[REQ] Option to disable online accesses [#20489]

Post a reply

Smilies
:D :) :( :o :-? 8) :lol: :x :P :oops: :cry: :evil: :roll: :wink:

BBCode is ON
[img] is ON
[url] is ON
Smilies are ON

Topic review
   

Expand view Topic review: [REQ] Option to disable online accesses [#20489]

Re: [REQ] Option to disable online accesses [#20489]

by Peke » Tue May 28, 2024 10:10 am

Hi,
Is your DNS Service set to 1.1.1.1?

Here is my HOME Network Router WAN Settings
Image

Beside that I have Mikrotik as Middle Firewall before ISP Router and tunneling to my other network parts that have own routers like IoTs, ...

It is possible that MM Chromium part Auto Switch DoH to use DNS over HTTPS: when asked to access internet especially if IPv6 is working correctly.

Have you tried WireShark to see packets what MM sends?

Re: [REQ] Option to disable online accesses [#20489]

by CrashMonkey » Tue May 28, 2024 8:21 am

For the port 5000 i will look at diskstation. (however i only use port 5000 tcp for administrating the nas)

My settings are used for Encrypted DNS, that is using port 443.
However MediaMonkey does not use the Encrypted dns but connecting to udp 53.
So not respecting the DNS settings supplied in windows 11.

Re: [REQ] Option to disable online accesses [#20489]

by Peke » Tue May 28, 2024 5:04 am

CrashMonkey wrote: Mon May 27, 2024 11:39 am Will test this, and onces it happen, then i come back with more information.

Two others things.
Does MediaMonkey needs to connect to Admin port of Diskstations, as it tries that? port 5000 (or is it only used to detect devices?)
https://imgur.com/5RhWauH
Also MM does not use my pre-defined DNS settings. My dns settings are setup as secure(encrypted). However MM tries to use the insecure dns servers.
Port 5000 along with port 1900 is not admin port it is used by UPnP to detect Media Servers and most likely your diskstation announced itself as media server and MM tries to access it in order to see what media it serves. You should check DiskStation traffic.
https://www.grc.com/port_5000.htm

As for DNS 1.1.1.1 Is privacy DNS server operated by CloudFlare https://www.cloudflare.com/learning/dns ... s-1.1.1.1/

https://www.google.com/search?q=DNS+Ser ... 8&oe=utf-8

Re: [REQ] Option to disable online accesses [#20489]

by CrashMonkey » Mon May 27, 2024 11:39 am

Will test this, and onces it happen, then i come back with more information.

Two others things.
Does MediaMonkey needs to connect to Admin port of Diskstations, as it tries that? port 5000 (or is it only used to detect devices?)
https://imgur.com/5RhWauH
Also MM does not use my pre-defined DNS settings. My dns settings are setup as secure(encrypted). However MM tries to use the insecure dns servers.

Re: [REQ] Option to disable online accesses [#20489]

by Ludek » Mon May 27, 2024 10:01 am

CrashMonkey wrote: Thu May 23, 2024 6:35 am I use a firewall and have some things blocked from MM, however that also creates "broadcast" storms, and MM is using a lot of cpu during that time, and the firewall is hit by 30+request per sec, then it goes quit again.

So if i have a network for example 192.168.1.0 as primary use, but also have connected networks like 192.168.2.0,192.168.3.0, and some 10.0.0.x -> 10.0.1.x etc etc. Then MM broadcast on all networks, what exctually is not needed, as i only use the primairy, and other networks go somewhere else that does not need MM broadcast.
So firewall is setup to allow MM to 192.168.1.0/24 all other internal networks are denied. (this gives load on clientpc and extra load on the firewall)
Hi, I wonder what do you mean by the broadcast? Probably SSDP discovery for the UPnP/DLNA media server?
i.e. does it happen also if you disable Options > Media Sharing ?

Re: [REQ] Option to disable online accesses [#20489]

by CrashMonkey » Thu May 23, 2024 6:35 am

I use a firewall and have some things blocked from MM, however that also creates "broadcast" storms, and MM is using a lot of cpu during that time, and the firewall is hit by 30+request per sec, then it goes quit again.

