xbox one connection

[drmax]

sorry for all the posts, but my mind is working. wondering if, since the xbox one was purchased 2nd hand online, that it may have been compromised, as to why it was showing a different mac address, or the unit is somehow circumventing the router, or not showing its true detail?

 

[drmax]

**I have verified that the xbox one that is in the list, is the device when turning on and off...but the mac address differs from the one listed, as opposed to the one that showed up in the firewall log. Perhaps the one that showed up in the firewall log was a mac address, trying to get into my system, as in from outside?** If that is what that firewall log represents, then this is not the mac address I was hoping for. The IP address appears to be random, now when I ck the status. ugh**

 

[drmax]

By reading apparently the MAC address can be spoofed or changed within the console. If this is the case then the user can continually changed this address to allow function of Xbox one, rendering my efforts to lock this unit, useless. Unless there is another work around for me. I mean, my kid isn't dumb. Lol! Now, if the way to do this, is to set a fixed IP address, rather than xbox using a random address? This is a little over my head, but I need to figure this out.

 

[chitownbob]

i Can the Samsung smart tv provide ICS? If so that is the culprit

Not to my knowledge, unless perhaps you are using an app on the TV.
No way to no for certain without knowing the model of tv and looking on Samsung's site for documentation of features

 

[Barman58]

Are you trying to stop your child from using the xBox online completely?

If so then following the options in my first post will do this without any issue

 

[chitownbob]

...Found the mac address under "firewall" log. Odd, this mac address is different from the one listed in the device list, nor is it listed anywhere that I can see, even after any refresh. But I added the address in the blocked list and enabled it. My main PC, the ICS box was not checked. Why wouldn't the address be listed? Its the only xbox 1 that was ever listed..

I have a Linksys E4200. MAC addresses that are currently attached to the system are listed in DHCP section of the setup page...although I have to click DHCP reservation. This allows the router to reserve an IP address to a particular piece of equipment by MAC address.

The other MAC address in firewall could have been entered at any time by UPNP...Universal plug and play. This allows a piece of equipment, say an xbox, to open the ports it needs, without user interaction...except for entering a password, if there is one.

 

[Barman58]

Also if you know the IP address of the site(s) that you wish to block you can use a specialist DNS server to block all access - secure the router and point the DNS requests to a secure server and set up Blacklists and /or Whitelists to control access.

Home Internet Security | OpenDNS

 

[chitownbob]

what does this mean....
INF 2016-12-26T07:32:57-05:00 hurl host=prov.samsungcloudsolution.com uri=/openapi/provisioning hijacked

INF is presumable information
2016-12-26T07:32:57-05:00 is DATE and TIME
url host=prov.samsungcloudsolution.com uri=/openapi/provisioning hijacked
is an api on your samsung tv. Not sure why it is "hijacked" but would not fixate on this yet. It may simply mean that the packet was routed to samsungcouldsolutions, then rerouted elsewhere once it got there. I would rather expect this.

 

[chitownbob]

also, what does this mean? When I turn on the xbox 1, the event pops this up....
INF 2016-12-26T07:45:30-05:00 sys Node 192.168.1.71 is down

Information that at 7:45 (I think -5 is timezone gmt -5)
a machine on your network, 192.168.1.71 is down.
Which is curious but not a deal breaker.
See if you can find out which machine is 192.168.1.71. You may need to go to the logs.
Ping it first to see if it is truly down (or if exists).

This could be an interesting exercise if you are using DHCP, which applies a new IP address to a device everytime the device is rebooted. Unless the IP is reserved. I reserve IPs for my Wireless Access Point (WAP), and my Network Access Server (NAS). Your router should always be 1.

 

[chitownbob]

here is what the xbox one is showing under lan details.
Connection Type
Wi-Fi (802.11) Frequency 5 GHz Usage User1 IP Address 192.168.1.77
fe80::7c72:b545:de1a:d675
2602:30a:2cd9:ae30:7c72:b545:de1a:d675 LAN IP Address Allocation DHCP IP Address Type Private (NAT) Hardware Address 4c:0b:be:73:51:b4 SSID ATT62rdA8D Status On

Until its turned off, its using Dynamic Host Configuration Protocol (DHCP) to assign routing numbers on the fly. This is just fine.

