[VU+ Ultimo] Streaming Issue with Image 4.2.01

[Rob van der Does]

yes of course it's the fact that the port I forwarded to the box on my router is the reason it's wide open. but I can't protect it with the user and pass option because it doesn't work. i'v tried it z few ways and the only way openwebif works is if there is no http auth.

Well, first of all: it has been explained many times before on this forum, that portforwarding is insecure by nature. No password changes that.
And secondly, again: did you enable 'authentication for HTTP streams'(in 'customise)?

 

[frankblueking]

.... 4.2.001 doesn't (mustn't) involve a settings restore, so there must be something you've forgotten you did on 4.1, perhaps?

Thanks CCS. As far as I can tell the settings for 4.2.001 are the same as for 4.1.016. As you comment there has not been a settings restore. Is there something fundamentally different in the box sofware or Webif? I am reluctant to postulate that it is the limitation in the Ultimo that is causing the problem. Notwithstanding it is an issue for me.

 

[Larry-G]

yes of course it's the fact that the port I forwarded to the box on my router is the reason it's wide open. but I can't protect it with the user and pass option because it doesn't work. i'v tried it z few ways and the only way openwebif works is if there is no http auth.

a password won't make a blind bit of difference once you open ports on your router and forward them to the receiver.

 

[paddyh]

got it working by changing my password. i was using the password that i used before the upgrade and of course yous are going to tell me that the upgrade envolved setting all the settings up again from scratch including passwords! but in my defence the same password worked using VCC so i assumed it was alright. i also had to change my dyndns password in order for inadyn to work as well.

"a password won't make a blind bit of difference once you open ports on your router and forward them to the receiver"

how is it that the password wont make a difference? will it not stop someone either changing settings or streaming from my reciever?

 

[Larry-G]

got it working by changing my password. i was using the password that i used before the upgrade and of course yous are going to tell me that the upgrade envolved setting all the settings up again from scratch including passwords! but in my defence the same password worked using VCC so i assumed it was alright. i also had to change my dyndns password in order for inadyn to work as well.

"a password won't make a blind bit of difference once you open ports on your router and forward them to the receiver"

how is it that the password wont make a difference? will it not stop someone either changing settings or streaming from my reciever?

Enigma2 was simply never designed with security in mind, still isn't for that matter. While setting a password is always recommended, in this case it still won't make much of a difference because once you open a port on your router for the receiver to stream channels any one who knows what there doing can simply walk rite in, password or not. You need to take more comprehensive measures such as setting up a ssl certificate.

I am not trying to scare you but there are people / programmes out there that are actively looking for the ports these receivers use to stream channels so they can steal or sell your to channels to a dodgy server or worse.

 

[paddyh]

yes i have been a victim of that in the past and funny enuf it was only a matter of hours after changing my password that them dodgy people were stealing my channels again! the only thing i found to work was to change the port to a completly random one. but still to this day i still cant figure out how they do it without the password!

 

[Larry-G]

yes i have been a victim of that in the past and funny enuf it was only a matter of hours after changing my password that them dodgy people were stealing my channels again! the only thing i found to work was to change the port to a completly random one. but still to this day i still cant figure out how they do it without the password!

beacause the security that is built into enigma2 is not worth wiping your arse on. It's the open port they are using to get into the receiver, the password you set is not worth any thing.

If you want to open a port you need to beef up your security either via the router or by setting up a ssl certificate (there is a tutorial on the forum). Setting a password is a false sense of security, or no security at all for that matter.

 

[paddyh]

ok thanks i must look into that, i love learning something new!

 

[Rob van der Does]

And secondly, again: did you enable 'authentication for HTTP streams'(in 'customise)?

I give up; I've asked that 2 or 3 times, but if you don't bother to answer there's nothing I can do. Or did I overlook your reply?

 

[paddyh]

yes you overlooked my reply, I tried enabling all them type of settings in customise and openwebif and nothing made any difference bug as I said I got it working by changing my password. my old password worked for logging into my reciever but not for openwebif. changed now and working so thanks.