So if i have a network for example 192.168.1.0 as primary use, but also have connected networks like 192.168.2.0,192.168.3.0, and some 10.0.0.x -> 10.0.1.x etc etc. Then MM broadcast on all networks, what exctually is not needed, as i only use the primairy, and other networks go somewhere else that does not need MM broadcast.
So firewall is setup to allow MM to 192.168.1.0/24 all other internal networks are denied. (this gives load on clientpc and extra load on the firewall)

Re: [REQ] Option to disable online accesses [#20489]

by rusty » Wed May 22, 2024 10:53 pm

To summarize the current status: , https://www.ventismedia.com/mantis/view.php?id=17638 has been fixed i.e. users can now disable any traffic that is not obviously user-initiated.

#20489 remains open to track the feature request for a single setting to block traffic.

-Rusty

Re: [REQ] Option to disable online accesses [#20489]

by Timo_Beil » Wed Apr 03, 2024 11:00 am

Maybe... I had allowed the Ventis IP 54.39.221.200 for updates, but after disabeling automatic updates google was only once contacted (216.58.206.35). Manually triggered update search doesn't contact google.

Re: [REQ] Option to disable online accesses [#20489]

by Barry4679 » Wed Apr 03, 2024 8:17 am

Timo_Beil wrote: Wed Apr 03, 2024 2:48 am MM connects to Google U.S. with UDP 142.250.185.131:80 immediately on startup.
Is "Check for updates" checked in the General tab at Tools>Options?
maybe it is that?

Re: [REQ] Option to disable online accesses [#20489]

by Timo_Beil » Wed Apr 03, 2024 2:48 am

rusty wrote: Mon Apr 01, 2024 10:53 am
3) Possible Bugs:
a)
Even if I disable all checkboxes in "Metadata lookup", MM sends data to somewhere on the web.
As indicated above, Peke is unable to replicate (assuming views containing 'Info panels/Related Artists' are disabled

b)
After deselecting all "Sources" for metadata lookup" MM secretly re-enables all three options.
I'm not seeing this with the latest beta build. If you are, can you elaborate?

Thanks in advance!

-Rusty
a) I can't replicate, that anyone in the world is drowning (assuming they walk around with a life jacket on at all times) :D
You really have to look at each individual (sub)node to see whether an infopanel is still activated there.
It takes a while until you have eliminated all info panels.

b) Sorry, this concerns the three sources in AutoTagging (here the internet access is deliberately initiated by the user).
So that this behavior can be classified as "strange" but useful.

Thanks for your suggestions. I will unblock MM in the firewall and start monitoring the traffic again.
EDIT:
MM connects to Google U.S. with UDP 142.250.185.131:80 immediately on startup.

Re: [REQ] Option to disable online accesses [#20489]

by Lowlander » Mon Apr 01, 2024 11:51 pm

Artwork lookup no longer happens in the Filelisting (it did on older releases). Only Info panel does any auto-lookups (even when all lookups are disabled) on the latest beta. Disabling the Info panel should prevent any auto-lookups on the current beta.

Re: [REQ] Option to disable online accesses [#20489]

by Rob_S » Mon Apr 01, 2024 10:48 pm

by Peke » Mon Apr 01, 2024 1:18 pm

Rob_S wrote: ↑Mon Apr 01, 2024 9:37 am
Background image lookup is one of the ones I would like to be able to turn off, Lowlander said in one recent post this is currently impossible.
Lowlander referred to Info Panel that can't be shown and disable Internet access.

In response to the above, I was referring to the following statment by Lowlander:

Re: Missing Artwork For Single Release
Post by Lowlander » Tue Mar 12, 2024 8:26 am

Lookup will also happen when displaying Artwork in the Filelisting, this can't be disabled.

