I'm not familiar with DNS rebinding, so no. I'm not doing anything DNS related though either. Or am i misinterpreting you now?

Reply to this note

Please Login to reply.

Discussion

If it is a private IP/local network IP, there is a possibility that it could still be affected. Check between the two versions (the version that works and the version that does not work) and see if such a setting exists; and whether or not it is toggled between on and off in either version.

Interesting! i'll check that out, i did find this in the meanwhile!

https://forum.openwrt.org/t/dns-rebind-attack/39141

So i'll check those same logs to see if that's what's happening to me too!

that’s right, I have same router, the manufacturer version is forked China trash fire, only use openwrt image

I don't think that we misinterpreted each other. It is all good. Quick question though: the pre authenticated users are coming from the outside right?

They're coming from lan. So someone would connect to the access point, and then make requests to 198.168.21.21:2121, which is NAT-ed to port 3334 on the router itself. So no traffic from/to wan.

okay cool