protecting dreamboxes

[scoot1690]

hi it definately works tried it with dcc and dreamedit (the new password that is)
so how do i find out thats 100% secure

[manxspud]

nothing is 100% all you can do is make it harder to gain entry.
don't use default passwords... and change them on a regular basis. has somebody tried to gain entry, if so how can you tell.

or... are you been paranoid...

[scoot1690]

not sure if i can say this but apologlies if i am wrong a lot of my * lines were used and box was hnging and stuttering very bad and a good friend told me what had happened that someone else was using my * lines maybe a bit paranoid but wouldnt want it to happen again mate

[Bulld0g]

If you have changed your password to your box you should be ok now m8

[scoot1690]

ive just changed my password but my friend can still get into it HELLLLP

[Bulld0g]

have you changed it via telnet ? reboot the box when you do it

[scoot1690]

changed it by telnet i will reboot just now

[ka004h9564]

Hi scoot,hope all is ok now,will let you know if your box is hacked again,seems secure at the moment,i can see it but cant change any settings.
Ken.
ps,your not the first this has happened to and you wont be the last.

[on_the_jazz]

You said you put it in a dmz. Don't do this, only forward the ports you need to.

[scoot1690]

my router wont let me change the settings when i go into firewall rules i dont have the option to change allow always to block always
router is netgear asdl dg834gt

[ka004h9564]

iv tried going through the settings with him originally,he couldnt find the disable dmz settings at the time,i use a belkin router myself so it was working blind,any help would be appreciated
many thanks
Ken.

[on_the_jazz]

my router wont let me change the settings when i go into firewall rules i dont have the option to change allow always to block always
router is netgear asdl dg834gt

Its under "Services", which is under "Security".

Btw isn't that the official sly router? If sly is your isp I hope you're at least using a non-standard port for your shenanigans

[ka004h9564]

Dont think hes with sky,and i set him up with a different port,
Ken.

[bubbles69]

Reason why i mention have you tried root dreambox its because the is a major security issue, where if you previously have lets say nabilosat 0.11 installed you change password to your own, you then decide to upgrade to 0.12 it the creates the root dreambox again, so you will have your user and password and root and dreambox both passwords working, This is was discovered back in 2009 and was a big issue but once you change again in your new image it should be fine, only well to change pass is through telnet

[ka004h9564]

Yes i know mate i was told you had to put your password in 2 times(4 in total),but he was still hacked,found this out using cccam info,server ip was different to clients ip.
Ken.