Läs och lär
Här finns grunden för att få det att fungera.
Använd som uppslagsbok eller varför inte lär dig allt
För bruk med nordiska kort använd cardserv.cfg och newcamd.conf som ser ut som nedan orange text.Använd gärna DCC Dreambox Controll Center för att editera filerna.
Högerklicka på filen > välj edit > markera den text här du vill lägga in > markera ALL text i filen i din dreambox välj klistra in > editera ev Boxid för Viasat-NDS > välj spara i menyn > klart.
Gör lika med nästa fil. . Önskar du fler alternativ att styra ev cardsharing mm så fortsätt läs nedan. Här står allt om nevcamd 6.01 Du ser de olika parametrarna under varje stycke.

#
# /var/tuxbox/config/newcamd/cardserv.cfg
# DREAMBOX 7020 /etc/tuxbox/config/newcamd/cardserv.cfg
# edit by Ubbe mod©dreamboxx.nu
#
DESKEY = 01 02 03 04 05 06 07 08 09 10 11 12 13 14
SERVER_NAME = cardserv
DEBUG_PORT = 14000
ENTITLEMENT_PORT = 14001
ADMIN_PORT = 14002
ADMIN_PASSWORD = secret 00 00 00 00 00 00 00 00 00 00 00 00 00 00
USER = local local lan 127.0.0.1 12000
DEBUG_INIT = no
DEBUG_NET = no
DEBUG_ECM = no
DEBUG_EMM = no
# vill du använda ett Viasat-nds kort så ta bort tecknet # före boxid =
# och skriv in aktuellt nummer
#Upper Card slot
SERIAL_PORT = 0
TCP_PORT = 10000
# BOXID = 0000000000
EMM-G = yes
EMM-S = yes
EMM-U = yes
SPECIAL_FEATURES = no
#Lower Card Slot
SERIAL_PORT = 1
TCP_PORT = 10001
# BOXID = 0000000000
EMM-G = yes
EMM-S = yes
EMM-U = yes
SPECIAL_FEATURES = no
# SERIAL_PORT = 2
# TCP_PORT = 10002
# BOXID = 0000000000
# EMM-G = yes
# EMM-S = yes
# EMM-U = yes
# SPECIAL_FEATURES = no



_____________________________________________________________________________________________


#
#
# /var/tuxbox/config/newcamd/newcamd.conf
# DREAMBOX 7020 /etc/tuxbox/config/newcamd/newcamd.conf
#
# edit by Ubbe mod©dreamboxx.nu
EMU = yes
PREFER_EMU = yes
AU = yes
OSD_TIMEOUT = 0
OSD_WEB_LOGIN = root:dreambox
SHOW_ALL_CA_SYSTEMS = no
DEBUG_ECM = yes
DEBUG_EMM = no
DEBUG_CWS = yes
DEBUG_CAM = yes
SHOW_PAT = no
SHOW_PMT = no
SHOW_ECM = no
SHOW_CAT = no
SHOW_EMM = no
SHOW_CWS_ECM = no
SHOW_CWS_EMM = no
EMM_REPORT_WRONG_SIG = no
DEFAULT_CW_DELAY = 0
RELOAD_CONFIG_ON_ZAP = yes
RELOAD_KEYLIST_ON_ZAP = no
CA_INFO_FILE = /tmp/cainfo.txt
CWS = 127.0.0.1 10000 local local 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
CWS = 127.0.0.1 10001 local local 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
# CWS = 127.0.0.1 10002 local local 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
# CWS_MULTIPLE = 127.0.0.1 10000:10002 local local 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
CWS_CONNECT_TIMEOUT = 50
CWS_INCOMING_PORT = 12000
CWS_DEBUG_PORT = 12001
CWS_KEEPALIVE = yes
ADMIN_PASSWORD = test 00 00 00 00 00 00 00 00 00 00 00 00 00 00


_________________________________________________________________________________
Nedan fullständig readme för newcamd
Official release newcamd v6.07 full release

check recent.txt for answers to questions asked recently in forums

-------------------------------------------------------------------------------

Important: Please save this complete release, for future releases, we may
choose to include only those files, that have actually changed

-------------------------------------------------------------------------------

We noticed, there are still many files around that do NOT comply
to the distribution terms set below, particularly complete images with all
keys inside. We again ask uploaders to remove such files and we also ask
admins to not allow such files on their upload centers.

