30 replies to this topic

[ccs]

I wouldn't underestimate the possibility of someone accessing other devices on your local LAN, it's just too easy.

[babba]

*Paranoid* the security is called ) Oke lets get serious now I understand your concern Can you give us a startup then to install openvpn i was checking the openvnp config options and its not looking easy Also i stream my sat at work so i have limited user rights to install vpn clients / plugins. so to stream from a higer port was the only solutions for the time being 

Dont' hate us your backuptool is cool

[WanWizard]

Using the box as a VPN endpoint (i.e. openvpn server) isn't a good idea either, for the same reasons. It's better to use a VPN on your internet router, or on some other hardened device (for example a NAS).

[babba]

1 And yeah lets start form the begin Why can the private content be protected with a stream password and lets say as an example the streaming port 8001 not ?

2 Why is root acces still allowed on the webiff i even created a lower user right user for webif and streaming

[babba]

Using the box as a VPN endpoint (i.e. openvpn server) isn't a good idea either, for the same reasons. It's better to use a VPN on your internet router, or on some other hardened device (for example a NAS).

 

So i will tunnel only to my router what is having a vpn option , or is it end to end   client <-> satbox I am a bit confused

[WanWizard]

1 And yeah lets start form the begin Why can the private content be protected with a stream password and lets say as an example the streaming port 8001 not ?

 

Why not? Menu - Pluging - OpenWebif, enable "HTTP authentication" and "Enable Authentication for streaming".
 

2 Why is root acces still allowed on the webiff i even created a lower user right user for webif and streaming

 

Because you haven't disabled it? Menu - Plugin - OpenWebif, enable "Disable remote access for root".

 

Not that this solves anything, the problem is not that you use a known user, the problem is that the software running is not secure.

[WanWizard]

So i will tunnel only to my router what is having a vpn option , or is it end to end   client <-> satbox I am a bit confused

 

If your internal home network is not secure enough to have a non-encrypted connection between router en satbox, you have a problem from a different kind.

[betacentauri]

I think the best way would be, as WanWizard already said, to use a VPN tunnel between your client (mobile phone, PC,...) and your home router. Then your client is “in” your home LAN and you can access the receiver via the local IP address or via local name.

Building up a VPN is sometimes quite difficult if you have no public IPv4 address. Some internet providers only give you a IPv6 address and some home routers cannot use it for VPN connections.

[babba]

Authentication protect only local content ( videos ) from the hard drive its not protecting as far i know streaming tv channels

 

Regarding the "disable root login from webif" its not existing in the webif settings

[WanWizard]

It is only visible as an option if "Enable HTTP authentication" is enabled. If you don't see that, it could be a feature recently added, I run 7.0-rc on my boxes.

[babba]

Thank you !