Hilfe - Ungebetener Gast auf meinem Oscam Server

[mr.b4]

Hallo Zusammen,

ich habe auf dem raspi einen kleinen Oscam-Server am laufen.
Hängt hinter der Fritzbox mit nur der einen Portfreigabe für camd3...

Seit ein paar Tagen taucht in der Client-Liste nun mehrfach immer wieder ein "anonymus" mit russischer IP auf.

"Failban" hab ich aktiv. Mit 0 erlaubten Fehlversuchen und maximaler Sperrdauer 770.

Ich verstehe so manches nicht:

Auf "normalen Portscans" ist der offene port für oscam gar nicht zu sehen...

der "anonyme russe", bekommt von oscam einen oderer mehrere interne ports und den status "ok"

Ab wann macht oscam das?

Da er ja keine gültigem nutzerdaten hat, kann und will er ja wohl keinen sender entschlüsseln.

Er hat immer die gleiche IP, wenn ich ihm mit dem radioaktiv-zeichen kicke, kommt er 30min später wieder.

Im Failban taucht er nie auf? Kann man sich ohne (flaschen) log-in bei oscam "anmelden"?

Fragen über Fragen.

Danke!

 

[dodo83]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

änder doch deine DYN...

 

[mr.b4]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

Danke.
Ja, würde sicher helfen.
Aber ich möchte nur ungern alle Teilnehmer nachziehen müssen...

Primär möchte ich mal wissen wie man es ohne den Versuch einer Zugangskennung einzugeben in die Clients Liste schafft...

 

[mr.b4]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

Ist meine frage zu komplex oder frage ich kompletten müll?

Würde gern verstehen ab wann oscam einen anonymen clienten ohne nutzerdaten in die liste setzt ohne ihn zu bannen.

Muss ja auch für einen "angreifer" eim ödes unterfangen sein. Oder verschickt mein raspi schon spam mails?

 

[Tec-Hi]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

Hi

hättest configs und log vom Oscam start ?

HF

 

[czutok]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

könte sein das du die ne "geheckte" oscam aus ne unbekante herkunft qelle instaliert hast ??

wo hast du die oscam her ??

oder irgend ein client von dir war unvorsichtig , so gelangen die an deine dyndns

 

[mr.b4]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

Hab die Oscam selber auf dem PI kompiliert.
Vermute die Dyn wurde mal auf einer "IP Test Homepage abgegriffen"

Hier mal die Conf

Spoiler

# oscam.conf generated automatically by Streamboard OSCAM 1.20-unstable_svn SVN r10602# Read more:

Sie müssen registriert sein, um Links zu sehen.

[global]
disablelog = 1
loghistorysize = 8192
logfile = /var/log/oscam.log
pidfile = /var/run/oscam.pid
clienttimeout = 7000
nice = -1
maxlogsize = 500
waitforcards = 0
preferlocalcards = 1
readerrestartseconds = 2
usrfile = /tmp/oscamuser.log
emmlogdir = /var/log
failbantime = 770


[cache]


[cs357x]
port = XXXX


[webif]
httpport = 8888
httprefresh = 10
httpallowed = 127.0.0.1,10.0.0.1-192.168.254.254

