Okay guys, so I already thought I had updates blocked only to discover firmware 1412 running on my new J Series TV - I luckily was able to get the supplier to give me a replacement and I will not be connecting it to the network again until I am absolutely certain updates are blocked!! ![:lol:]( "Laughing")
![:lol:]( "Laughing")
The main reason I want to do this is so I can sideload apps from USB, so I am not restricted to having only apps from one country installed at a time, basically it is Irish RTÉ, TG4, 3Player OR British iPlayer, All4, ITVHub - not both sets. I am also guessing the factory firmware version will be the first to be rooted.
The domains I need to block are the following:
I am testing for success by attempting to block just the first domain, first on my PC, which has the hostname roadrunner and the MAC address you will see in the screenshot. I have been testing by trying to load this link in a new browser tab:
https://az833301.vo.msecnd.net/
What I have tried so far:
1. Using Security >> Parental Control.
![Image]()
![Image]()
Just in case the settins were phrased badly, I tried sliding the bar so that no access was from '00:00 - 24:00' but this made no difference. Also, I am not able to select '00:01 - 24:00', the earliest next available is '00:30 - 24:00'.
![Image]()
I tried with an without a network service setting configured as above. The input box for site/URL keyword would not accept the asterisk when I tried to enter *.mscend.net.
2. Using Security >> Firewall.
![Image]()
The IP below was in the output of ping msecnd.net yesterday, but now there is no reply, even from other devices on the network. Also, blocking by IP may be risky - if the TV is configured to look for updates by host@domain, and they change the IP, it will update.
![Image]()
I know it says destination IP address below, but just in case I tried entering msecnd.net but it would not accept it. It also would not let me enter a port range 1-65535, so I left it without a port setting.
![Image]()
![Image]()
Definition of the 247 scheduler rule. I experimented with changing the time from '00:00 - 00:00' to '00:00 - 23:59' but this made no difference:
![Image]()
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Neither of my two attempts above to block access to the domain msecnd.net worked, although when I experimented with the ACL set to ICMP instead of TCP/UDP - it did stop ping replies from the IP before I removed it.
Please advise, am I missing something in my settings or is the config on this Zyxel just bugged or not able to block domains? Is there anything I can do? I really want to hook the new TV up to the network so I can stop using the Roku 3 for on demand media!
The main reason I want to do this is so I can sideload apps from USB, so I am not restricted to having only apps from one country installed at a time, basically it is Irish RTÉ, TG4, 3Player OR British iPlayer, All4, ITVHub - not both sets. I am also guessing the factory firmware version will be the first to be rooted.
The domains I need to block are the following:
Code:
msecnd.net
samsungotn.netI am testing for success by attempting to block just the first domain, first on my PC, which has the hostname roadrunner and the MAC address you will see in the screenshot. I have been testing by trying to load this link in a new browser tab:
https://az833301.vo.msecnd.net/
What I have tried so far:
1. Using Security >> Parental Control.
Just in case the settins were phrased badly, I tried sliding the bar so that no access was from '00:00 - 24:00' but this made no difference. Also, I am not able to select '00:01 - 24:00', the earliest next available is '00:30 - 24:00'.
I tried with an without a network service setting configured as above. The input box for site/URL keyword would not accept the asterisk when I tried to enter *.mscend.net.
2. Using Security >> Firewall.
The IP below was in the output of ping msecnd.net yesterday, but now there is no reply, even from other devices on the network. Also, blocking by IP may be risky - if the TV is configured to look for updates by host@domain, and they change the IP, it will update.
I know it says destination IP address below, but just in case I tried entering msecnd.net but it would not accept it. It also would not let me enter a port range 1-65535, so I left it without a port setting.
Definition of the 247 scheduler rule. I experimented with changing the time from '00:00 - 00:00' to '00:00 - 23:59' but this made no difference:
--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Neither of my two attempts above to block access to the domain msecnd.net worked, although when I experimented with the ACL set to ICMP instead of TCP/UDP - it did stop ping replies from the IP before I removed it.
Please advise, am I missing something in my settings or is the config on this Zyxel just bugged or not able to block domains? Is there anything I can do? I really want to hook the new TV up to the network so I can stop using the Roku 3 for on demand media!
Statistics: Posted by dusf — Thu Dec 24, 2015 7:30 pm — Replies 0 — Views 34