Get_iplayer is streaming live TV!

[d.lake at surrey.ac.uk]

I suspect the aim is to stream BBC TV programmes from outside the UK...

I run my get_iplayer server on a VPS using a VERY unusual port number.   I had assumed that would be good enough, but it wasn't.

Because I spend a lot of my time travelling, all my music and radio downloads are stored on a cloud VPS server.   I can't really block down by IP address because I don't really know where I'll be connecting from.

I'll have a hack round the get_iplayer.cgi and see if I can add some sort of basic password.

Meantime, quick session with Wireshark has revealed the IP addresses of the three hosts which are attacking me and I've stuck them in an "iptables -DROP" list.

What a pain.  Why are there such eejots out there?

-----Original Message-----
From: Jeremy Nicoll - ml gip [mailto:jn.ml.gti.91 at wingsandbeaks.org.uk] 
Sent: 28 November 2016 12:30
To: Lake D Mr (PG/R - Elec Electronic Eng) <d.lake at surrey.ac.uk>
Cc: get_iplayer at lists.infradead.org
Subject: RE: Get_iplayer is streaming live TV!

On 2016-11-28 12:17, d.lake at surrey.ac.uk wrote:
> Mystery solved.
> 
> Someone somewhere has set up a site which accesses my get_iplayer cgi 
> script and kicks off downloading from live TV.

With what aim - just to slow your machine down?  (It's hard to believe that such a person would be a closet cbbc watcher...) Would they see stuff streamed to your machine from their machine?

If that's really happening, presumably there's an external access coming through your firewall to the server part of g_ip, which is listening to port 8080 on your machine.  You should be able to block such incoming requests.

Also you could (probably) change the various parts of your g_ip perl programs so they use some other port.



--
Jeremy Nicoll - my opinions are my own

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 2016.0.7924 / Virus Database: 4664/13487 - Release Date: 11/27/16