Hier der Log

Spoiler

-------------------------------------------------------------------------------
>> OSCam << cardserver started at Sat May 28 15:28:43 2016
-------------------------------------------------------------------------------
2016/05/28 15:28:43 0 s >> OSCam << cardserver started, version 1.20-unstable_svn, build r10602 (arm-linux-gnueabihf)
2016/05/28 15:28:43 0 s (main) System name = Linux
2016/05/28 15:28:43 0 s (main) Host name = raspberrypi
2016/05/28 15:28:43 0 s (main) Release = 3.18.7+
2016/05/28 15:28:43 0 s (main) Version = #755 PREEMPT Thu Feb 12 17:14:31 GMT 2015
2016/05/28 15:28:43 0 s (main) Machine = armv6l
2016/05/28 15:28:43 0 s (main) creating pidfile /var/run/oscam.pid with pid 11152
2016/05/28 15:28:43 0 s (config) userdb reloaded: 15 accounts loaded, 0 expired, 0 disabled
2016/05/28 15:28:43 0 s (main) signal handling initialized
2016/05/28 15:28:43 0 s (config) 183 service-id's loaded in 2 ms
2016/05/28 15:28:43 0 s (net) cs357x: initialized (fd=6, port=xxxx)
2016/05/28 15:28:43 0 s (main) Binary without Conax module - no EMM processing for Conax possible!
2016/05/28 15:28:43 0 s (main) Binary without Seca module - no EMM processing for Seca possible!
2016/05/28 15:28:43 0 s (main) Binary without Viaccess module - no EMM processing for Viaccess possible!
2016/05/28 15:28:43 0 s (main) Binary without DRE Crypt module - no EMM processing for DRE Crypt possible!
2016/05/28 15:28:43 0 s (main) Binary without TONGFANG module - no EMM processing for TONGFANG possible!
2016/05/28 15:28:43 0 s (main) Binary without Bulcrypt module - no EMM processing for Bulcrypt possible!
2016/05/28 15:28:43 0 s (main) Binary without Griffin module - no EMM processing for Griffin possible!
2016/05/28 15:28:43 0 s (main) Binary without DGCrypt module - no EMM processing for DGCrypt possible!
2016/05/28 15:28:43 0 s (reader) ORF_ICE_CARD_IRDETO [smartreader] creating thread for device SRv2;Serial:44332211
2016/05/28 15:28:43 0 s (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] creating thread for device Serial:Reader 70
2016/05/28 15:28:43 0 s (emmcache) loaded 291 emmcache records from /usr/local/etc/oscam.emmcache in 17 ms
2016/05/28 15:28:43 0 s (emmcache) loaded 43 emmstat records from /usr/local/etc/oscam.emmstat in 1 ms
2016/05/28 15:28:43 0 s (anticasc) anti cascading disabled
2016/05/28 15:28:43 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Reader initialized (device=Serial:Reader 70, detect=cd, mhz=534, cardmhz=369)
2016/05/28 15:28:43 892BC8 h (webif) webif: decompressed 140877 bytes back into 331408 bytes
2016/05/28 15:28:43 892BC8 h (webif) HTTP Server running. ip=0.0.0.0 port=8888
2016/05/28 15:28:43 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] Reader initialized (device=SRv2;Serial:44332211, detect=cd, mhz=600, cardmhz=343)
2016/05/28 15:28:44 8BDC70 c (client) encrypted cs357x-client 192.168.0.15 granted (onkel, au=off)
2016/05/28 15:28:44 8BDC70 c (ecm) onkel (098C&000000/0BBA/006F/9D:A6C7A19B7CCB300FCE0F1A782E91C5C7): rejected group (0 ms) - Disney Cinemagic HD (no matching reader)
2016/05/28 15:28:44 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] card detected
2016/05/28 15:28:44 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] card detected
2016/05/28 15:28:44 8BF4C8 c (client) encrypted cs357x-client 192.168.0.33 granted (peter, au=auto (3 reader))
2016/05/28 15:28:44 8BF4C8 c (ecm) peter (098C&000000/0C22/0073/9D:5F5B10ECF93AF30B03432799972EFE5F): rejected group (0 ms) - MGM HD (no matching reader)
2016/05/28 15:28:46 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] ATR: 3B 78 12 00 00 54 C4 03 00 8F F1 90 00
2016/05/28 15:28:46 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] Init card protocol T0, FI=1, F=372, D=2, N=0
2016/05/28 15:28:46 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] Calculated work ETU is 31.00 us reader mhz = 600
2016/05/28 15:28:46 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] Effective reader settings mhz =600 F= 372 D= 2 N=0 T=0 inv=0 parity=EVEN
2016/05/28 15:28:47 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] ATR Fsmax is 5 MHz, clocking card to wanted user cardspeed off 6.00 MHz (specified in reader->mhz)
2016/05/28 15:28:48 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] Hist. Bytes: TÄ
2016/05/28 15:28:48 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] detect irdeto card
2016/05/28 15:28:48 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] caid: 0648, acs: 0.05, country code: AUT
2016/05/28 15:28:48 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] ATR: 3F FD 13 25 02 50 80 0F 41 B0 0A 69 FF 4A 50 F0 00 00 50 31 03
2016/05/28 15:28:48 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Init card protocol T0, FI=1, F=372, D=4, N=2
2016/05/28 15:28:48 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Calculated work ETU is 17.42 us reader mhz = 534
2016/05/28 15:28:48 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Effective reader settings mhz =534 F= 372 D= 4 N=2 T=0 inv=1 parity=ODD
2016/05/28 15:28:48 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] providers: 4, ascii serial: ##########, hex serial: ######, hex base: ##
2016/05/28 15:28:48 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] WARNING: For Irdeto cards you will have to set 'cardmhz= 600' in oscam.server
2016/05/28 15:28:48 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] ATR Fsmax is 5 MHz, clocking card to wanted user cardspeed off 5.34 MHz (specified in reader->mhz)
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] active providers: 4 (b5e5ff,002500,002600,002700)
