F2000 Firewall settings with eir Tv and Apple Tv

Pmobile

Hi Boards/Eir,

I just had to hop onto the boards to ask a question about eirs F2000 broadband modem and the default Network Security settings.

Does the eir Tv set top box require me to lower my firewall settings to Medium instead of High to get the modem to work?  (I had tried High as soon as the service was installed but  the eir Tv set top box could not communicate with the modem, everything else was factory default).

Please tell me if the modem requires some port forwarding configuration if I wish to use High Firewall settings as I am getting too many Intrusion Warnings being logged to be comfortable with.


As a comparison, I set up my own forwarding rules for my Apple Tv device which works with the firewall on High. Its frustrating that eir could not provide a template or default setting for their own device as they have preset rules for services like Steam and Xbox Live under the Port Forwarding Application Mapping.


I could not find any information anywhere what services or ports the eir Tv set top box uses which would be helpful in securing my home network configuration.

ED E

You cant. 

eVision is a multicast stream, the AppleTV is unicast. Medium is fine, high is tinfoil hat mode on those units. 

Pmobile

Thanks for the info Ed, but I think you're missing the point & I'd like an eir rep to chime in please.

I'd like to know why the vendor (eir) cannot be bothered to provide a seamless/automatic network configuration for their flagship tv service with their own branded network equipment. Even a popup html help message about the settings not playing nice with eir Tv would have helped me (the paying customer) figure this out.

It's frustrating to discover the High firewall settings do not work out-of-the-box as I spent a lot of time troubleshooting and changing/resetting things to no avail. I do not think High firewall settings are for tinfoil hats and I understand the balance between convenience and security. The difference between Medium and High are probably a set of rules similar to the ones you can make yourself under Internet Security>Application Filter

My Application Filter settings currently block for all devices by default: Samba, SSH, and Telnet and I have a selective block on FTP and Mail for my other gadgets that do not require/use those ports. I would also like to know if the eir Tv box uses any common ports & what range they are since theres not much info around on the topic. 


If its a hardware issue or limitation on the f2000's firmware I get it, then its time to research and buy a better router (I hate calling them modems). But before I spend more money and time setting things up all over again I'd like to know if one of the eir reps can verify this limitation for me please.

Eir: Pamela

Pmobile wrote: »

Hi Boards/Eir,

I just had to hop onto the boards to ask a question about eirs F2000 broadband modem and the default Network Security settings.

Does the eir Tv set top box require me to lower my firewall settings to Medium instead of High to get the modem to work?  (I had tried High as soon as the service was installed but  the eir Tv set top box could not communicate with the modem, everything else was factory default).

Please tell me if the modem requires some port forwarding configuration if I wish to use High Firewall settings as I am getting too many Intrusion Warnings being logged to be comfortable with.


As a comparison, I set up my own forwarding rules for my Apple Tv device which works with the firewall on High. Its frustrating that eir could not provide a template or default setting for their own device as they have preset rules for services like Steam and Xbox Live under the Port Forwarding Application Mapping.


I could not find any information anywhere what services or ports the eir Tv set top box uses which would be helpful in securing my home network configuration.

[font=Verdana, sans-serif]Hi [/font][font=Verdana, sans-serif]Pmobile,[/font]
[font=Verdana, sans-serif] [/font]
[font=Verdana, sans-serif]I have queried this with the eir Vision support team & been advised when the firewall settings are on high it blocks the Protocol that TV use to transmit/receive on the modem so this blocks the TV from working.[/font]
[font=Verdana, sans-serif] [/font]
[font=Verdana, sans-serif]You would need to allow the protocol IGMP via port forwarding on the modem however unfortunately there is not much more we can recommend as port forwarding as not supported by eir (It can conflict with recommended settings) but that's not to say users can't explore this at their own discretion.[/font]
[font=Verdana, sans-serif] [/font]
[font=Verdana, sans-serif]Thanks,[/font]
[font=Verdana, sans-serif]Pamela [/font]

[font=Verdana, sans-serif] [/font]

Pmobile

Hi Pamela

thanks for clarifying the eir Vision tv service uses IGMP & multicast.
I'm happy enough setting my own Application Rules, once I know what needs connectivity in/out of my home network.

Can you pass this info back to eir support, mabey they can put in a popup info box or html help or flag an identifier for the set top box for this case if it causes a lot of support questions like mine.

For example, It would be cool to see a custom Device Type and icon for eir Vision in the drop down menu under Home Network>Lan Devices>Lan Device Settings so that configuration could be checked and flagged if the firewall is set High. Or it's something the eir Vision box devs could prompt for with UPnP or part of the tv settings wizard.

Cheers

eir: Stacey

Pmobile wrote: »

Hi Pamela

thanks for clarifying the eir Vision tv service uses IGMP & multicast.
I'm happy enough setting my own Application Rules, once I know what needs connectivity in/out of my home network.

Can you pass this info back to eir support, mabey they can put in a popup info box or html help or flag an identifier for the set top box for this case if it causes a lot of support questions like mine.

For example, It would be cool to see a custom Device Type and icon for eir Vision in the drop down menu under Home Network>Lan Devices>Lan Device Settings so that configuration could be checked and flagged if the firewall is set High. Or it's something the eir Vision box devs could prompt for with UPnP or part of the tv settings wizard.

Cheers

Hi Pmobile,


Pamela is out of the office today however I have relayed this onto the relevant team. Thanks for your feedback on this. 



Stacey