was this introduced post 1.2.3-RC3 , which is listed as the version effected
?

On Mon, Jul 19, 2010 at 8:28 PM, Scott Ullrich <sullrich at gmail dot com> wrote:

>
>
> On Mon, Jul 19, 2010 at 4:50 AM, Andrew White <andywhite at gmail dot com> wrote:
>
>> [snip]
>>
>> I assume pfSense doesn't have this on by default, which is why it's on the
>> list ?
>>
>
>
> pfSense has this on by default and goes even further by checking the
> headers and will prevent the page from loading altogether when we detect a
> rebind occurrence.
>
> This change will also break dns forwarder domain forwarding if you do not
> define a ----dns-rebind-ok=domain.com in the dnsmasq configuration however
> that option requires a newer option of dnsmasq which will result in the
> isc-dhcp-leases code being removed.
>
> Scott
>
>