TanyaC
Regular Contributor
Of late I have been seeing this in my RT-AC88u Merlin log file..
That is sometime followed by;
At which time my router becomes unresponsive and I have to reboot it.
Since the rebind attack is detected does that mean it has been blocked? Do I have a problem?
Are the neighbor lost and rebind attacks related to each other?
How do prevent this?
I'm not using Plex.
One more question - When I reboot my router it always start with a date of May 5. Why is that? Is it correctable?
thanks
Code:
Feb 11 13:29:30 dnsmasq[807]: possible DNS-rebind attack detected: ipv4.tracker.harry.lu
Feb 11 13:29:55 dnsmasq[807]: possible DNS-rebind attack detected: ipv4.tracker.harry.lu
Feb 11 13:30:03 dnsmasq[807]: possible DNS-rebind attack detected: sugoi.pomf.se
That is sometime followed by;
Code:
Feb 11 13:53:34 kernel: br0: port 1(vlan1) neighbor 8000.08:bd:43:75:47:d1 lost
Feb 11 13:53:34 kernel: br0: topology change detected, propagating
Feb 11 13:55:16 kernel: br0: port 1(vlan1) neighbor 8000.08:bd:43:75:47:d1 lost
Feb 11 13:55:16 kernel: br0: topology change detected, propagating
Feb 11 13:55:38 kernel: br0: port 1(vlan1) neighbor 8000.08:bd:43:75:47:d1 lost
Feb 11 13:55:38 kernel: br0: topology change detected, propagating
Feb 11 13:57:38 kernel: br0: port 1(vlan1) neighbor 8000.08:bd:43:75:47:d1 lost
Feb 11 13:57:38 kernel: br0: topology change detected, propagating
Feb 11 13:58:00 kernel: br0: port 1(vlan1) neighbor 8000.08:bd:43:75:47:d1 lost
Feb 11 13:58:00 kernel: br0: topology change detected, propagating
Feb 11 14:00:34 kernel: br0: port 1(vlan1) neighbor 8000.08:bd:43:75:47:d1 lost
Feb 11 14:00:34 kernel: br0: topology change detected, propagating
At which time my router becomes unresponsive and I have to reboot it.
Since the rebind attack is detected does that mean it has been blocked? Do I have a problem?
Are the neighbor lost and rebind attacks related to each other?
How do prevent this?
I'm not using Plex.
One more question - When I reboot my router it always start with a date of May 5. Why is that? Is it correctable?
thanks