new patch for dream

benahmed02 · 13-02-2009

File deleted as suspect. Admin

**B16MCC** · 15-02-2009

Hmm, first post ?... From Tunisia , beware of this guys, its common to get dreambox hackers from Tunisia and Greece. This is most likely a script to send him your password and CCcam.cfg

I would reccomend this file gets no where near your Dreambox !

**T_G** · 15-02-2009

What do they do if they get your dreambox details? Can they do anything other than card share with you without your permission?

**B16MCC** · 15-02-2009

That's usually what their looking for mate. Of course once they have your IP / DNS then your hole network is at risk. Card sharing config files do get stolen often, that's why if you do use CS then your dreambox password shouold never be dreambox ! Always change it !

Telnet in, type passwd
Enter new password twice. Job done.

***compufunk*** · 15-02-2009

Also, all of your peers DNS names will obviously be exposed.

For these reasons, I like to do a quick check on new peers to make sure they have basic protection in place.

Lots of people leave port 16001 (And whatever the info ports for other protocols are ) open on their firewalls allowing anybody to come in and view their connected peers + servers.

I sure dont want to connect to anyone who is leaving my DNS address publicly visible. Remember its not just the malicious net users you have to worry about, this also means that the likes of Rupert can see your IP address leaving you open to a hefty fine

If you are leaving port 16001 open on your firewall, you should password protect the webinfo in your CCcam config file. Same for telnetinfo.

Code:

WEBINFO USERNAME : UserName
WEBINFO PASSWORD : Password

# The telnetinfo service can be protected with a username and password.
# This is switched off by default
#
TELNETINFO USERNAME : UserName
TELNETINFO PASSWORD : Password

I've found a few wide open boxes just by doing a bit of checking

If the deleted file in the original post is still available to the admins, I wouldnt mind having a peek at it to see what it did

**rolfw** · 15-02-2009

Unfortunately it was only a link, so it wasn't saved.

**T_G** · 15-02-2009

isn't the telnet closed as default?

***compufunk*** · 16-02-2009

Originally Posted by rolfw

Unfortunately it was only a link, so it wasn't saved.

Thanks rolfw

Originally Posted by T_G

isn't the telnet closed as default?

Telnet is password protected, But you can use a telnet client to view output from port 16001 (just like a browser) unless you apply a username and password in CCcam.cfg.

This is left open by default.

C

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

new patch for dream Dreambox information exchange on the best dreambox software images and help with all other operational problems with your Dreambox. The ultimate Dreambox satellite TV support forum.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)