Further action might be taken in the future, if our rules about newcamd
distribution are continously violated.

-------------------------------------------------------------------------------

It is our firm believe that access to Free-TV is made way to easy for
people at the moment and we are seriously considering disallowing the
distribution of future newcamd releases inside flash images. We have been
following a public policy up until now, because we wanted to provide a free
alternative to the never ending greed of the commerical pirates. But we do
believe however, that we can ask everyone wanting to use our software, to get
out of their TV armchairs and pause the growing of their asses (to quote the
writer of a certain FAQ) long enough to learn how to upload a couple of files
to their boxes via ftp, read the supplied documentation and edit a couple of
keyfiles. Everybody can learn how to do that easily, and we mean EVERYBODY.
We feel that anyone claiming the contrary, is just too lazy to even try.
To sum up, we believe all the emu images and full automatic internet key
downloads at the push of a button are hurting the Free-TV community more then it
serves it by forcing Pay-TV providers to implement stronger countermeasures and
we would ask all image makers out there to rethink their position.

-------------------------------------------------------------------------------

And since we are discussing politics already, some recent news bulletins on
several news services indicated the European Union thinking about forcing Pay-
TV providers to offer their services beyond national borders to anyone who wants
a subscription. We strongly support such a move and we pledge that the emu and
cardsharing facilities in newcamd would be discontinued if Pay-TV providers
would start to offer their services internationally under the same conditions
they offer it to national residents. In particular:

1. same choice and contents of all channel packages (no stripped-down
international subscriptions like Digiturk Euro).
2. same prices as for national customers

It was never the intention of the newcamd Team that people would use it to steal
the services of their national Pay-TV provider (or any other provider they could
officially subscribe to). If and when everyone would be able to officially
subscribe to any Pay-TV package he wants to, under the same conditions as
everyone else and regardless of where he lives, we would feel newcamd becoming
kind of obsolete. The only reason why we make newcamd support emu and card
sharing is to overcome this discrimination by Pay-TV providers to offer official
subscriptions to national residents only.

-------------------------------------------------------------------------------

About Sky NDS

Well, after the gbox team made it public in their usual charming manner, which
is only for their elite group of friends (aka to people that crawl up their
aces) and to people who pay for access to their card sharing network, and after
also a patched cardserver appeared for Sky NDS (which by the way is indeed
patched, we had nothing to do with it, we - so far - never gave away any
cardserver binary supporting Sky to anyone), we feel, there is no point of
holding it back any longer.

We feel however, the gbox team and the person that patched cardserver and gave
it away, so that it finally found its way to the public domain, did not act very
clever for two reasons:

1. Both solutions support card sharing, which doesn't really work for both
BSkyB and Sky Italia for technical reasons. Anyone, who's tried it over a
high latency Internet connection or where more than clients shared a card,
will have noticed, he will get picture dropouts quite regularly. So what's
the point of releasing something, that doesn't work properly and will only
piss off the Pay-TV provider and make it introduce counter measures more
quickly.
2. Regarding Sky Italia: Releasing a cardserver for the NDS cards prematurely,
this is, while a perfectly good solution for card sharing this provider is
still working perfectly fine (Seca2). So, while the NDS server so far wasn't
really needed yet, because Seca2 worked just as well, Sky Italia had time to
to analyse the existing solutions and come up with a counter measure before
Seca2 is even deactivated.

We've thought, the camds are around to improve the digital tv experience for
the ambitioned hobbiest, who are discriminated by the Pay-TV providers for not
living in the correct country. But the release of both gbox and the patched
cardserver were certainly counter-productive when trying to keep access up to
such channels for as long as possible.

