It's actually a pretty important security feature.�� DNS rebind attacks are relatively��easy to carry out, and in a world where devices on peoples home networks generally have very poor security posture, and generally do not use SSL (which can limit them impact of rebind attacks), DNS rebind protection is one of the easiest ways to stop such attacks completely.

https://unit42.paloaltonetworks.com/dns-rebinding/ has a good description of the problem.

�� Scott


On Mon, Jan 16, 2023 at 5:10 PM Joe Abley <jabley@hopcount.ca> wrote:
On Mon, Jan 16, 2023 at 19:41, Scott Howard <scott@doc.net.au> wrote:
The term you're looking for to plug into Google is "DNS rebind protection", and it's common across a lot of consumer routers.

Sounds like a fun phrase to describe a terrible idea!


Joe