[ramblin]

Recently, about 4 different IPs began showing up in my logs as "possible DNS-rebind attacks". This is a sample of 2 of them. In the beginning I would see several pages of this. I went to "Access Restrictions" and blocked all 4 by URL. Most have stopped but a few like this still manage to show up every day. I`m certain this was self-inflicted as one site ties to a VOIP phone I was using that I installed 3rd party software on to extend its life. I have since replaced the phone with an upgraded model. Is this something to be concerned about or nothing at all? I`m using WPA2 personal with AES and SPI firewall enabled.

[kernel-panic69]

As it clearly shows in the log entries, it's dnsmasq, not the firewall. Looks like IoT crap. It's up to you whether to block the domains or to add rebind-domain-ok= lines to your dnsmasq configuration. Pretty sure these things have been discussed before somewhere in the forum...