How can disable OTN Support in H series?

Here is information about customize your H series firmware.

FrancYescO
Posts: 22
Joined: Sat Jul 25, 2015 12:34 am

Re: How can disable OTN Support in H series?

Post by FrancYescO » Sat Jul 25, 2015 3:22 pm

are we sure about "msecnd.net" domain? actually i'm not resolving it

BTW, i blocked domains in my DD-WRT router ... if someone need it, add this under Services>Services>Additional DNSMasq Options

Code: Select all

address=/msecnd.net/0.0.0.0
address=/samsungotn.net/0.0.0.0
address=/www.samsungotn.net/0.0.0.0
address=/test.samsungotn.net/0.0.0.0

sectroyer
Official SamyGO Developer
Posts: 5765
Joined: Wed May 04, 2011 5:10 pm

Re: How can disable OTN Support in H series?

Post by sectroyer » Sat Jul 25, 2015 6:19 pm

Not sure it was suggested by testers :) You can check in extras :)
I do NOT support "latest fw" at ALL. If you have one you should block updates on router and wait for it to STOP being "latest":)
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on http://ctrlv.it/ Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!

mad_ady
SamyGO Project Donor
Posts: 264
Joined: Sun May 03, 2015 10:42 am

Re: How can disable OTN Support in H series?

Post by mad_ady » Wed Jul 29, 2015 9:47 am

Ok, I took the plunge and bought a H6400 (finally) :)

So far it's not connected to the internet, and it's running T-MST14DEUC-2602.2. As far as I know, the current rooting method doesn't work on such a new firmware - but I hope I will be able to root it in the future.
There's no OTA/OTN option to disable in the service menu and I will try to disable it from the extended service menu soon.

Additionaly I redirected the above domains to 127.0.0.1 in my router.
Do I need to do any additional steps to ensure it will never update on its own? I'm new here and maybe I missed something...

Offtopic - @sectroyer: Can I help you with searching a way to root newer firmwares? I have 15 years linux experience and about 5 years in embedded systems (WDTV media player). What I don't have a lot of is time and specialized hardware access (decapping nand chips) :(. Would it help if I performed a network scan (like Nessus?). If it's not a secret (something that might help Samsung plug their holes), can you share your ideas for future vectors of attack?

Thanks for your work and keeping the community together :)
H6400, firmware 2602.2 downgraded to 2130

sectroyer
Official SamyGO Developer
Posts: 5765
Joined: Wed May 04, 2011 5:10 pm

Re: How can disable OTN Support in H series?

Post by sectroyer » Wed Jul 29, 2015 12:14 pm

Everything is secret ;) I work on something for now look at topic about root for "latest firmwares" :) Fighting OTN is now priority :)
I do NOT support "latest fw" at ALL. If you have one you should block updates on router and wait for it to STOP being "latest":)
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on http://ctrlv.it/ Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!

rejected
Posts: 23
Joined: Sat Jul 18, 2015 3:20 pm

Re: How can disable OTN Support in H series?

Post by rejected » Thu Oct 06, 2016 1:36 pm

sectroyer wrote:on your router block traffic to these addresses:
msecnd.net, samsungotn.net, http://www.samsungotn.net, test.samsungotn.net
QUESTION:
What is the IP (numerical) address of msecnd.net'?
My WD router does not allow blocking by domain name (i.e. 'msecnd.net'), it needs external IP address range to block.

samsungotn.net domain has IP address of 210.118.88.205
But I cannot find IP address of msecnd.net domain.

mad_ady
SamyGO Project Donor
Posts: 264
Joined: Sun May 03, 2015 10:42 am

Re: How can disable OTN Support in H series?

Post by mad_ady » Thu Oct 06, 2016 2:04 pm

It doesn't have an address set, but it has subdomains that you should be worried about:

Code: Select all

adrianp@frost:~/temp/3$ dig @8.8.8.8 msecnd.net

; <<>> DiG 9.10.3-P4-Ubuntu <<>> @8.8.8.8 msecnd.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58903
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;msecnd.net.			IN	A

;; AUTHORITY SECTION:
msecnd.net.		124	IN	SOA	ns1.msft.net. msnhst.microsoft.com. 2014061803 7200 900 2419200 3600

;; Query time: 45 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Oct 06 16:02:30 EEST 2016
;; MSG SIZE  rcvd: 104
So, blocking by IP is not very effective because you'd have to block something like azbfj30230523.msecnd.net
H6400, firmware 2602.2 downgraded to 2130

Post Reply

Return to “[H] Firmware”