From 8bc95b43baf4bb2e77c7e88043a036945f6fcaa0 Mon Sep 17 00:00:00 2001
From: Scott Ullrich <sullrich@pfsense.org>
Date: Thu, 1 Jul 2010 17:32:36 -0400
Subject: DNS Rebinding support from 2.0

---
 etc/inc/auth.inc | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/etc/inc/auth.inc b/etc/inc/auth.inc
index 4c02aad..c00befa 100644
--- a/etc/inc/auth.inc
+++ b/etc/inc/auth.inc
@@ -33,6 +33,14 @@ require_once("globals.inc");
 /* We only support file backed HTTP Basic auth right now */
 $auth_method="htpasswd_backed_basic_auth";
 
+/* DNS ReBinding attack prevention.  http://redmine.pfsense.org/issues/708 */
+if ($_SERVER['HTTP_HOST'] != $config['system']['hostname'] . "." . $config['system']['domain'] and
+	$_SERVER['HTTP_HOST'] != $_SERVER['SERVER_ADDR'] and 
+	$_SERVER['HTTP_HOST'] != $config['system']['hostname']) {
+    echo "DNS Rebind attack detected, see http://en.wikipedia.org/wiki/DNS_rebinding";
+    exit;
+}
+
 /* Authenticate user - exit if failed (we should have a callback for this maybe) */
 if (!$auth_method())
 	exit;
-- 
cgit v1.1