peteru

My experience is mainly with ini hardware and Beyonwiz distro. With that combination there are no issues changing kernel config, but there is no need, since all the required features are already enabled. OpenPLi may be more limited in terms of kernel features, but it should be possible to use the dvb driver with a kernel that has more modules enabled.

By all means, use whatever method is best for OpenPLi. At least we now both know that you are aware of different methods and that you have a reason for choosing the approach you have taken.

For maximum flexibility, the patch that restricts the connections to private or local networks would be selectable at runtime with a command line switch.

Improving security is always a good idea, but I wonder if patching BusyBox telnet server is the right angle of attack.

I would think that a system wide configuration using ipchains/iptables would be more sensible. It would work with any telnet server and the same set of rules can be applied to multiple services.