Ubiquiti router owners (I know there are a few on HN) can enable this option like so: ssh <router> configure set service dns forwarding options stop-dns-

Ubiquiti router owners (I know there are a few on HN) can enable this option like so: ssh <router> configure set service dns forwarding options stop-dns-rebind commit save /var/log/dnsmasq.log should contain the resolution failures after that. e.g.: Sep 1 21:48:41 dnsmasq[26479]: possible DNS-rebind attack detected: www.dropboxlocalhost.com