Its connected to your wifi using standard 802.11n or 802.11ac because it is 5 Ghz. It has an IP address which is quoted in IPv4 standard.
fe80::... indicates that it using a tunneling protocol to create a IPv6 address which I understood to be created from the MAC address, but does not appear to be so. Unless I am wrong.
Address Allocation DHCP IP Address Type Private (NAT).......Using DHCP, as noted above
Hardware Address 4c:0b:be:73:51:b4 should be the true MAC address.
SSID ATT62rdA8D is the SID of your network. which is on.

 

[drmax]

Are you trying to stop your child from using the xBox online completely?

If so then following the options in my first post will do this without any issue

Yes I am. He has no idea what I have reset the password too, which I already reset.
If I do the following...

• change the SSID of the router wireless
• Set a strong Pass Phrase on the wireless SSID
• set the router to not broadcast it's SSID

Will any of those 3 steps mess up any of our iPhones or iPad, or internet TV's, etc?

 

[chitownbob]

sorry for all the posts, but my mind is working. wondering if, since the xbox one was purchased 2nd hand online, that it may have been compromised, as to why it was showing a different mac address, or the unit is somehow circumventing the router, or not showing its true detail?

MAC address lookup shows following (good that it cant locate IP, since it is behind firewall)

MAC-Addr IP-Addr Vendor
4C-0B-BE-73-51-0B Microsoft, USA

This indicates a microsoft product like xbox.

 

[chitownbob]

**I have verified that the xbox one that is in the list, is the device when turning on and off...but the mac address differs from the one listed, as opposed to the one that showed up in the firewall log. Perhaps the one that showed up in the firewall log was a mac address, trying to get into my system, as in from outside?** If that is what that firewall log represents, then this is not the mac address I was hoping for. The IP address appears to be random, now when I ck the status. ugh**

You have DHCP enabled. So it can be a random IP.
Try reserving an IP address to the MAC, but make sure it is not in use at the time.

 

[chitownbob]

By reading apparently the MAC address can be spoofed or changed within the console. If this is the case then the user can continually changed this address to allow function of Xbox one, rendering my efforts to lock this unit, useless. Unless there is another work around for me. I mean, my kid isn't dumb. Lol! Now, if the way to do this, is to set a fixed IP address, rather than xbox using a random address? This is a little over my head, but I need to figure this out.

That is more of an admin function. You are admin.
I would think you would be able to lock non-admins out of that function.
BTW.....If you can.....change the password IN the xbox for your SSID so it cannot auto log in. Then lock this functionality from non-admins. Do you have a GUEST network set up? You may need to lock him from that too. Without knowing what router you have I cannot advise how.

 

[drmax]

By reading apparently the MAC address can be spoofed or changed within the console. If this is the case then the user can continually changed this address to allow function of Xbox one, rendering my efforts to lock this unit, useless. Unless there is another work around for me. I mean, my kid isn't dumb. Lol! Now, if the way to do this, is to set a fixed IP address, rather than xbox using a random address? This is a little over my head, but I need to figure this out.

That is more of an admin function. You are admin.
I would think you would be able to lock non-admins out of that function.
BTW.....If you can.....change the password IN the xbox for your SSID so it cannot auto log in. Then lock this functionality from non-admins. Do you have a GUEST network set up? You may need to lock him from that too. Without knowing what router you have I cannot advise how.

at&t pace 5268ac
The guess access code, was the password on the side of the router. I have since changed that password. He does not know it. I am not well versed in any of this. Just good at shutting something on and off. This is racking my brain. Wonder if he is possibly getting a signal out of the house, like a neighbor?

 

[Barman58]

Are you trying to stop your child from using the xBox online completely?

If so then following the options in my first post will do this without any issue

Yes I am. He has no idea what I have reset the password too, which I already reset.
If I do the following...

