cant block updates on router level
Re: cant block updates on router level
You know what you have to do to block updates
I do NOT support "latest fw" at ALL. If you have one you should block updates on router and wait for it to STOP being "latest":)
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on https://pastebin.com Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on https://pastebin.com Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!
Re: cant block updates on router level
Well I've screwed it up toosectroyer wrote:You know what you have to do to block updates
Blocked the four domains on my Avm-Fritz router before first powering on the tv (tested with browser - no access) and stayed on 1412 almost one year.
Don't know if recently updated user manual triggered it or something else, but unattended tv updated itself to 1460...
Tested further the blacklist function on my router and it still is doing dns for blocked domains, they are still pingable and traceroute for them is also possible.
Don't know if my router manufactor will fix the issue in the next firmware version (mailed them about only blocking port 80), but until then I've added a subnet (router cascading) with another very old router which is blocking everything for forbidden domains.
So DON'T TRUST THE CORRECT BLOCKING OF YOUR ROUTER only by checking it with a browser, test it at least with a computer doing ping and tracert for example!
Correct blocking results with an error message if you are trying to update your samsung manually via menu.
Re: cant block updates on router level
But I use it for IPTV so would like to still use Internet . I am not sure that even unplugging the cord will help to avoid it and it won't update trough bluetooth or other dark linkssectroyer wrote:You know what you have to do to block updates
Re: cant block updates on router level
try this if you are able to download the file
this is my output
Code: Select all
wget http://az43064.vo.msecnd.net/firmware/tv/267/SWU-OU_T-MST14DEUC-2800-151209/OUItem_1.dat
Code: Select all
ag750jz@error404:~> wget http://az43064.vo.msecnd.net/firmware/tv/267/SWU-OU_T-MST14DEUC-2800-151209/OUItem_1.dat
--2016-11-28 00:39:25-- http://az43064.vo.msecnd.net/firmware/tv/267/SWU-OU_T-MST14DEUC-2800-151209/OUItem_1.dat
Resolving az43064.vo.msecnd.net (az43064.vo.msecnd.net)... 0.0.0.0, 2606:2800:133:672:1e5f:2264:1854:1189
Connecting to az43064.vo.msecnd.net (az43064.vo.msecnd.net)|0.0.0.0|:80... failed: Connection refused.
Connecting to az43064.vo.msecnd.net (az43064.vo.msecnd.net)|2606:2800:133:672:1e5f:2264:1854:1189|:80... failed: Network is unreachable.
UE48H6640 T-MST14DEUC 2781.0 root latestH --> 2130.0 skypeRoot-->0000-->2115.3 "Skype refueled" Root
QE55QN93A - - >firmware T-NKM2DEUC-1805.4 (backup 1590.0) - - >update CURL60 Error --> CURL28 Error
QE55QN93A - - >firmware T-NKM2DEUC-1805.4 (backup 1590.0) - - >update CURL60 Error --> CURL28 Error
-
- SamyGO Project Donor
- Posts: 129
- Joined: Mon Nov 07, 2016 12:58 pm
- Location: Poland
- Contact:
Re: cant block updates on router level
Guys use OpenDNS to block unwanted stuff like sammy updates
48HU7500 1008 - half rooted by mihd
Re: cant block updates on router level
From my experience it might not be enough...Borygo77 wrote:Guys use OpenDNS to block unwanted stuff like sammy updates
I do NOT support "latest fw" at ALL. If you have one you should block updates on router and wait for it to STOP being "latest":)
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on https://pastebin.com Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!
If you want me to help you please paste FULL log(s) to "spoiler"/"code" bbcodes or provide link(s) to pasted file(s) on https://pastebin.com Otherwise "NO HELP"!!!
If you want root DISABLE internet access to your device!!!!
DO NOT EVER INSTALL FIRMWARE UPGRADE !!!!
-
- SamyGO Project Donor
- Posts: 129
- Joined: Mon Nov 07, 2016 12:58 pm
- Location: Poland
- Contact:
Re: cant block updates on router level
I didn't mention turning off OTN in service menu as this is obvious
48HU7500 1008 - half rooted by mihd
Re: cant block updates on router level
Right, sectroyer should disable OTN ASAP
Well, blocking whole Internet access is definitely not a solution anyway, let's not make our TVs less smart than they already are.
It's possible that the (2) 2 years old (from H) known domains to block are simply not enough or not relevant anymore for J/K, either since Samsung is watching us, or just because they changed host.
Based on infos given by my router, some netstat, and traffic analysis from here, I tried to make some up-to-date "list of doubtful hosts".
For info, I use Tomato firmware on my router (available for shitloads models) which allows to block "URLs containing string", no idea which trick it uses internally then, I'm not expert but I just know it's very handy and efficient. No need to ask me about other router firmwares: I don't know
Let's share, I assume URLs are not only updates related, could be survey, ads, harmless or even needed by stuff I don't use, so the list is not exhaustive but only given as reference.
Here is strings list I currently block here (K series TV), and between brackets the remaining part of URL/domain it's supposed to block:
Of course everybody's free to share his own experience and correct list if any URL is problematic or missing. I also do not guarantee that forced updates couldn't still occur, it's just my own blocklist (from which I removed Netflix/Amazon/Microsoft/... related crap). Have fun
Well, blocking whole Internet access is definitely not a solution anyway, let's not make our TVs less smart than they already are.
It's possible that the (2) 2 years old (from H) known domains to block are simply not enough or not relevant anymore for J/K, either since Samsung is watching us, or just because they changed host.
Based on infos given by my router, some netstat, and traffic analysis from here, I tried to make some up-to-date "list of doubtful hosts".
For info, I use Tomato firmware on my router (available for shitloads models) which allows to block "URLs containing string", no idea which trick it uses internally then, I'm not expert but I just know it's very handy and efficient. No need to ask me about other router firmwares: I don't know
Let's share, I assume URLs are not only updates related, could be survey, ads, harmless or even needed by stuff I don't use, so the list is not exhaustive but only given as reference.
Here is strings list I currently block here (K series TV), and between brackets the remaining part of URL/domain it's supposed to block:
Code: Select all
(*.) msecnd (.net)
(*.) samsungotn (.net)
otnprd (*.samsungcloudsolution.net/.com)
otnstg (*.samsungcloudsolution.net/.com)
(*.) samsungad (*.*)
(*.) deploy.akamaitechnologies (.com)
prderrordumphsm.samsungcloudsolution (.net/.com)
rmdev.samsungcloudsolution (.net/.com)
(*.) samsungelectronics (.com)
(*.) samsungrm (.net)
(*.) samsungacr (.com)
(*.) smartthings (.com)
104.20.21.219
104.20.22.219
I do NOT receive any PM. Please use forum.
-
- SamyGO Project Donor
- Posts: 129
- Joined: Mon Nov 07, 2016 12:58 pm
- Location: Poland
- Contact:
Re: cant block updates on router level
Time to update some settings thanks zoele!
48HU7500 1008 - half rooted by mihd
Re: cant block updates on router level
Yeah thanks very much, I've added them to my blocking.zoelechat wrote: [...] list if any URL is problematic or missing. [...]
After my (unwanted ) update I found a new ip-adress being blocked: 62.157.140.133
Don't have any clue yet, if it might be harmful or if it's something app-related...
Edit: It seems to be a special service from my internet-provider, unresolvable dns queries are answered with this adress. Still can't explain why these are in my log for blocked sites...