Hi, just to let you know about about my "final" solution to block sammy updates ...
Considering that:
- iptables (firewall rules) are not suitable because they work on ip address basis (not host basis, as we need)
- OpenDns leaves a little time frame of vulnerability
- host file is not writeable in rooted sammy (many thanks to sectroyer for the info !)
if your router is not flexible enough to block https host addresses (note the final s !!!), in my knowledge there are at least two other ways:
- http proxy (squid or others)
- dnsmask
Of course http proxy is not usual in home networks, but dnsmask is a feature that can be found in many router or access points.
For instance, my router don't have dnsmask but in my home network I have an access point with tomato firmware that has dnsmask, so I only had to add the two lines:
in the dnsmask section and tell my sammy I want the tomato AP to be it's DNS server, and the trick is done !
(use static ip address in network configuration, give default gateway as usual but write DNS server with the access point ip address)
Now msecnd.net and samsungotn.net are blocked only to my sammy tv, but still accessible to the rest of my home network.
Considering that:
- iptables (firewall rules) are not suitable because they work on ip address basis (not host basis, as we need)
- OpenDns leaves a little time frame of vulnerability
- host file is not writeable in rooted sammy (many thanks to sectroyer for the info !)
if your router is not flexible enough to block https host addresses (note the final s !!!), in my knowledge there are at least two other ways:
- http proxy (squid or others)
- dnsmask
Of course http proxy is not usual in home networks, but dnsmask is a feature that can be found in many router or access points.
For instance, my router don't have dnsmask but in my home network I have an access point with tomato firmware that has dnsmask, so I only had to add the two lines:
Code:
address=/msecnd.net/127.0.0.1
address=/samsungotn.net/127.0.0.1in the dnsmask section and tell my sammy I want the tomato AP to be it's DNS server, and the trick is done !
(use static ip address in network configuration, give default gateway as usual but write DNS server with the access point ip address)
Now msecnd.net and samsungotn.net are blocked only to my sammy tv, but still accessible to the rest of my home network.
Statistics: Posted by gianni253 — Sun Oct 30, 2016 6:04 pm — Replies 3 — Views 381