• change the SSID of the router wireless
• Set a strong Pass Phrase on the wireless SSID
• set the router to not broadcast it's SSID

Will any of those 3 steps mess up any of our iPhones or iPad, or internet TV's, etc?

The new SSID and the password would need to be re-entered in the devices to allow them access, but should not be an issue. I'm not sure if the Apple devices are able to connect to a hidden SSID so I would not try that.

At the moment you have protected the router from access but not actually changed the SSID or it's password so the xBox will just connect as always. Once these are changed the xbox should refuse to connect ( or more precisely the router would refuse access)

 

[chitownbob]

......... Wonder if he is possibly getting a signal out of the house, like a neighbor?

I sincerely doubt it. They are probably locked and the signal may be too weak....but you can check. If you have an android, download wifi analyzer to your phone. It will show signals and strengths that are available.

I know you think your kid is not the techy buy google is a junior hackers dream. He may have a friend or online friend that is giving him hints on how to defeat the system. Suggest you watch him while he plays but dont be too observant.

Is his phone acting as wifi hotspot? They can. This could mean that traffic could be going from xbox to phone to router to internet. But if you shut that down, traffic could go from xbox to phone to cellular network (expensive!) to internet. What is your data plan like?

It sounds like you are trying to do this the tricky way. Perhaps it might be best to talk to him/her and tell them what is your expectations. No online access. Otherwise, take xbox away. Its uncomfortable but its part of being a parent.

 

[drmax]

......... Wonder if he is possibly getting a signal out of the house, like a neighbor?

I sincerely doubt it. They are probably locked and the signal may be too weak....but you can check. If you have an android, download wifi analyzer to your phone. It will show signals and strengths that are available.

I know you think your kid is not the techy buy google is a junior hackers dream. He may have a friend or online friend that is giving him hints on how to defeat the system. Suggest you watch him while he plays but dont be too observant.

Is his phone acting as wifi hotspot? They can. This could mean that traffic could be going from xbox to phone to router to internet. But if you shut that down, traffic could go from xbox to phone to cellular network (expensive!) to internet. What is your data plan like?

It sounds like you are trying to do this the tricky way. Perhaps it might be best to talk to him/her and tell them what is your expectations. No online access. Otherwise, take xbox away. Its uncomfortable but its part of being a parent.

I know the parent deal. Trying to be one up on the situation. Yes the iPhone could be used as a hotspot but that phone was off during this.

 

[Eric3742]

sorry for all the posts, but my mind is working. wondering if, since the xbox one was purchased 2nd hand online, that it may have been compromised, as to why it was showing a different mac address, or the unit is somehow circumventing the router, or not showing its true detail?

Your kid can change the MAC id, just google.

Refer to this link:

Getting Your MAC Address: Xbox 360 - GROK Knowledge Base



Eric.

 

[Eric3742]

Hi drmax

There is solution on this matter, of all the place is in Xbox website.

Xbox One

Do read and select the option that suit you.

Basically, you need to do Family setting (do include yourself &or spouse &or whoever when you are not around as Administrator ) and Timing allow for the child to use and play, as a reward.

Family setting
How do you get rid of parental control on Xbox one?
How a parent can change the privacy and online safety settings for a child account. ...
Add a new member to your family on Xbox One. ...
Grant an exception to your child's content limits on Xbox One. ...
Remove an account from an Xbox One console. ...
Promote a child account to an adult account on Xbox One.

How do I set time limits on Xbox one?
To set the Family Timer
On your console, go to Settings, and then select Family.
Select On to turn on Console Safety.
Enter a 4-button pass code using your controller.
Select Family Timer.
Select whether you want to set a Daily or Weekly timer.

Router wifi is rather weak.
I did asked DLink technician on about wireless security.
He mentioned on hiding the wifi SSID, in setting in the router, by not display.
But there is an warning to take note.
That is if you forget the SSID, you may unable to log in.
Of course, there is a need to have an administrator login with the password secure.

Hence, i conclude that router setting is rather weak.
Even Parent Control is limited.


Eric.