Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[dusf]

[burakkucat]

Welcome to the Kitz forum. 

I am, unfortunately, unable to help you as I have no experience of that modem/router. I am sure that someone with the knowledge will eventually make suggestions to assist you in your quest.

[dusf]

Welcome to the Kitz forum. 

I am, unfortunately, unable to help you as I have no experience of that modem/router. I am sure that someone with the knowledge will eventually make suggestions to assist you in your quest.

Hey burakkucat, and thanks! 

I fear it just may not be possible with this router.

[ejs]

I think the attempt to block *.msecnd.net by blocking an IP address (of msecnd.net) is never going to work, with any router. a.msecnd.net and b.msecnd.net could have totally different IP addresses, each unrelated to the IP address for msecnd.net (if there were one). You ought to be able to block specific IP addresses or IP address blocks though.

I Google searched for msecnd.net, apparently it's the Windows Azure Content Delivery Network, so if you did succeed in blocking all of it, you might block other things unrelated to Samsung TV firmware updates, especially if the block applied to all devices.

[dusf]

I think the attempt to block *.msecnd.net by blocking an IP address (of msecnd.net) is never going to work, with any router. a.msecnd.net and b.msecnd.net could have totally different IP addresses, each unrelated to the IP address for msecnd.net (if there were one). You ought to be able to block specific IP addresses or IP address blocks though.

I Google searched for msecnd.net, apparently it's the Windows Azure Content Delivery Network, so if you did succeed in blocking all of it, you might block other things unrelated to Samsung TV firmware updates, especially if the block applied to all devices.

Thanks for your input. Apparently with Tomato firmware and OpenWRT you can block by string, say *.mscend.net, and it works.

Would it not be risky to block the IP addresses, in case they were to change? At the moment if the Samsung TV receives one update I cannot do what I need to with it.

I would like to restrict the block to just that TV if I could, but if not I will still do it as right now it is the only way to achieve what I am after. Samygo.tv have rooted previous series models, just not this one... yet (hopefully).

Would there be a way to get an IP block, which I think by which you mean a network IP, for every host on mscend.net and samsungotn.net, and looking at the screenshots do you think it would work if I entered it into the firewall options?

It has been suggested to me if I setup a Raspberry Pi as a DNS resolver it could block all traffic to the domains, allowing everything else work.

[dusf]

If it comes to it, any recommendations on a reasonably priced fibre router to run OpenWRT, tomato, or DD-WRT? The WiFi does not have to be the latest thing, we have an extender passing the network through mains power to the back of the house, and the house recently wired with Cat 6 so I can add a few APs.

[ejs]

The blocking of *.mscend.net would have to be done by the DNS resolver. How have you determined that you need to block *.mscend.net though?

Yes, blocking individual IP addresses, or small ranges (blocks) of IP addresses would stop working if the IP addresses that the TV tries to access change. I don't think there is any sensible way to get a list of everything (either host names or IP addresses) on *.mscend.net, and the list could be very long.

Unfortunately the manual for the VMG8324-B10A doesn't clarify how the DNS route works, it doesn't seem to make any sense, how is a subnet mask supposed to apply to a domain name?

[dusf]

The blocking of *.mscend.net would have to be done by the DNS resolver. How have you determined that you need to block *.mscend.net though?

Yes, the reply from Samygo.tv when I queried if there was a list of hosts I could block instead: 'List is UNLIMITED. Also samsung can use (for example) domain: samsung.msecnd.net and ANY subdomains (a.samsung.msecnd.net, b.samsung.msecnd.net, etc.'

Yes, blocking individual IP addresses, or small ranges (blocks) of IP addresses would stop working if the IP addresses that the TV tries to access change. I don't think there is any sensible way to get a list of everything (either host names or IP addresses) on *.mscend.net, and the list could be very long.

Unfortunately the manual for the VMG8324-B10A doesn't clarify how the DNS route works, it doesn't seem to make any sense, how is a subnet mask supposed to apply to a domain name?

Welcome to hell

Get this, I have tried registering on forum.zyxel.com so I can ask about all of this, but it seems the activation email required to post is just not sending. I checked my Gmail spam and bin folders just in case but it is not there. I then set up a @mail.com address just in case it was a gmail thing but still nothing.

[jasjeet]

You could do this all with a raspberry pi I would think. All you need is dnsmasq setup as DHCP and DNS forwarder. Then all clients get the DNS IP as the Raspberry Pi. The pi then consults a host file which you can put the website you want to block and point it to 127.0.0.1. This is how I block ads on my home network with a massive hosts file, it means not even mobile devices on wifi get ads

If you want to test this, you can just do it in a virtual machine on your PC, just use Ubuntu server and make sure the virtual machine is using a bridged connection such that it is on the same ip range as your normal devices.

[dusf]

You could do this all with a raspberry pi I would think. All you need is dnsmasq setup as DHCP and DNS forwarder. Then all clients get the DNS IP as the Raspberry Pi. The pi then consults a host file which you can put the website you want to block and point it to 127.0.0.1. This is how I block ads on my home network with a massive hosts file, it means not even mobile devices on wifi get ads

If you want to test this, you can just do it in a virtual machine on your PC, just use Ubuntu server and make sure the virtual machine is using a bridged connection such that it is on the same ip range as your normal devices.

