30 replies to this topic

[abra]

Is it possible to change in OpenPli the 8001 port used for streaming ? Or is the only possibility to change the port 8001 in the url present in the m3u stream file that is opened by VLC via WebIf to some other port, and forward in my router that other port to my receiver?

 

[betacentauri]

Don't use port forwarding! It's not save. Just search with google for WebIfs in the net with different ports than 8001. You will find them! Also using a password is not save. Use a VPN.

(Yes, I know there are problems using VPN with ipv6. But better don't use it than having another hacked box sending spams)

[babba]

Intresting topic 

 

I have my webif on a high port so that is not the issue 

I want to change the streaming port 8001 as wel because i have the idea that someone is streaming from my box.  Port 8001 is not protected by any password its just forwarded

 

Please advise

[betacentauri]

Advice see post above yours. Don’t do it!!!
Use a VPN. Changing ports is not secure. And if you don’t use a password, you can reflash your box as it might be already hacked and maybe a mining client is running on it or it’s a spam box...

[WanWizard]

And you think changing a port will fix that? Exposing your box on the internet is waiting for it to be misused. It is not a security device, it is not hardened.

[babba]

For 

 

Advice see post above yours. Don’t do it!!!
Use a VPN. Changing ports is not secure. And if you don’t use a password, you can reflash your box as it might be already hacked and maybe a mining client is running on it or it’s a spam box.Nah a

Nah i run backups on a regular base I am not scared to get hacked its just annoying that someone can stream on a open 8001 port 

[WanWizard]

Have it your way.

 

Just know that the internet is constantly searched for open streaming ports, which are than added to an illegal IPTV streaming network.

[littlesat]

Last week a friend called my and asked to my why he has a yellow dot on the infobar.... guess what happened....

[babba]

For who is interested: 

 

I have installed stream proxy what works pretty solid,

 

 

1 opkg install streamproxy

2 edit your enigma2/settings file and ad this  'config.OpenWebif.streamport=50001'  without quotes 

Now go to -> nano /etc/inetd.conf and add the following line  '50001           stream  tcp     nowait  root    /usr/bin/streamproxy            streamproxy'  without quotes 

 

Port 50001 is just an example Make sure its a high port 

 

When i open a stream now in my webif and wants to stream it open on 50001   )

 

Babba

[babba]

Last week a friend called my and asked to my why he has a yellow dot on the infobar.... guess what happened....

overheated because of mining? 

[betacentauri]

"Thanks" for the next spam box and next DDoS wave...

[Erik Slagter]

Yep, and your internal network being harvested, using the settopbox as a trampoline into your network.

[ColinB]

"Thanks" for the next spam box and next DDoS wave...

 

Phwew !!

 

Should have saved it for April 1

Edited by ColinB, 13 December 2018 - 18:38.

[Erik Slagter]

It's far too serious to be used as joke unfortunately. Betacentauri is not joking here and neither am I.

Edited by Erik Slagter, 13 December 2018 - 19:53.

[littlesat]

Beleave us... it’s not an April fool’s Joke.... ik is f#cking serieus.... when you don’t believe you guarantee will experience it...

Edited by littlesat, 13 December 2018 - 22:48.

[betacentauri]

Sorry, he is using port forwarding without password! Port forwarding with password is already not a really good idea, but without password it is really like inviting everybody in the world to use his box for everything they like.
There are already too much botnets out there which can make much trouble for every internet user.

[Pr2]

I think that a moderator should perhaps edit the post that explain how to perform this and mask the how-to to avoid that people start duplicating this big security hole on their own box.

[ColinB]

Bear with me a second or two as this is way above my pay grade.

 

If someone could explain whats the worst that could happen.

 

ie access home network and run a bot ?

[WanWizard]

Your box is an unprotected, unhardend linux computer. It doesn't need elevated rights hacks, everything already runs as root. Most also have unlimited internet access.

 

If you open the web interface to the internet, anyone with a bit of knowledge can read and write every file on your box. Once on the box, they can not only run anything they want, they can also access everything in your internal network, most people don't have any security interally either.

 

And if you open the streaming port on the internet, anyone can access the streams, chances of them being added to an illegal IPTV network are very high.

[betacentauri]

Worst case: All your data is lost and hacker also manipulates your home banking and get your money and also use your PCs/receiver for serving illegal things. That's really the worst case.

An open port on a not really secure device is a thread. A hacker might find a way to hack it and to get control of your box. Then all your computer in the home LAN can be attacked. Maybe not very likely and the hacker is maybe already satisfied by having control of your receiver or having control of the unprotected streams.