[ET10x00] Stream outside of network (port forwarding)

[giub1981]

Hi all

I need some help with streaming outside of network, if poss. Have p/f 80 & 8001. Used p/f checker and ports are open. Used my public IP to try and open openwebif using 4g but get "forbidden you do not have permission to access"

When I try on my network using the public ip, it works. I'm I doing anything wrong or missing some settings?

If it helps, I use cable and my router is a superhub 2

Thanks

 

[Ford1]

yeah, STOP PORT FORWARDING!!!!!

You are putting your entire network at risk from hacking, there is a very good guide on how to set up streaming outside your network in the guides thread. use ssh authentication,

See vix guides threads.

 

[Trial]

Hi,
if you know what you are doing and still want to use pf then do not use standard ports. I think 80 might be reserved by your router.

First create a password for your box then then activate authentification for the web interface and perhaps use https. In the router create port forwarding for port 12345 to 80 of your box. Now you should be able to access your box with http(s)://public ip:12345

create a VPN would be the saver solution though.

ciao

 

[giub1981]

Hi

I have put (what I think) is a very strong password onto my box in the hope that this gives better security.

I will have a look at the guide and the p/f using 12345 when I get home.

Cheers

 

[abu baniaz]

See this guide

http://www.world-of-satellite.com/showthread.php?46802-Guide-Setting-up-SSH-with-public-private-keys

 

[imish]

Hi,
if you know what you are doing and still want to use pf then do not use standard ports. I think 80 might be reserved by your router.

First create a password for your box then then activate authentification for the web interface and perhaps use https. In the router create port forwarding for port 12345 to 80 of your box. Now you should be able to access your box with http(s)://public ip:12345

create a VPN would be the saver solution though.

ciao

Non standard ports won't help with a port scan nor will a password of https as the streams are unencrypted and not password protected.

VPN is the way or as Abu suggests ssh


Sent from my iPhone using Tapatalk

 

[Trial]

Hi,
the nonstandard port was only because standard ports are normally reserved for the router that is what I wanted so say. My router for instance does not forward its port 80 because it is used by himself. Because of speed scans often only go up to 1024.

btw. I think streams are protected since last year. At least a lot of effort was put into it.

btw2. I use portforwarding for 10-12 years now not only for my box but also NAS and never had a problem because
I only open ports I need. I use non standard ports. I have quite a good password. So it is possible to live with port forwarding if you what what you are doing.

Ralf

 

[imish]

btw. I think streams are protected since last year. At least a lot of effort was put into it.

Looked into this earlier in the year - My conclusion - Streams are NOT protected.

I was shocked to see how the boxes show up on searches and with unprotected streams anyone with a bit of knowledge of the platform can easily hijack ones tuners and stream away.

 

[Trial]

Hi,
I think you have to reconclude. I just tested. I tried to stream through web interface and username and password were asked from VLC. The option is in system configuration were you configure fallback tuner or preferred tuner.

Ralf

 

[imish]

Hi,
I think you have to reconclude. I just tested. I tried to stream through web interface and username and password were asked from VLC. The option is in system configuration were you configure fallback tuner or preferred tuner.

Ralf

yes, got that far months ago too - however atleast for me it never seems to accept the box's credentials.

if you have managed to get it to work then i would be very interested to understand how.

 

[Trial]

Hi,
I simply activated authentication for HTTP streams but not for web if, opened web if and clicked on a monitor to stream and VLC asked for my credentials and after entering them stream started. Not only the server side must support this feature but also the client. It is possible that not all media play support it.

Ralf

 

[pembo]

but couldn't someone then just turn off authentication for streams....

http://ddnsaddress/api/saveconfig?key=config.streaming.authentication&value=false

 

[Trial]

Hi pembo,
I will test but when web if authentication is activated it should not be possible. I did it without web if password only for a test internally.

Ralf