new patch for dream

Hmm, first post ?... From Tunisia , beware of this guys, its common to get dreambox hackers from Tunisia and Greece. This is most likely a script to send him your password and CCcam.cfg

I would reccomend this file gets no where near your Dreambox !
 
What do they do if they get your dreambox details? Can they do anything other than card share with you without your permission?
 
That's usually what their looking for mate. Of course once they have your IP / DNS then your hole network is at risk. Card sharing config files do get stolen often, that's why if you do use CS then your dreambox password shouold never be dreambox ! Always change it !

Telnet in, type passwd
Enter new password twice. Job done.
 
Also, all of your peers DNS names will obviously be exposed.

For these reasons, I like to do a quick check on new peers to make sure they have basic protection in place.

Lots of people leave port 16001 (And whatever the info ports for other protocols are ) open on their firewalls allowing anybody to come in and view their connected peers + servers.

I sure dont want to connect to anyone who is leaving my DNS address publicly visible. Remember its not just the malicious net users you have to worry about, this also means that the likes of Rupert can see your IP address leaving you open to a hefty fine :mad:

If you are leaving port 16001 open on your firewall, you should password protect the webinfo in your CCcam config file. Same for telnetinfo.

Code: 
WEBINFO USERNAME : UserName
WEBINFO PASSWORD : Password

# The telnetinfo service can be protected with a username and password.
# This is switched off by default
#
TELNETINFO USERNAME : UserName
TELNETINFO PASSWORD : Password

I've found a few wide open boxes just by doing a bit of checking :eek:


If the deleted file in the original post is still available to the admins, I wouldnt mind having a peek at it to see what it did :)
 
Unfortunately it was only a link, so it wasn't saved.
 
isn't the telnet closed as default?
 
rolfw said:
Unfortunately it was only a link, so it wasn't saved.
Click to expand...
Thanks rolfw :)

T_G said:
isn't the telnet closed as default?
Click to expand...
Telnet is password protected, But you can use a telnet client to view output from port 16001 (just like a browser) unless you apply a username and password in CCcam.cfg.

This is left open by default.

C :)
 
Back
Top