I have a Hisense TV. I was wondering if there’s an easy way to firewall their TV so that it only has access to Google Store and Netflix? Make it so the TV can’t reach anything else?
I don’t currently have any firewall. I have ddwrt as my main router. I can whip up a pihole if needed.
I don’t use ddWRT anymore but OpenWRT has nftables I use to block all but some IPs for select devices.
I don’t even put my TV on the network though.
Just disconnect the TV and only play media from a device you trust.
I don’t currently have any firewall. I have ddwrt as my main router.
DD-WRT has a packet filtering firewall, statefull firewall, NAT and proxy functionality…
I have my Highsense TV behind Adguard home (local DNS).
Here’s the list of major domains that i saw TV connecting to in the last 1 week. I haven’t started blocking them yet, reviewing them for now, then I will start blocking.
mediaservices.[.]cdn-apple[.]com
nrdp-ipv6.prod.ftl[.]netflix[.]com
logs.netflix[.]com
recommend-ui-sa.vidaahub[.]com
layout-ui-sa.vidaahub[.]com
home-ui-sa.vidaahub[.]com
ota-tv.vidaahub[.]com
domain.vidaahub[.]com
device-ecom.vidaahub[.]com
pay-vidaa.vidaahub[.]com
partner.vidaahub[.]com
app-tv.vidaahub[.]com
vidaa-base-auth-sa.vidaahub[.]com
tvmodules-vidaa.vidaahub[.]com
geo-bas-sa.vidaahub[.]com
iot-voice-sa.vidaahub[.]com
hub-msg.vidaahub[.]com
params-msg-sa.vidaahub[.]com
ter-jrnl.vidaahub[.]com
cdn-0.nflximg[.]com
acr.unruly[.]co
hisense-0ba453d1.prod.partner.netflix[.]net
Never connect a TV to the internet, ever. Amazon already not so secretly controls and monitors my life, so I just keep it in the fam and use a Firestick 4K Max.
All that connecting a TV to the internet will do is bring you continued disappointment, with rare upsides such as an elusive good firmware update, as most rarely improve something on the TV without fucking something else up or including a huge downside.
Why do you think they’ve gotten so cheap lately? They are sold at a loss because they rape your data and feed you ads… again just like everything else.
Most people who do what you want to do have a more complicated setup with a separate SSID for IOT stuff on it’s own isolated VLAN with firewall rules to specific things on the main network such as a Plex/Emby server, ect, if needed.