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [smartreader] found card system irdeto
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] THIS WAS A SUCCESSFUL START ATTEMPT No 1 out of max alloted of 1
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] entitlements for provider: 1, id: B5E5FF
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: 000D, date: 2013/11/21 - 2013/12/21
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: 7FFB, date: 2016/05/22 - 2016/06/21
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: 7FF7, date: 2016/05/27 - 2016/06/06
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: FFD8, date: 2015/02/23 - 2015/03/25
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: 0002, date: 2016/05/27 - 2017/02/01
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: 0001, date: 2016/05/27 - 2017/02/01
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: FFE0, date: 2016/05/18 - 2017/01/23
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] entitlements for provider: 2, id: 002500
2016/05/28 15:28:49 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] chid: 001D, date: 2013/11/09 - 2014/02/09
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Card type: P1TV
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Rom version: 20AA
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Credit available on card: 0 euro
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Extended 4C detected
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] FuseByte: 25
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Region Code: 00BO0102
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Country Code: DEU
2016/05/28 15:28:50 892728 r (reader) ORF_ICE_CARD_IRDETO [irdeto] ready for requests
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] Pincode read: 6555
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] PCB settings: FF FF FF FF
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] type: VideoGuard Sky Austria/Germany (098C), caid: 098C
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] serial: ########, BoxID: ########, baseyear: 2004
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] ready for requests
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [smartreader] found card system videoguard2
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] THIS WAS A SUCCESSFUL START ATTEMPT No 1 out of max alloted of 1
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] card detected
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] type: VideoGuard Sky Austria/Germany (098C)
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] ------------------------------------------------------------------
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |- class -|-- tier --|----- valid to ------|--- package name ----|
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] +---------+----------+---------------------+---------------------+
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0068 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0069 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 006a --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 006b --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0065 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0066 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0067 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 006f --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0070 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0071 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0072 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0073 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 007b --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0075 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 007d --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 0081 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 008e --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00c0 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00c8 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00c9 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00ca --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00c7 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00d4 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00e4 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00e5 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00fa --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00f3 --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] |-- 00 ---|-- 00ff --| 2016/07/09-01:00:00 |
2016/05/28 15:28:50 8945A8 r (reader) SKY_HDplus_V14_Smargo_V1 [videoguard2] ------------------------------------------------------from-ins70--
2016/05/28 15:28:52 8BF4C8 c (camd35) peter emm-request sent (reader=SKY_HDplus_V14_Smargo_V1, caid=098C, auprovid=000000)
2016/05/28 15:28:52 8BF4C8 c (ecm) peter (098C&000000/0C22/0073/9D:C8BECCFC7BAA26DFAC7C99B3C4797520): found (134 ms) by SKY_HDplus_V14_Smargo_V1 - MGM HD

Hier frisch nach dem start, sind nur brave leute drauf

 

[Tec-Hi]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

Hi

mach ein Log wenn der "anonymus" wieder da ist,
um Änderung der Dyn... kommst wohl nicht rum.

HF

 

[mr.b4]

AW: Hilfe - Ungebetener Gast auf meinem Oscam Server

Sooo, habe viel geloggt. Allerdings tauchte der "Gast" im Log gar ned auf.
Die anderen user werden alle brav mit IP und cs357x protokoll erwähnt...

Ich hatte auf dem raspi noch einen updatelink von "tunnenbroker.net" für IPV6 am laufen. seit dem ich den deaktiviert habe kam kein gast mehr. Zufall?