• May 15, 2025, 12:40:47 PM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Pages: 1 [2] 3 4

Author Topic: Blocking DIR-655.bsecure.com blocks Internet address resolution!  (Read 58739 times)

dirkpitt

  • Level 3 Member
  • ***
  • Posts: 157
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #15 on: March 17, 2010, 07:54:39 AM »

You know that blocking bsecure.com on an external DNS server doesn't mean that the router isn't going there on it's own right?
Logged
DIR-655 H/W A4, Firmware 1.34NAb02 beta

summerstormpictures

  • Level 2 Member
  • **
  • Posts: 93
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #16 on: March 17, 2010, 08:15:15 AM »

You know that blocking bsecure.com on an external DNS server doesn't mean that the router isn't going there on it's own right?

Yeah, unfortunately, but if that is the case, then D-Link is probably in real trouble for non-disclosure and possible FCC violations. I'm no expert--but any electronics communication that performs things that are not specifically authorized by a consumer is a violation of some sort. There are multiple levels of government agencies that deal with this sort of thing. The only folks that do and get away with this behavior--because they can--is the NSA.

Either way, by enough folks listing bsecure.com as a malware or otherwise generally ''bad'' site, I think the message will be clear that going behind our backs like this will only lead to trouble down the road. By blocking it, a paper trail of sorts is started. It's sad that we had to be surprised by this nefarious activity in the first place.

Personally I just want D-Link to light a fire under and fix this thing. It may be too late though, unfortunately.
Logged

Lycan

  • Administrator
  • Level 15 Member
  • *
  • Posts: 5335
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #17 on: March 17, 2010, 09:28:42 AM »

We have plenty of people that use the Bsecure feature and enjoy it added parental controls and other security enhancements. If your router is continuing to use the bsecure DNS servers for resolution, send me a packet capture as well as a screen shot of your WAN settings page. If Securespot is disabled then the router will only use the DNS servers listed on the WAN page.

IF this is not the behavior you are seeing PM me and I'll personally handle your unit myself.
Logged

dirkpitt

  • Level 3 Member
  • ***
  • Posts: 157
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #18 on: March 17, 2010, 09:50:40 AM »

PMed for packet capture guidance...
Logged
DIR-655 H/W A4, Firmware 1.34NAb02 beta

StarkRG

  • Level 1 Member
  • *
  • Posts: 20
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #19 on: March 17, 2010, 05:15:36 PM »

We have plenty of people that use the Bsecure feature and enjoy it added parental controls and other security enhancements. If your router is continuing to use the bsecure DNS servers for resolution, send me a packet capture as well as a screen shot of your WAN settings page. If Securespot is disabled then the router will only use the DNS servers listed on the WAN page.

IF this is not the behavior you are seeing PM me and I'll personally handle your unit myself.

How does one go about doing this? Securespot is disabled but I still get redirects to the login page. Nothing whatsoever shows up in the router's log that suggests anything to do with securespot is occurring. (which is somewhat disconcerting, if this isn't being logged what else isn't?)

I've never dealt with individual packets before so I wouldn't know how to capture one or what, exactly, that would look like (or what it's supposed to look like).

Knowing how Google handles f*kups like this makes me wonder why other companies have such a difficult time with it. When Google releases something or discovers a major problem the first thing they do is stick a bunch of engineers in a room with the sole task of fixing the issues that come up. This "war room," as they're called, tends to consist of between five and fifteen people who know the software intimately and they work until the issues have been fixed. This is a highly efficient process that seems to get most problems solved within a few hours of the initial identification of the problem (not the initial report, but when the problem has been confirmed as a problem). Were this a Google router chances are there would have been a solution provided long before 90% of us noticed it. (that's not to say that Google gets every problem fixed right away, but you can be almost guaranteed that, if it's a major problem on their end and you're not one of the first few people to encounter it they have already set at least 5 engineers to work on it, minor problems tend to take longer to fix, but this is understandable as they have a lower priority). This idea is very similar to (and possibly based on) how some open source projects work.

