this post was submitted on 04 Dec 2023
8 points (100.0% liked)

Homelab

371 readers
9 users here now

Rules

founded 1 year ago
MODERATORS
 

My TVs are kept on a their own VLAN with only access to my docker host running Jellyfin and Channels DVR. I got a new TV recently which has a real annoying "no internet connection" popup that can't be disabled. My initial assumption was that I could watch its traffic and make DNS records for the hostnames it tries to contact that redirect to my firewall. Assuming it's just a ping check, that should do it. I have all that set up and pinging the addresses the TV tries to hit over ADB works fine.

hengshan:/ $ ping google.com                                                                                      
PING google.com (192.168.20.1) 56(84) bytes of data.
64 bytes from 192.168.20.1: icmp_seq=1 ttl=64 time=1.23 ms
64 bytes from 192.168.20.1: icmp_seq=2 ttl=64 time=0.885 ms
64 bytes from 192.168.20.1: icmp_seq=3 ttl=64 time=7.57 ms
64 bytes from 192.168.20.1: icmp_seq=4 ttl=64 time=1.04 ms
64 bytes from 192.168.20.1: icmp_seq=5 ttl=64 time=7.50 ms
64 bytes from 192.168.20.1: icmp_seq=6 ttl=64 time=7.57 ms

I'm using defreitas/dns-proxy-server in docker as a simple listener and forwarder. The host is on the same VLAN with no internet access and is set to use itself for DNS. So the whole thing is one big loop. Again, assuming all the TV needs is a ping check, then this should work, right? Just a box that points all the DNS requests I've found to my firewall and the firewall echos the request, but I'm still getting sporadic "no internet" popups

Is my setup missing something or is it safe to say the TV is doing something other than a ping check to verify connectivity?

top 5 comments
sorted by: hot top controversial new old
[–] feminalpanda@lemmings.world 1 points 11 months ago* (last edited 11 months ago)

I bet it's trying to hit a specific brand endpoint. Looking at mine it's hittingan apple cdn, and a metric.gstatic.com

[–] fediverser@alien.top 1 points 11 months ago

This post is an automated archive from a submission made on /r/homelab, powered by Fediverser software running on alien.top. Responses to this submission will not be seen by the original author until they claim ownership of their alien.top account. Please consider reaching out to them let them know about this post and help them migrate to Lemmy.

Lemmy users: you are still very much encouraged to participate in the discussion. There are still many other subscribers on !homelab@selfhosted.forum that can benefit from your contribution and join in the conversation.

Reddit users: you can also join the fediverse right away by getting by visiting https://portal.alien.top. If you are looking for a Reddit alternative made for and by an independent community, check out Fediverser.

[–] cruzaderNO@alien.top 1 points 11 months ago

Would not expect it to just ping something like google.com, maybe use their dns tho.

The ones ive dealt with have a rotation of urls it tries to load.

Bonus joy is when you use the TV longer than they expect and some of them stop responding, so even with no firewall/vlan etc segmentation it still needs this spoofing done.

[–] dk_DB@alien.top 1 points 11 months ago

A) don't buy TVs - big monitors/bfgd ir public displays B) log dns requests and IPs the tv wants to connect to. Forward that's requests to anything in your network (often it's just a get request or ping request to that destinations, that satisfies the tv)

[–] Eldiabolo18@alien.top 1 points 11 months ago

I would just run wireshark/tcpdump, ideally on the switchport or if possibel between switch and tv. Maybe you have a spare computer w two ports which you can bridge and then inspect traffic