How can disable OTN Support in H series?

[FrancYescO]

are we sure about "msecnd.net" domain? actually i'm not resolving it

BTW, i blocked domains in my DD-WRT router ... if someone need it, add this under Services>Services>Additional DNSMasq Options

Code: Select all

address=/msecnd.net/0.0.0.0
address=/samsungotn.net/0.0.0.0
address=/www.samsungotn.net/0.0.0.0
address=/test.samsungotn.net/0.0.0.0

[sectroyer]

Not sure it was suggested by testers You can check in extras

[mad_ady]

Ok, I took the plunge and bought a H6400 (finally)

So far it's not connected to the internet, and it's running T-MST14DEUC-2602.2. As far as I know, the current rooting method doesn't work on such a new firmware - but I hope I will be able to root it in the future.
There's no OTA/OTN option to disable in the service menu and I will try to disable it from the extended service menu soon.

Additionaly I redirected the above domains to 127.0.0.1 in my router.
Do I need to do any additional steps to ensure it will never update on its own? I'm new here and maybe I missed something...

Offtopic - @sectroyer: Can I help you with searching a way to root newer firmwares? I have 15 years linux experience and about 5 years in embedded systems (WDTV media player). What I don't have a lot of is time and specialized hardware access (decapping nand chips) . Would it help if I performed a network scan (like Nessus?). If it's not a secret (something that might help Samsung plug their holes), can you share your ideas for future vectors of attack?

Thanks for your work and keeping the community together

[sectroyer]

Everything is secret I work on something for now look at topic about root for "latest firmwares" Fighting OTN is now priority

[rejected]

on your router block traffic to these addresses:
msecnd.net, samsungotn.net, http://www.samsungotn.net, test.samsungotn.net

QUESTION:
What is the IP (numerical) address of msecnd.net'?
My WD router does not allow blocking by domain name (i.e. 'msecnd.net'), it needs external IP address range to block.

samsungotn.net domain has IP address of 210.118.88.205
But I cannot find IP address of msecnd.net domain.

[mad_ady]

It doesn't have an address set, but it has subdomains that you should be worried about:

Code: Select all

adrianp@frost:~/temp/3$ dig @8.8.8.8 msecnd.net

; <<>> DiG 9.10.3-P4-Ubuntu <<>> @8.8.8.8 msecnd.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58903
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;msecnd.net.			IN	A

;; AUTHORITY SECTION:
msecnd.net.		124	IN	SOA	ns1.msft.net. msnhst.microsoft.com. 2014061803 7200 900 2419200 3600

;; Query time: 45 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Oct 06 16:02:30 EEST 2016
;; MSG SIZE  rcvd: 104

So, blocking by IP is not very effective because you'd have to block something like azbfj30230523.msecnd.net