Of course, we know, that at least the gbox team is more interested in making
money for themselves as for the common good. We know, many of you readers will
object now to this statement, and yes, we've read the latest statement of the
gbox makers too, claiming there's absolutely no money involved and that they've
absolutly nothing against everybody using gbox. The fact of the matter is, this
gbox statement is not believeable whatsoever. For once, we know a guy in one of
the former Yugoslav countries, that has admitted to selling access to gbox
cardsharing (newcamd too possibly). And this guy is always the first person to
have the newest "non-public" gbox releases. We're sorry, but we're not so naive
to believe, that there is even the remote possibility that this could be a
coincidence. And what about that RSA protection of the nds camcrypt in gbox?
Surely if the gbox team wouldn't have any objections against everybody using
gbox, like they claim, they wouldn't have bothered with such a protection in
the first place. And what about the gbox card sharing protocol? Biggest secret
of all time. We even hear regularly, they change it as soon as someone
"unauthorized" has figured out, how it works. Now, does that sound like the
work of people, who don't care about who's using gbox? Why do we have two
totally incompatible sharing protocols now? Do you think, we wanted to make
everybodies life miserable by inventing a second, incompatible protocol? If the
gbox protocol had been available, we would certainly not have written cardspider
but instead adapted newcamd & cardserver to use as client/server for gbox
sharing.

You may have noticed, that contrary to the gbox statement, we're not using any
nicknames are to name the people, we're talking about, because even while we're
not agreeing with their actions, we don't want to cause any trouble for them by
naming them. We do ask however, why so many people (board admins etc) believe,
the gbox people must be treated fairly and everybody should comply with their
wishes, while the gbox people go around naming others, possibly causing trouble
for them, which is not very fair of them at all.

Anyway, back to Sky NDS. We've decided to release a solution for BSkyB and Sky
Italia now, because other solutions are public anyway, but we didn't include
cardsharing for those two providers, for reasons explained above. Both providers
are included in betad, so the same restrictions apply to them as they do for
Premiere (no sharing, no EMM blocking). Enjoy it while it lasts, the NDS
camcrypt is very versatile, Sky can very fast make minor changes to it without
any need to change any hardware, and if that happens, don't expect any fast
updates. We have no intension whatsoever, getting into a cat-and-mouse game with
Sky, updating the camcrypt every two weeks or so (and believe us, the camcrypt
is versatile enough to support such a scenario).

"But why didn't you guys at least release a betad for BSkyB before?" we hear
you ask. "There never was another ca system on BSkyB than NDS and I thought
your goal was to improve the digital tv experience for the ambitioned
hobbiest." There are 2 very good reasons for it:
1. As indicated before, Sky can change the camcrypt at any time easily, if they
wanted to. We wanted to avoid half of the UK going out to buy Dreamboxes to
watch Sky on, while we know very well, that there is a good chance, it would
work only for a couple of weeks. The authors of the other solutions didn't
warn you about this, we feel that we have to.
2. So far newcamd worked only on a very limited number of set top boxes, most
noticeably the Dreambox (although newcamd works nicely on dbox2 or i386 DVB-S
cards too, almost nobody, at least outside of Germany, where the dbox2 was
sold, uses newcamd on these platforms). We didn't want to influence any
market shares for any of the competing manufacturers with our software.
Now this isn't a problem anymore, because with V6.00 we've introduced a box-
independent api, so anyone can write support for different boxes without the
need to have any source code from newcamd (see below).

-------------------------------------------------------------------------------

What new in V6?

We've introduced a documented, set-top-box independent api. This way, the
newcamd binary has become independent of the set-top-box it is running on.
All the set-top-box dependent i/o calls (to the demuxer, ca or cardreader
device) have been placed into a shared library libcamdio.so. This way, you
are able to use the same newcamd binary on (currently) dbox2, Dreambox and
(new!) Triple-Dragon. All you have to do is pick the correct libcamdio.so
library for your box to go with the generic newcamd binary.

The api itself is documented for other camd developers. That means, other
camd developers, that choose to use the api, can implement their camd on
one of the supported set-top-box and their binary will automatically be
working on the other supported STBs as well.

But that's not all, if some new linux based STB is released in the future,
independent developers can write their own libcamdio.so for the new STB,
and newcamd as well as all the other emus, that use this api, will
automatically run on their box, without the need to change anything in
the newcamd (or other camd's) binary. Of course only as long as the new
STB uses the same processor architecture for which a camd binary is already
available, but even if it's not, it's much easier just request to compile
a binary for a different processor architecture than to request a whole
bunch of little changes to support the new STB's demux or ca dev apis.

