41 replies to this topic

[imperia]

Hello,

 

I have "Authentication for streaming" set to YES. But WebIf does ask for password when I launch m3u thru vlc.

 

Also how can I change the streaming port to something else than 8001.

 

Thanks

 

 

[littlesat]

Why do you need to change that port number?

[imperia]

I wanted to make it little bit more harder for those who scan for 8001 ports on internet to find STBs.

Password authentication is enough for me, but its not working somehow.

[Pr2]

Hi,

 

You don't need to change it on the box, change it on your port forwarding on your external routeur.  Your-External-Port -> your-box:8001

 

Pr2

[WanWizard]

And you don't make it much harder, it will take 20 seconds or so more to find your altered port.

 

Security by obscurity is always a bad idea, and there are now active searches for open streaming ports, by people that run illegal IPTV networks, so be warned.

[imperia]

Hi,

 

You don't need to change it on the box, change it on your port forwarding on your external routeur.  Your-External-Port -> your-box:8001

 

Pr2

I wanted the generated m3u to be with valid link(port) inside.

 

Why it doesn't ask for password when "Authentication for streaming" is set to YES. Is it bugged or I misunderstand it purpose?

Edited by imperia, 20 April 2015 - 14:36.

[WanWizard]

Afaik there is no integrated support for password prompting in streaming protocols, so you need to use the standard http spec, and specify the account info in the URL: http://username:password@website/url.

[imperia]

What I mean.

When I launch in VLC: http://et6x00/currentstream.m3u

It asks me for password. Its part of WebIf. Good.

 

I thought that when I enable "authentication for streaming" it will ask me for password again but for the link inside the m3u file.

http://et6x00:8001/1...:1:C00000:0:0:0: for example.

 

Doesn't matter for me if it will ask me for password in VLC or I have to add it to the link itself like http://username:password@website/url.

 

If I am wrong. Please explain me what for is "authentication for streaming" option.

Edited by imperia, 20 April 2015 - 15:32.

[WanWizard]

The link inside the m3u should contain the password, in the format I gave you.

[imperia]

Ok. But looks like with "Enable Authentication for streaming" Set to YES. People are connecting to my streaming port without password!

 

I also tried it within my network and it doesn't require password.

[Pr2]

The point here is relevant, if the OpenWebif is configured to be password protected then the generated link in the .m3u file should include the login/password in the proper way.

It is not user friendly to ask them to edit the file and add this login/pwd for every service entries.

So dev of OpenWebif should consider to support this.

[WanWizard]

And in your previous post you mentioned that you got prompted for your password?

[imperia]

The point here is relevant, if the OpenWebif is configured to be password protected then the generated link in the .m3u file should include the login/password in the proper way.

It is not user friendly to ask them to edit the file and add this login/pwd for every service entries.

So dev of OpenWebif should consider to support this.

Agree.

[imperia]

And in your previous post you mentioned that you got prompted for your password?

If I open WebIf in browser - It ask for password.

I guess that currentstream.m3u is part of WebIf and I got password prompt when launching it in VLC. everything is OK,  BUT

If I launch link like this one http://et6x00:8001/1...:1:C00000:0:0:0: in VLC. No password prompt or anything even when "Enable Authentication for streaming" is set to YES.

That's what "hackers" (more like script kiddies) use to bypass my password.

[Erik Slagter]

Here is the proof that it works:

$ wget -Y off -O - -S 'http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0'
--2015-04-20 18:49:09--  http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0
Resolving duo.ipv4.slagter.name (duo.ipv4.slagter.name)... 10.1.10.12
Connecting to duo.ipv4.slagter.name (duo.ipv4.slagter.name)|10.1.10.12|:8001... connected.
HTTP request sent, awaiting response... 
  HTTP/1.0 401 Authorization Required
  WWW-Authenticate: Basic realm="streamserver"

Username/Password Authentication Failed.

I guess you forgot to configure one of the three (!) locations where you set authentication.

[WanWizard]

To make it clear again:

 

the password on the WebIf "itself" is a different setting than the password on the stream port. You can enable/disable these two seperately, and default is "on" for the WebIf, and "off" for the streaming port.

 

If you request http://yourboxip/something.m3u, it is your webif password you have to enter. Inside the m3u is the stream URL, which is what this discussion is about.

 

You can test this in VLC by opening a network stream, and then paste the URL from the m3u. If you don't get a password prompt, your config is wrong.

[imperia]

What I am missing?

 

Attached Files

•  1_0_1_13B_3_1_1863190_0_0_0.jpg   54.6KB   6 downloads

[Erik Slagter]

You are missing (like I hinted on before), the setting in enigma, these are webif settings.

[teo1966]

Here is the proof that it works:

$ wget -Y off -O - -S 'http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0'--2015-04-20 18:49:09--  http://duo.ipv4.slagter.name:8001/1:0:19:22e3:80d:2:11a0000:0:0:0Resolving duo.ipv4.slagter.name (duo.ipv4.slagter.name)... 10.1.10.12Connecting to duo.ipv4.slagter.name (duo.ipv4.slagter.name)|10.1.10.12|:8001... connected.HTTP request sent, awaiting response...   HTTP/1.0 401 Authorization Required  WWW-Authenticate: Basic realm="streamserver"Username/Password Authentication Failed. 

I guess you forgot to configure one of the three (!) locations where you set authentication.

  

You are missing (like I hinted on before), the setting in enigma, these are webif settings.

Where cant find this 3 locaties on a et10000 ?

[Erik Slagter]

Browse the enigma settings.