Page 3 of 3
Re: How can disable OTN Support in H series?
Posted: Sat Jul 25, 2015 3:22 pm
by FrancYescO
are we sure about "msecnd.net" domain? actually i'm not resolving it
BTW, i blocked domains in my DD-WRT router ... if someone need it, add this under Services>Services>Additional DNSMasq Options
Code: Select all
address=/msecnd.net/0.0.0.0
address=/samsungotn.net/0.0.0.0
address=/www.samsungotn.net/0.0.0.0
address=/test.samsungotn.net/0.0.0.0
Re: How can disable OTN Support in H series?
Posted: Sat Jul 25, 2015 6:19 pm
by sectroyer
Not sure it was suggested by testers
You can check in extras
Re: How can disable OTN Support in H series?
Posted: Wed Jul 29, 2015 9:47 am
by mad_ady
Ok, I took the plunge and bought a H6400 (finally)
So far it's not connected to the internet, and it's running T-MST14DEUC-2602.2. As far as I know, the current rooting method doesn't work on such a new firmware - but I hope I will be able to root it in the future.
There's no OTA/OTN option to disable in the service menu and I will try to disable it from the extended service menu soon.
Additionaly I redirected the above domains to 127.0.0.1 in my router.
Do I need to do any additional steps to ensure it will never update on its own? I'm new here and maybe I missed something...
Offtopic - @sectroyer: Can I help you with searching a way to root newer firmwares? I have 15 years linux experience and about 5 years in embedded systems (WDTV media player). What I don't have a lot of is time and specialized hardware access (decapping nand chips)
. Would it help if I performed a network scan (like Nessus?). If it's not a secret (something that might help Samsung plug their holes), can you share your ideas for future vectors of attack?
Thanks for your work and keeping the community together
Re: How can disable OTN Support in H series?
Posted: Wed Jul 29, 2015 12:14 pm
by sectroyer
Everything is secret
I work on something for now look at topic about root for "latest firmwares"
Fighting OTN is now priority
Re: How can disable OTN Support in H series?
Posted: Thu Oct 06, 2016 1:36 pm
by rejected
sectroyer wrote:on your router block traffic to these addresses:
msecnd.net, samsungotn.net, http://www.samsungotn.net, test.samsungotn.net
QUESTION:
What is the IP (
numerical) address of
msecnd.net'?
My WD router does not allow blocking by domain name (
i.e. 'msecnd.net'), it needs external IP address range to block.
samsungotn.net domain has IP address of 210.118.88.205
But I cannot find IP address of
msecnd.net domain.
Re: How can disable OTN Support in H series?
Posted: Thu Oct 06, 2016 2:04 pm
by mad_ady
It doesn't have an address set, but it has subdomains that you should be worried about:
Code: Select all
adrianp@frost:~/temp/3$ dig @8.8.8.8 msecnd.net
; <<>> DiG 9.10.3-P4-Ubuntu <<>> @8.8.8.8 msecnd.net
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58903
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;msecnd.net. IN A
;; AUTHORITY SECTION:
msecnd.net. 124 IN SOA ns1.msft.net. msnhst.microsoft.com. 2014061803 7200 900 2419200 3600
;; Query time: 45 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Thu Oct 06 16:02:30 EEST 2016
;; MSG SIZE rcvd: 104
So, blocking by IP is not very effective because you'd have to block something like azbfj30230523.msecnd.net