Tricky question for hardware/networking experts

Discussion in 'DIRECTV HD DVR/Receiver Discussion' started by SledgeHammer, Dec 9, 2016.

  1. Dec 9, 2016 #1 of 21
    SledgeHammer

    SledgeHammer Icon

    2,717
    308
    Dec 28, 2007
    In my office, I have a Linksys WRT3200ACM router. In the A/V rack, I have another WRT3200ACM set to wireless bridge mode to the main router. My TV, AVR, DVR, etc. are hardwired into the wireless bridge. All is dandy. My DVR is a HR24.

    Long story short, when you let the DVR on the network, it does guide searches in the cloud and that breaks all the time. So... I let it on my LAN for MediaShare, but I block it from internet access by using Parental Controls on the main router.

    On my old router (also a Linksys, but an older model), using parental controls did the trick and kept the HR24 off the internet.

    On the WRT3200ACM, this seems broken as it still lets the HR24 online. I'm working with Linksys to resolve the issue, but I'm wonder if you networking / DVR gurus can think of any other way to let the DVR on the LAN, but not online? Anything I can do on the DVR side? I want to let all the other A/V stuff online though.

    The DVR has a static IP if that gives you any ideas?

    Maybe I can put it on a different subnet and somehow block the subnet, but I'm assuming it has to do DNS lookups to my PC for MediaShare.

    Maybe something with advanced routing?
     
  2. Dec 9, 2016 #2 of 21
    RunnerFL

    RunnerFL Well-Known Member

    17,050
    312
    Jan 4, 2006
    Does your WRT3200ACM have a firewall? If so just use the firewall to block Internet access for that port.
     
  3. Dec 9, 2016 #3 of 21
    inkahauts

    inkahauts Well-Known Member

    24,464
    1,394
    Nov 13, 2006
    When was the last time the searches where broken? I ask because I've heard of no one having issues in several months now and think maybe they have gotten it fixed.
     
  4. Dec 9, 2016 #4 of 21
    SledgeHammer

    SledgeHammer Icon

    2,717
    308
    Dec 28, 2007
    Well, you would always get annoyed with me bringing up Pawn Stars :D. I always tried to follow up with DirecTV, but you know how it is, you can't get through to anyone in engineering, so I just blocked my DVR off the net. I blocked it like last year, so if they had issues "several months ago"...
     
  5. Dec 9, 2016 #5 of 21
    SledgeHammer

    SledgeHammer Icon

    2,717
    308
    Dec 28, 2007
    What port(s) does the HR24 use to communicate out? I didn't see a firewall, I saw the parental controls and advanced routing type stuff. Hopefully Linksys will fix it since it seems like a pretty serious issue to have broken parental controls :).
     
  6. Dec 9, 2016 #6 of 21
    RunnerFL

    RunnerFL Well-Known Member

    17,050
    312
    Jan 4, 2006
    Whatever port you have it plugged into. :)
     
  7. Dec 9, 2016 #7 of 21
    tylorert

    tylorert Member

    615
    21
    Sep 7, 2016
    Grayslake
    Not a physical port but a port like
    IE:
    Port 80: HTTP
    Port 21: FTP
    Best advice look online
     
  8. Dec 9, 2016 #8 of 21
    tylorert

    tylorert Member

    615
    21
    Sep 7, 2016
    Grayslake
    Look at this thread Manually configuring a router for DIRECTV’s TVApps.
     
  9. Dec 9, 2016 #9 of 21
    poppo

    poppo Hall Of Fame

    2,020
    35
    Oct 10, 2006
    If it has a static IP, just give it a bogus gateway address i.e. 192.168.1.254 instead of 192.168.1.1
     
  10. SledgeHammer

    SledgeHammer Icon

    2,717
    308
    Dec 28, 2007
    I'll try that, but is it still going to be able to do local DNS look ups (and connect to them)? The only thing I want to work is MediaShare off my PC.
     
  11. slice1900

    slice1900 Well-Known Member

    10,241
    1,357
    Feb 14, 2013
    Iowa
    With a bad gateway address it'll be able to talk only to stuff on the same subnet (192.168.1.x) but not get out to the internet.
     
  12. poppo

    poppo Hall Of Fame

    2,020
    35
    Oct 10, 2006
    It "should" as UPnP if working properly, should find devices (i.e. your media server) on it's own.
     
  13. SledgeHammer

    SledgeHammer Icon

    2,717
    308
    Dec 28, 2007
    Cool. Thanks guys. I'll go that route then. A Linksys level 2 support tech is supposed to call me back on Saturday about the parental controls which are definitely broken for devices through the bridge. They do work for stuff wired to the main router, so wild guess, but maybe the main router is seeing bridge devices as coming from the bridge rather then from the device itself. It does show all the devices in the network map though, but the network map does show 2 instances of the bridge for some reason (1 wired, 1 wireless).
     
  14. SledgeHammer

    SledgeHammer Icon

    2,717
    308
    Dec 28, 2007
    You were close... if I just black hole the gateway to 1.2, but leave the DNS to 1.1, it'll DHCP the gateway back to 1.1. I had to black hole both the gateway and the DNS to 1.2.

    Now it's doing what I want :)... I can use mediashare with my PC as the server and the discovery works fine, but the DVR can't get out on the internet.
     
  15. RunnerFL

    RunnerFL Well-Known Member

    17,050
    312
    Jan 4, 2006
    I know what he meant but clearly you guys aren't getting it... I wasn't referring to specific protocols. If you want to block it from the Internet you block all access on that physical port. The DirecTV gear uses upnp and will just open up another protocol port so it's easier to just block the physical port.

    Get it now??
     
  16. tylorert

    tylorert Member

    615
    21
    Sep 7, 2016
    Grayslake
    Oh! But if the port is blocked then his home share won't work. I own my own servers so I understand the struggle (disputes me being 14)
     
  17. slice1900

    slice1900 Well-Known Member

    10,241
    1,357
    Feb 14, 2013
    Iowa
    Really if you care about security of your local network you should disable UPnP. It exists because it is too difficult for the typical user to mess around with port forwarding to allow access to their network from the outside, but malware can use the facility to open up your PC or other hardware to the outside. If you know what you are doing UPnP doesn't do anything you can't do yourself, and therefore can't do anything you don't know about.
     
  18. tylorert

    tylorert Member

    615
    21
    Sep 7, 2016
    Grayslake
    Ironically my AT&T router doesn't support that. Alone trying to unblock port 8080 was already hard enough! The config is so screwed up. Too hard to navigate and is really slow! My netgear runs DD-WRT and even that's better to manage!
     
  19. RunnerFL

    RunnerFL Well-Known Member

    17,050
    312
    Jan 4, 2006
    Wrong... Blocking Internet access on the port his Genie is connected to for Internet does nothing to the DECA network the Genie, clients and DVRs use. It's a completely self contained network.
     
  20. RunnerFL

    RunnerFL Well-Known Member

    17,050
    312
    Jan 4, 2006
    Yup, I'm with you there. My network gear doesn't even have UPnP.
     

Share This Page

spam firewall