Thanks for the advice. Someone mentioned same to me recently elsewhere although they did not say anything about blocking the ads. I was actually thinking of investing in a new router, even a second hand 'new router', to run DD-WRT.

Would what you describe work with that, (including the adblocking) say running on an Asus Nighthawk X4/X6/X87 with DD-WRT? Considering the modem is supposed to be located in a home built comms cabinet (surrounded by thick concrete walls on two sides) that particular router series may be overkill - the ultimate plan is to connect APs up around the house, which I had wired with Cat6 during recent renovations.

Does your setup block ads from ITV Hub and All4? on demand players running on say Samsung TVs or Android?

[dusf]

And that post is here: http://forum.kitz.co.uk/index.php/topic,16654.0.html

[jasjeet]

I'm not sure but it blocks YouTube ads on my iPhone. So I assume if you know the addresses it can do any sort of blocking. But I'm still looking into the wildcard blocking, technically it's possible, just haven't got it to work myself yet. I don't know how it works on DD WRT, but if you run a Pi in your cabinet along with your other equipment it'll still work.

I don't even have a smart tv to test but I guess I can try the desktop sites. Will update you on that.

I added this line to dnsmasq.conf
address=/google.com/127.0.0.1

And

Code: [Select]


; <<>> DiG 9.9.5-11ubuntu1-Ubuntu <<>> a.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55031
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITION
AL: 0

;; QUESTION SECTION:
;a.google.com.                  IN      A

;; ANSWER SECTION:
a.google.com.           0       IN      A       127.0.0.1

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Dec 28 17:23:29 PST 2015
;; MSG SIZE  rcvd: 46

root@ubuntu:/home/jas# dig abc.google.com

; <<>> DiG 9.9.5-11ubuntu1-Ubuntu <<>> abc.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1961
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;abc.google.com.                        IN      A

;; ANSWER SECTION:
abc.google.com.         0       IN      A       127.0.0.1

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Dec 28 17:24:48 PST 2015
;; MSG SIZE  rcvd: 48


Guess that works.

[dusf]

I'm not sure but it blocks YouTube ads on my iPhone. So I assume if you know the addresses it can do any sort of blocking. But I'm still looking into the wildcard blocking, technically it's possible, just haven't got it to work myself yet. I don't know how it works on DD WRT, but if you run a Pi in your cabinet along with your other equipment it'll still work.

I don't even have a smart tv to test but I guess I can try the desktop sites. Will update you on that.

I added this line to dnsmasq.conf
address=/google.com/127.0.0.1

And

Code: [Select]


; <<>> DiG 9.9.5-11ubuntu1-Ubuntu <<>> a.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55031
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITION
AL: 0

;; QUESTION SECTION:
;a.google.com.                  IN      A

;; ANSWER SECTION:
a.google.com.           0       IN      A       127.0.0.1

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Dec 28 17:23:29 PST 2015
;; MSG SIZE  rcvd: 46

root@ubuntu:/home/jas# dig abc.google.com

; <<>> DiG 9.9.5-11ubuntu1-Ubuntu <<>> abc.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1961
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;abc.google.com.                        IN      A

;; ANSWER SECTION:
abc.google.com.         0       IN      A       127.0.0.1

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Dec 28 17:24:48 PST 2015
;; MSG SIZE  rcvd: 48


Guess that works.

Thanks, will reference this when I get a rpi to block ads. I had thought some of the players would stop working if they detecting any issue sending the ad through.

[jasjeet]

I'm not sure but it blocks YouTube ads on my iPhone. So I assume if you know the addresses it can do any sort of blocking. But I'm still looking into the wildcard blocking, technically it's possible, just haven't got it to work myself yet. I don't know how it works on DD WRT, but if you run a Pi in your cabinet along with your other equipment it'll still work.

I don't even have a smart tv to test but I guess I can try the desktop sites. Will update you on that.

I added this line to dnsmasq.conf
address=/google.com/127.0.0.1

And

Code: [Select]


; <<>> DiG 9.9.5-11ubuntu1-Ubuntu <<>> a.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55031
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITION
AL: 0

;; QUESTION SECTION:
;a.google.com.                  IN      A

;; ANSWER SECTION:
a.google.com.           0       IN      A       127.0.0.1

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Dec 28 17:23:29 PST 2015
;; MSG SIZE  rcvd: 46

root@ubuntu:/home/jas# dig abc.google.com

; <<>> DiG 9.9.5-11ubuntu1-Ubuntu <<>> abc.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1961
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;abc.google.com.                        IN      A

;; ANSWER SECTION:
abc.google.com.         0       IN      A       127.0.0.1

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Dec 28 17:24:48 PST 2015
;; MSG SIZE  rcvd: 48


Guess that works.

Thanks, will reference this when I get a rpi to block ads. I had thought some of the players would stop working if they detecting any issue sending the ad through.

If that ever became the case, just remove the entry from the hosts file.
I'll see how the itv player and 4od player works on my desktop today.

Edit
On the desktop, 4od ads were not blocked but I'm not sure if either it's possible or if my ad block list includes those targets, likely it's both of these things.