Re: [REQ] Option to disable online accesses [#20489]

by Barry4679 » Mon Apr 01, 2024 8:56 pm

Peke wrote: Sun Mar 31, 2024 6:13 am Hi,
Barry4679 wrote: Wed Mar 27, 2024 9:23 am It just seems illogical that I can turn off Internet access for tag, art & lyrics lookup, but I can't turn off the Wikipedia access.
Why? Just because Big Brother says so?
Disable Info Panel and it will not be shown/accessed
Thanks. I had forgotten that.
But it, and your various other workarounds, are not discoverable nor adequate for this situation IMO.

rusty wrote: Mon Apr 01, 2024 10:53 am 2) Need for users to easily disable 'background' and/or "non-obvious" internet connections. This is an approach that I think most of you are promoting that I agree makes sense. I haven't tested this but based on Peke's feedback my understanding is that if Media Sharing, Tag Lookups, and Info Panels are all disabled, then there are no 'non-obvious' outbound network connections from MMW 2024 (with the possible exception that ripping triggers CD lookups/AccuRip lookups). Peke tested this using Wire Shark and WFC to report all outbound internet traffic from MM (excluding LAN/WLAN/mDNS/DLNA/Multicast which are all local).

If the above is accurate then the only improvements that might be needed would be:
a) For Audio CD metadata lookup, add an option for 'none'
b) Make it more obvious how to disable Views or View Elements (e.g. Info Panel, Related Artists) that access the internet

Is that correct or am I missing something?
Rob_S wrote: Mon Apr 01, 2024 11:37 am Also, it makes sense that if I turn on the info panel, it includes some info from online, requiring a lookup, but some of the information comes froms tags locally. Thus, I would still like to be able to have the info panel in my view, but disable the online lookup, if that were possible.

I agree with Rob_S, disabling the Info panel View is not a palatable option for someone who wants to lockdown Internet|Wikipedia access.
When the Info panel is disabled the Album and Artist Detail nodes are headerless and ugly; no nice title showing what you are looking at, and no album art image, no genre summary, no duration for the album.
And without the Info panel, a person is barred from making an Internet lookup on the occasions that they want to do so.

I don't really understand why people want to limit usage of the internet. They hate waste, or they are concerned about their privacy, or are concerned about their PC security, by opening their PC to viruses? ... Whatever the reason, there seem to be people who want to use MM without having this uncontrollable enforced activity and apparent (to them) opening up of their PC.

It is clear how to reduce most unwanted auto background MM Internet activity, not intentionally requested by the user. IE. Artist & Album art lookups, lyrics lookup, tag lookups, scrobbling to LFM. It seems clear that MM has provided choice and control here.

Why is the Wikipedia lookup different? It is like a red flag to these people.
It looks like a unfortunate design omission.

All the hacker techy workarounds proposed by Peke just does MM reputational damage IMO. ... Sorry Peke, but that's how I see it.

Re: [REQ] Option to disable online accesses [#20489]

by rusty » Mon Apr 01, 2024 8:34 pm

Thanks to everyone for the feedback. I've summarized it at:
https://www.ventismedia.com/mantis/view ... 638#c74912

Note: I suspect that this won't make it into this release; if not we can at least update our docs to better communicate the limitation and what the connections are.

-Rusty

p.s. Rob,
- Artist images/Artwork lookup can currently be disabled in MMW 2024 with the exception of the Info Panel.
- MMW's media sharing by default is set up for _local_ connectivity

Re: [REQ] Option to disable online accesses [#20489]

by Peke » Mon Apr 01, 2024 3:18 pm

Rob_S wrote: Mon Apr 01, 2024 11:37 am Background image lookup is one of the ones I would like to be able to turn off, Lowlander said in one recent post this is currently impossible.
Lowlander referred to Info Panel that can't be shown and disable Internet access.
As Rusty pointed I have tested using WireShark and WFC to completely Lock MM from accessing Internet and LAN in order to track and LOG each and every outbound packet sent to LAN port. If I do that then info panel after some time Shows
Image
Which is normal as it does not show any info and MM UI looks empty and unfinished.
Rob_S wrote: Mon Apr 01, 2024 11:37 am Also, it makes sense that if I turn on the info panel, it includes some info from online, requiring a lookup, but some of the information comes froms tags locally. Thus, I would still like to be able to have the info panel in my view, but disable the online lookup, if that were possible.
I am not sure if there is any point of having Info Panel unless you get info from online sources. I see your point, but that would mean we should add customization of Info panel and information it provides. Would that be satisfying for you? eg. you be able to customize layout of Info panel.

Top