Foxsat custom firmware remote login

J

johnylondon

New Member
Hi everyone, newb to the forum here - but I'm not new to Humax boxes! However I have only recently found it necessary to go over to freesat in place of freeview. Having already had two1000s boxes fail on me (hard drive not recognised) I have settled on a pair of Foxsats. Yesterday loaded custom firmware with no problems (32gb stick too!) and the patch for unencoded hd recordings. The web interfaces are downloaded and working too. My only issue is with setting a secure login. The settings don't seem to "stick." That is, at some point my browser did ask me for pw and user, but not again, and the page shows as Not Secure. I looked into trying to use Telnet and Samba to set pw and user but got totaly lost along the way. Any tips? thanks.
 
johnylondon said:
the page shows as Not Secure.
Click to expand...
The web server is using HTTP not HTTPS, so all modern browsers default to complaining that the web page is not secure. Don't worry about that, but if you want HTTPS it can be enabled on WebIF >> Settings >> Web Interface Settings (at least, I'm going by the HDR-FOX CF, and presuming the Foxsat CF is broadly similar).

User authentication (same place in WebIF settings) is not the same thing. If you're setting up a WebIF user and password but it's not sticking, that suggests (to me anyway) a file system write error.

johnylondon said:
I looked into trying to use Telnet and Samba to set pw and user but got totaly lost along the way.
Click to expand...
Again, that has nothing to do with setting up password protected access to the WebIF.
 
It is slightly different on tyhe foxsat, the http/https switch is under
Settings
Web Interface Server Settings

along with the 'User Access Control' settings.

The built in Documentation section is a good place to explore for guidance.
 
Hi and thanks for the replies. I did read the documentation that was on the webif regarding this. Today I tried accessing the foxsat from devices connected to mobile data rather than my network, and was pleased to see that it couldn't be accessed so I suppose it is as secure as anything on my network.
The devices in this instance did not get offered a log in, the page just wouldn't load. Essentially, that's good enough then. It might be nice to be able to login from anywhere if I see something I want to record but then of course that would involve leaving the foxsat on permanently so probably not worth it.
So, the log in is just an extra level of protection so for example a guest on my network could not access the Foxsat?
thanks.
 
johnylondon said:
Today I tried accessing the foxsat from devices connected to mobile data rather than my network, and was pleased to see that it couldn't be accessed so I suppose it is as secure as anything on my network.
Click to expand...
The IP address you use on your home network to access devices on your home network bears no relevance to IP addresses on the Internet. Devices on the Internet cannot simply drill in through your router and access devices on your home network ad lib, even if they did know your global IP address and IP addresses on your network – the router's security makes sure of that. And, unless you've paid extra for a static IP from your service provider, your Internet IP address is constantly changing anyway.

johnylondon said:
It might be nice to be able to login from anywhere if I see something I want to record but then of course that would involve leaving the foxsat on permanently so probably not worth it.
Click to expand...
We can. See the rs package and the Remote Scheduling service*. Your Foxsat will call in for instructions, rather than instructions being pushed to it.

* Again, it's my guess this applies to Foxsat as well as HDR-FOX.

johnylondon said:
So, the log in is just an extra level of protection so for example a guest on my network could not access the Foxsat?
Click to expand...
Correct, or more to the point the WebIF. A guest would have to know about it in the first place, end even then, what's the risk? People mainly set passwords to stop the kids!

Your router can (probably) be configured so that guest mobile devices logged onto your WiFi can only access Internet and not local devices at all.
 
Thank you very much indeed for the comprehensives answers. No problems with guests to worry about, was just trying to see if I had it figured right.
Seeing as one machine is for my front room and the other for my garden cabin, it would be handy to be able to schedule recordings from in the house, for the odd occassion when three things are on at the same time. So I'll investigate the rs package and Remote Sheduling service. But I'm very happy with these deices now anyway as I can easily load a tv show off of one to play on the other or whatever.
I also took advantage of something else I learned from the forum - being able to set the r/c to different channels (1-6) as I still have my old T2000 and that was being operated at the same time meaning I had to manually switch one or other on first.
 
Black Hole said:
The IP address you use on your home network to access devices on your home network bears no relevance to IP addresses on the Internet.
Click to expand...
This is not true for IPv6, those addresses are directly valid on the Internet. The FoxSat and HDR Fox T2 don't support IPv6, but it is important to understand the issue.
Black Hole said:
Devices on the Internet cannot simply drill in through your router and access devices on your home network ad lib, even if they did know your global IP address and IP addresses on your network – the router's security makes sure of that. And, unless you've paid extra for a static IP from your service provider, your Internet IP address is constantly changing anyway.
Click to expand...
I think it is more relevant to point out most broadband routers contain a firewall that does not allow arbitrary inbound connections. They only allow replies to outbound connections plus any holes you have explicitly configured in the firewall. So unless a hole has been opened to allow incoming connections from the internet to the FoxSat, the connection will be blocked by the firewall.
 
Black Hole said:
Thank you for your elaborations, which add up to the same thing.
Click to expand...
No they don't. You focussed on NAT as a security mechanism when it is no such thing and leads people into insecure practices. The important thing is to have your broadband router firewall configured correctly, then IPv6 will be secure as well as IPv4. If you rely on NAT alone you are asking for breaches of your home network, especially on IPv6. I have worked on network software, I know what I'm talking about in this area.
 
Having registered in the Foxsat WebIR to access Remote Scheduling, I am still waiting for my password to be sent to the email I used, over a week ago with no responce and I have checked the junk mail and tried a different email address.
 
You must log in or register to reply here.
Back
Top