For api documentation see file libcamdio/libcamdio.h


History:

v6.07: newcamd: "fix" showing of "can't decode" message, we actually wanted to
show it all the time in v6.06, because when there's no picture,
the message don't hurt anybody, however, we didn't realize,
people using ci cams in parallel to newcamd (we don't really
know why, using cardserver/betad would have many advantages over
using a cam), anyway, OSD_TIMEOUT = 0 know suppresses all
messages again, OSD_TIMEOUT = 1 will show "Can't decode"
messages only, any value >1 will show all messages
libcamdio.so: (Dreambox) complete rewrite of the .listen.camd.socket and
camd.socket code, see readme for details

v6.06a: newcamd: allow multiple tpscrypt2 keys in tpscrypt file, all of them
must have the same key index:
007c00:01:01 02 ... (key1)
007c00:01:11 12 ... (key2)
... (more keys)
there is no new binary for newcamd, this update is already in
the v6.06 version, we just forgot to mention it
there will be no client to update tpscrypt keys over the
internet, you never know, who runs such a server (could be TPS
themselves, collecting IP addresses), and if you don't want to
learn how to use a text editor to add keys to the tpscrypt file
then newcamd is for you anyway

v6.06: newcamd: behaviour when requested to decrypt two channels at once changed
will now continue to decrypt the recorded channel instead of
starting to decrypt the new (2nd) channel
newcamd: fix swapped control words for MTV+VH1 ESP
newcamd: fix Cabo AU nagra1
newcamd: fix nagra2 ecm nano parser for Cabo
cardserver: err, changed something weeks ago, forgot what exactly
libcamdio.so.0: (Dreambox) tries to get current channel from
/tmp/.listen.camd.socket when first starting
this means newcamd starts to decrypt immediately
when started after enigma (or later restarted)
needs cvs image compiled Dec 26th, 2005 or later

v6.05: cardserver: fix viaccess class entitlement dump
cardspider: fix a particular nasty bug, that occasionally caused control
words to be matched to a different ecm request than they
originated from, this might have caused occasional black
screens, emergency shutdown requests or in very rare
circumstances segfaults in cardspider (obviously they must
have been very rare, because noone ever complained about
them)
cardspider: changed strategy when local users access local cards through
spider, these will now be preferred using user id as the sort
key and will be handled before any ecm requests coming from
external peers
cardspider: added ECM_RESEND feature, if after 3-4 seconds cardspider
hasn't received a response to an ecm request, it will repeat
the request to external peers, this is intended to smooth
over the unreliableness of the udp protocol, but it might
increase the data rate used, if you are concerned about this,
the old behaviour can be restored by setting ECM_RESEND = no
in cardspider.cfg
cardspider: update avoidDropoutsHowto.txt, this is REQUIRED READING if
you want to run a stable network

although, we have not increased the protocol version number in this
release of cardspider which would've made it incompatible with the older
versions, we ABSOLUTELY RECOMMEND to upgrade everyone in your network
immediately, especially because of the bug fix above

v6.04: cardserver: "Auto-PIN" for Conax cards
newcamd: Canal Digitaal code added, Motors TV and Mezzo only
newcamd: priority feature completely rewritten, needs changes in
config file /var/tuxbox/scce/priority
newcamd: Cabo AU fix
newcamd: fix a bug in the config file parser regarding CWS options

v6.03: newcamd: new feature "constant" control word
some channels (BISS encrypted for example) use always the same
control word, these can now be set /var/tuxbox/scce/constantcw
libcamdio.so for Dreambox: add a workaround for the "no picture after
newcamd restart" problem
ppua: new syntax for this keyfile, newcamd will convert old files
automatically
cardserver: add an "Auto-PIN" feature for Cryptoworks cards, new option
CARD_PIN in cardserv.cfg, please read the warning in
cardserv.cfg about what happens when you enter an incorrect
pin code