Apparently D-Link prefers the Microsoft method: If a problem occurs, ignore it. If the problem continues to occur, announce that there is no problem. If the problem still continues secretly put a couple low-paid (or, better yet, unpaid) intern engineers on it and see if they can fix it. If your low-cost engineers can't fix it put your better engineers on it, under no circumstances should the public be made aware that you are working on the officially non-existent problem. Six to twelve months later, when you have a workable, but mostly untested, solution announce that there's a solution to the previously unrecognized problem. Stop all work on this problem and, if/when it recurs start the process from the beginning. Also start from the beginning if the patch introduced other problems, under no circumstances should engineers ever communicate with each other, especially if they are, or have been, working on the same or similar issues or projects, that's what managers are for.

Personally I think Google's method works better and keeps people coming back for more. Microsoft's method actively drives customers away and only works because most customers don't know about, or are scared of, the alternatives.
Logged

summerstormpictures

  • Level 2 Member
  • **
  • Posts: 93
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #20 on: March 18, 2010, 04:38:08 AM »

...send me a packet capture as well as a screen shot of your WAN settings page. If Securespot is disabled then the router will only use the DNS servers listed on the WAN page...

Please just forget trying to figure this out and focus for the present on releasing a bare-bones and fully functional firmware without these problematic features that are no more than the equivalent to annoying pop-up's on a web page!

''Handle'' that.

If this Secure Spot feature were something free like OpenDNS, it would be one thing, but it's not.

It's really just so monumentally frustrating to pay for a device to do one thing and one thing only, only then to be subjected to this abusive adware feature that has ultimately compromised the intended purpose of the device itself!

How can you not see this?

The priorities are all upended there. You're sacrificing stability, security, customer confidence and ultimately trust in your products by this behavior.
Logged

dirkpitt

  • Level 3 Member
  • ***
  • Posts: 157
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #21 on: March 19, 2010, 12:27:50 PM »

Just found this on the ftp.dlink.com server:

Quote
A description of the SECURESPOT signup temporary redirect:

Select D-Link routers may now be upgraded to support SECURESPOT 2.0, a managed security suite that provides a multi-layered defense against the constantly changing list of Internet threats with robust parental control features. While we are excited about this new offer, we also want to ensure we don’t cause confusion with our customers. (http://www.dlink.com/securespot-router/).

When the router is updated  with 1.21 SecureSpot firmware that is used for the first time, the router prompts the user with an opportunity to sign up for SECURESPOT, which is optional.  Some users are confused about this.  It is important to know that this is a temporary redirect to a signup page.  This is NOT a permanent change to the router and does NOT affect the browser, searches, domain lookups, or DNS.  Thus it should not be confused with a hijack

This http redirect is a  common technique that is widely used as an automated method to assist users in signing up for security software before a connection to the Internet is made, thus ensuring that the user's network is secure before browsing the World Wide Web. 

Currently, the sign up messaging uses two windows.  Users can simply select “Cancel” in both windows and the router will then work normally, without activating SECURESPOT, and the signup page will no longer appear.  It is important that users select "Cancel" rather than closing the window by clicking the X in the upper-right corner.

Clicking the X is a non-event and does not signify Cancel or Accept.  Thus clicking the X will allow the router to prompt the user to sign up again later.  To suppress repeated signup prompts, simply select "Cancel" in both windows.

If a user selects "Free Trial", a free trial period will begin.  The user has the option to cancel the free trial
at any time prior to expiration without incurring any charges.

D-Link is improving the process and signup prompts so that users will have a clearer understanding of how to accept the service if they desire, or to eliminate  further prompt messages if they are not interested in  the service.
1.  Why doesn't D-Link post something like this on these forums, or a link to this?
2.  What dead-end street is your firmware thrown into if you DON'T click "Cancel" in both windows?
3.  What happens if you DO sign up for the free trial and then decide not to extend your subscription?

I honestly don't think that anyone at D-Link has a good answer to any of these questions.

