 

[Sorrento]

Passes OK for what its worth in Wolf...

 

[Parkinsond]

Passes OK for what its worth in Wolf...

with which dns provider?

 

[rashmi]

With NextDNS and Cloudflare Gateway DNS, I get "You are not vulnerable to DNS Rebinding Attacks" on Vivaldi, Chrome, Edge, and Firefox.

 

[Sorrento]

With Mullvad DNS

 

[Parkinsond]

With Mullvad DNS

Never used before.

 

[Parkinsond]

With NextDNS and Cloudflare Gateway DNS, I get "You are not vulnerable to DNS Rebinding Attacks" on Vivaldi, Chrome, Edge, and Firefox.

I get the same with NextDNS and AdGuard DNS; never tried Cloudflare gateway, but for free, public cloudflare, it does not pass.

 

[Parkinsond]

With Mullvad DNS

Tried Mullvad DNS; not passing, and a bit slower than ControlD.