4 ms·
Just a heads up that services like these won't work behind security-aware DNS recursive resolvers (like OpenDNS) or routers (like Google Wifi) that block DNS re
by mike_d 7y ago
Just a heads up that services like these won't work behind security-aware DNS recursive resolvers (like OpenDNS) or routers (like Google Wifi) that block DNS rebinding attacks.
https://en.wikipedia.org/wiki/DNS_rebinding https://en.wikipedia.org/wiki/DNS_rebinding
https://support.google.com/wifi/answer/9144137?hl=en https://support.google.com/wifi/answer/9144137?hl=en
- ploxiln 7y agoAre you sure? I think these dns names are deterministic, they never change, for example www.10.0.0.1.xip.io will always resolve to 10.0.0.1 - and I don't think there is a mode where a name could resolve to different ipv4 addresses at different times. EDIT: I experimentally confirmed that opendns and google dns, which claim to block dns rebinding attacks, do not block xip.io or subdomains thereof
- deleted 7y ago[deleted]
- phlo 7y agoIt depends on the implementation of the DNS rebinding protection. I have just checked, and my pfSense firewall (which claims to block DNS rebinding) blocks local addresses from resolving through xip.io (tested with loopback and several RFC1918. All blocked, regardless of whether they match the subnet in use). External addresses (e.g. 1.1.1.1.xip.io) resolve fine.
- bscphil 7y agoI see this too, with Unbound. Using Cloudflare over TLS as my upstream resolver.
- garymoon 7y agoIt was the first thing that came to my mind when I read about xip.io!
- jchw 7y agoIt should work for external IP addresses regardless.