v6.02: move all config files to its own directory
/var/tuxbox/config/newcamd for ppc versions
/etc/newcamd for i386
cardserver: improve entitlement dump for Cryptoworks cards
newcamd.conf: changed meaning of the passive option in CWS lines,
newcamd will not connect to these servers when first
started, but will connect when receiving a wanon command
from camdcmd and the connection is configured "wan"
newcamd: added Digital+ Nagra2 (1801) emu support, enter keys in
/var/tuxbox/scce/keylist
/var/tuxbox/scce/rsakeylist
removed DMM7020 ipk, nobody was using them anyway

v6.01:

cardserver/cardspider/camdcmd: add swap services command
newcamd: polsat nagra rom 10 fix, delete old /var/tuxbox/scce/strom3.bin and
put /var/tuxbox/scce/strom.bin into your image (the file is modified)
newcamd: increase timeout value for getting nds control words, shouldn't logout
anymore from the server while recording, if the server manages to reset
the card, internal optimations in newcamd done for it, because the
timeout is now greater than the time between different ecms arriving
from satellite
will still logout from betad, if it doesn't manage to reset the card,
done to protect your card from damage!
newcamd: some other optimations
cardserver/viaccess: stop switching back and forth of current ident when EMMs
are blocked
Dreambox/libcamdio.so: added autodetection of the number of internal cardreaders

v6.00b: fixed i386 card servers

v6.00:
all binaries: use libcamdio - check for config files, especially newcamd.conf,
a lot of the old options don't exist any longer
all binaries: support Triple-Dragon
cardserver/cardspider: improve ecm handling, on old versions it was possible
for one cardspider client to cause dropouts for all
others, when zapping very fast (each zap would have
sent a new ecm request to the cardspider network,
possibly blocking requests from others), now new
request are sent only after 3 seconds or after the last
request from the same client is answered, whatever event
occurs first
cardspider: increased the protocol version number, so that network admins can
force all participants to upgrade to the improved version
cardserver.dreamTriple: add powerup/powerdown modes for Triple Dragon, see
betad.dreamTriple: readme in the libcamdio/TripleDragon directory
betad: added NDS for Sky Italia and BSkyB
newcamd: changed the path for the scce directory from /var/scce to
/var/tuxbox/scce (/var/scce would be in the ram disk on Dreambox 7020)
added via2.4 algo
cardserver/Conax: fix handling of cards that have some maturity rating enabled,
cardserver still answers "Can't decode" on protected channels,
because there is no way for the user to enter the pin and send
this information back to cardserver, but contrary to the old
version, at least the card will continue to work now on all
unprotected channels after zapping over a protected channel
scce/ecmoverride: removed pmt pid from the config lines
scce/mappings: added mapping for Seca2 SCTa lot of the old options don't exist any longer
all binaries: support Triple-Dragon
cardserver/cardspider: improve ecm handling, on old versions it was possible
for one cardspider client to cause dropouts for all
others, when zapping very fast (each zap would have
sent a new ecm request to the cardspider network,
possibly blocking requests from others), now new
request are sent only after 3 seconds or after the last
request from the same client is answered, whatever event
occurs first
cardspider: increased the protocol version number, so that network admins can
force all participants to upgrade to the improved version
cardserver.dreamTriple: add powerup/powerdown modes for Triple Dragon, see
betad.dreamTriple: readme in the libcamdio/TripleDragon directory
betad: added NDS for Sky Italia and BSkyB
newcamd: changed the path for the scce directory from /var/scce to
/var/tuxbox/scce (/var/scce would be in the ram disk on Dreambox 7020)
added via2.4 algo
cardserver/Conax: fix handling of cards that have some maturity rating enabled,
cardserver still answers "Can't decode" on protected channels,
because there is no way for the user to enter the pin and send
this information back to cardserver, but contrary to the old
version, at least the card will continue to work now on all
unprotected channels after zapping over a protected channel
scce/ecmoverride: removed pmt pid from the config lines
scce/mappings: added mapping for Seca2 SCT


Installation for Dreambox 7020:
Please see the readme in the dm7020-ipk directory.

Installation for Triple Dragon:
Please see the readme in the libcamdio/TripleDragon directory.