When will there be a SecureSpot-free firmware release?
Logged
DIR-655 H/W A4, Firmware 1.34NAb02 beta

patt2k

  • Level 1 Member
  • *
  • Posts: 1
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #22 on: March 19, 2010, 03:18:32 PM »

Solution for annoying BS SECURE

Code: [Select]
http://forums.dlink.com/index.php?topic=11791.90
cheers
Logged

StarkRG

  • Level 1 Member
  • *
  • Posts: 20
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #23 on: March 20, 2010, 04:34:43 PM »

Solution for annoying BS SECURE

Code: [Select]
http://forums.dlink.com/index.php?topic=11791.90
cheers
Not a solution, as I said in the other thread. Tossing the whole thing in the trash is another solution, one that doesn't involve any security risk like your "solution" does.
Logged

dirkpitt

  • Level 3 Member
  • ***
  • Posts: 157
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #24 on: March 22, 2010, 08:34:20 AM »

I deleted my SecureSpot account on March 17, and haven't had anymore spontaneous redirects from my router, which means that it's performance is improving.

I have tried again to reproduce the effect by blocking bsecure.com, but have found since that the router doesn't really block anything at all.  I can still navigate to any and all of the sites that I've listed on my website filter, although I have Access Control enabled, created a Policy as follows:

Enable Access Control -> Add Policy -> Next -> (Policy Name) "Website" -> (Select Schedule) Always -> (Select Machine) Other Machines -> OK -> Next -> (Filtering Method) Block Some Access -> check Apply Web Filter-> Next -> (Web Access Logging) Enabled -> Save

Am I missing something here?
Logged
DIR-655 H/W A4, Firmware 1.34NAb02 beta

Tonytoronto

  • Level 2 Member
  • **
  • Posts: 30
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #25 on: March 22, 2010, 02:47:03 PM »

I deleted my SecureSpot account on March 17, and haven't had anymore spontaneous redirects from my router, which means that it's performance is improving.

I have tried again to reproduce the effect by blocking bsecure.com, but have found since that the router doesn't really block anything at all.  I can still navigate to any and all of the sites that I've listed on my website filter, although I have Access Control enabled, created a Policy as follows:

Enable Access Control -> Add Policy -> Next -> (Policy Name) "Website" -> (Select Schedule) Always -> (Select Machine) Other Machines -> OK -> Next -> (Filtering Method) Block Some Access -> check Apply Web Filter-> Next -> (Web Access Logging) Enabled -> Save

Am I missing something here?

    I had the same thing happen, i had to add all PC's to the policy, only than will block Bsecure site.
Logged

dirkpitt

  • Level 3 Member
  • ***
  • Posts: 157
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #26 on: March 22, 2010, 03:48:52 PM »

Thanks Tony... I will give this a shot tonite.
Logged
DIR-655 H/W A4, Firmware 1.34NAb02 beta

dirkpitt

  • Level 3 Member
  • ***
  • Posts: 157
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #27 on: March 25, 2010, 10:47:14 AM »

No dice.  Added the maximum number of PCs to the policy, and nothing is being blocked.

Any other suggestions?
Logged
DIR-655 H/W A4, Firmware 1.34NAb02 beta

Tonytoronto

  • Level 2 Member
  • **
  • Posts: 30
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #28 on: March 25, 2010, 06:22:27 PM »

 humm, worked on mine.. added Besure to the deny list and works, if i try to access Bsecure i get "forbidden web access" page.  Sorry if didn't work for you.. i'm still at 1.21 if maybe thats the difference
Logged

dirkpitt

  • Level 3 Member
  • ***
  • Posts: 157
Re: Blocking DIR-655.bsecure.com blocks Internet address resolution!
« Reply #29 on: March 26, 2010, 08:43:36 AM »

Sigh.  I feel resigned to regress to 1.21, so that some of the features on this router will work...

Thanks for your help TonyT!
Logged
DIR-655 H/W A4, Firmware 1.34NAb02 beta
Pages: 1 [2] 3 4