Firewall ?

[TomT]

Hi

Is there any firewall in the HDR-T2 ??

I'd like to block access to my box from a set of IP addresses.
So Block everything from 192.168.1.3-30

Thanks for your advice.

 

[Wallace]

I'm not 'well up' on this, but can't that be done via your router?

 

[TomT]

Yes and no... Yes for external access, no for the office to home openvpn link..
I was hoping I can do some on the box !

 

[Black Hole]

The short answer is "no"... but there may be something that could be done through a custom package. If you can identify a Linux utility that achieves what you want, put it up for porting to the Humax.

 

[TomT]

Thanks..

Netfilter/iptables does what I need:

netfilter.org is home to the software of the packet filtering framework inside the Linux 2.4.x and 2.6.x kernel series. Software commonly associated with netfilter.org is iptables.

http://www.netfilter.org/

How do we get this ported ?

 

[jack616]

I asked about this before I started recommending Humaxes (I help out with local dissability issues) and was advised not to connect
them to local networks as they could present security hazards. (As could the random connection of TV's/bluray players etc)
These issues seem to be completely ignored.
I did ask online somewhere if there was firewall support (cant remember if I asked here or elsewhere)

My point is - I'm seconding the request for firewall - ideally everything blocked until an IP address AND port AND protocol is specifically allowed.
ARP, most UDP and other protocols should also be dissabled. Personally I'd like to see all IPV6 blocked permanently.

Anyway - Whatever the details it would be nice if someone could look into it.

 

[sooty83]

You can put devices that you want to limit access to behind their own router. This has the added benefit of working even if the device in question is a black box whose internals are not accessible.

 

[xyz321]

The netfilter/iptables option doesn't look very straight forward. It would require a kernel change. I don't think anyone has yet managed to load a new fully working kernel onto the box.

 

[af123]

Ipfilter should be an option.. I haven't tried yet it though..

http://coombs.anu.edu.au/~avalon/