How to stop illegal openwebif streaming from hacked enigma2 box

Quote from master G

Quote from goralpm

I use OSCAM for sharing with me.

Now that we know you only share to yourself within your own network it can safely be said its not an oscam problem and it cannot be used to block access.

I have moved your post and responses away from the "Failban oscam" thread back to here.

Open OpenWebif configuration:

HTTP port - don`t use the default port 80. Change this immediately and close this port in the router.

Enable Authentication for streaming - default is no, change it to yes

Disable remote access for user root - default is no, change it to yes

Streaming port - don`t use the default port 8001. Change this immediately and close this port in the router.

Telnet / ssh to your box, paste in this command then press enter:

adduser admin -h /dev/null -H -s /bin/false -G root

You will be prompted for a new password. Enter your password x2.

Restart GUI.. Now try to login with the user = admin and your new password. You can change admin on the command to any username you want.

The idea behind this is to disable root access which we did in OpenWebif configuration, then give access to only the users you create.

Once the new ports have been configured and opened in the router, login with the new user & pass.

Display More

Hi,Thanks for Tutorial, but is impossible to connect with new username (access denied) and root continue to log in.... can you explane why ? Thanks.

Quote from master G

Quote from domenico91

can you explane why ? Thanks.

Did you disable root access in openwebif configuration?

If you followed the guide correctly and it still doesn`t work, i can`t explain why.

Yes, the problem is that I still cannot log in with the newly created user... yet I have entered the password twice... what could it be?

Quote from domenico91

Yes, the problem is that I still cannot log in with the newly created user... yet I have entered the password twice... what could it be?

if it is local user it should work (i strongly suggest cccam protocol), if remote check firewall redirection to card server . By default oscam doesn;t restrict any ip address (except oscam webif) . remenber client port is somenthing else that webif port . It can be seen in general settings of oscam.

easiest way is to telnet to ip and port of server to see if it responds to ACK

telnet IP_ADDRESS PORT (telnet 192.168.1.66 1200)

Quote from acypaczom

Quote from domenico91

Yes, the problem is that I still cannot log in with the newly created user... yet I have entered the password twice... what could it be?

if it is local user it should work (i strongly suggest cccam protocol), if remote check firewall redirection to card server . By default oscam doesn;t restrict any ip address (except oscam webif) . remenber client port is somenthing else that webif port . It can be seen in general settings of oscam.

easiest way is to telnet to ip and port of server to see if it responds to ACK

telnet IP_ADDRESS PORT (telnet 192.168.1.66 1200)

I'm talking about webif, and box access, I don't have oscam or cccam installed, I don't use cam protocols, I'm interested in being able to log in with a user other than root (to prevent other people from doing it for me remotely).

domenico91 edit oscam.conf

httpallowed                   = 0.0.0.0-255.255.255.255

will allow access to webif from any ip4 address

my option to restrict access from the web is to allow only vpn access to the local network (wireguard or any other utp)

Quote from acypaczom

domenico91 edit oscam.conf

Code

httpallowed                   = 0.0.0.0-255.255.255.255

will allow access to webif from any ip4 address

my option to restrict access from the web is to allow only vpn access to the local network (wireguard or any other utp)

Perhaps I am not making myself understood.

I'm not interested in softcam.

I would like to be able to disable ssh access to the root user, after creating another user with the same permissions, but different from root.

Quote from domenico91

Quote from acypaczom

domenico91 edit oscam.conf

Code

httpallowed                   = 0.0.0.0-255.255.255.255

will allow access to webif from any ip4 address

my option to restrict access from the web is to allow only vpn access to the local network (wireguard or any other utp)

Perhaps I am not making myself understood.

I'm not interested in softcam.

I would like to be able to disable ssh access to the root user, after creating another user with the same permissions, but different from root.

Display More

read about pamd it is located in /etc/pam.d where U can restrict direct access to users, also sshd.conf has option to disable for root user

PermitRootLogin  no