Installation for other STB's:

Copy newcamd.conf to /var/tuxbox/config (dbox2/Dreambox) or /etc (i386).
Copy lib/libcrypto.so.0.9.7 to /lib or /var/lib directory
Copy the correct libcamdio.so.0 for your box to /lib or /var/lib
Check the config file and alter it for your needs.
Copy keylist, rsakeylist, ppua, tpscrypt, priority, mappings, nagra*.bin to
/var/tuxbox/scce
Enter keys into the keyfiles.
For i386 install DVB-S driver with changed root file.
Dreambox & dbox2 don't need an additional driver.

dbox2 users should deactivate hardware section filtering on API3 drivers, for
some reason, which illudes me, the demuxer keeps crashing from time to time
when using newcamd with hardware section filtering turned on.

Changes to Zapit/Enigma:

No changes are necessary in recent Zapit or Enigma sources. Just use newcamd
instead of camd2 or dccamd. In fact newcamd is designed specifically for use
with unchanged zapit/Enigma. Any complaints about newcamd problems when running
in so-called emu images which feature other emus will be ignored. If newcamd
works with unchanged zapit/enigma, it works period. Everything else is the
problem of the image builders.

Killing newcamd

This seems to be a big problem, from what I can read in certain Internet
forums (Posts like "newcamd never saves any AU keys", well if you kill it
with the -9 option, you're not giving newcamd a chance to save anything).
So, this is, how it's done right: newcamd, during startup, always creates a
file /tmp/newcamd.pid. Kill that pid (pid = process id) and newcamd will
shut down orderly. For example: kill `cat /tmp/newcamd.pid`

vdr-Anpassung:

Mitgeliefert wird ein Patch fuer szap aus dem linuxtv-dvb-1.0.1.tar.gz
Treiberpaket. Die darin enthaltenen camd_stop() und camd_start() Routinen
koennen auch in den vdr uebernommen werden. Saemtliche Funktionalitaet, die
auf das ca-Device zugreift, ist im vdr zu deaktivieren, newcamd benoetigt
exklusiven Zugriff auf das ca-Device. Anstatt der PMT Pid kann auch 0
uebergeben werden, da mein vdr Beta-Tester meinte, die PMT Pid sei an der
Stelle im vdr Code, an dem man den newcamd nach dem Zappen starten moechte,
etwas schwierig zu ermitteln. In diesem Fall versucht newcamd die PMT Pid aus
der Transponder PAT anhand der uebergebenen Service Id zu ermitteln. Nicht
vergessen, einen Treiber mit gepatchtem Root File zu verwenden.

mehrere DVB-S Karten:

Ist mehr als eine DVB-S Karte im Rechner eingebaut, muss fuer jede Karte ein
eigener newcamd gestartet werden. Fuer diesen Fall kann in der Kommandozeile
Pfad+Name des newcamd.conf Files und die Adapternummer angegeben werden (0-3).
"newcamd /etc/newcamdAdapter1.conf 1" startet zum Beispiel einen newcamd fuer
die zweite Karte im Rechner und nutzt /etc/newcamdAdapter1.conf als Konfigfile.
Angesprochen werden die einzelnen newcamd dann ueber /tmp/camd.socket0 bis
/tmp/camd.socket3 (siehe szap Patch).

Faq:

Question: On Dreambox cardserver never (or seldom) detects inserted cards.
I have to reboot box with cards inserted for cardserver to detect anything.
Answer: Early Dreambox mainboards have a design flaw, resistances R5003 and
R5007 have been fitted with 10 kOhm resistances instead of the correct 2.2 kOhm
resistances. You need to replace them both with the correct ones. You find them
just behind the card readers.

Question: Why is there no (or: Will there ever be) emu for Neotioncrypt porn
channels?
Answer: No. Those porn channels can be subscribed from every country, so bugger
off (maybe first take a look at newcamd policies at the top of this file)

Question: Why is the NDS support in betad only for BSkyB and Sky Italia? I
live in America/Australia and would like support for our local providers too.
Answer: Unfortunately all NDS cards from different providers use different
communication parameters (different ATRs, different baudrates, etc). We don't
have NDS cards from your provider, so we can't implement them. Also the EMM
handling seems to be different for different NDS systems. We can't make newcamd
support systems, we can't receive.

Question: Our Romanian Conax card doesn't work with cardserver, apparently the
ATR is different from other cards and cardserver doesn't recognize it.
Answer: We've actually read such postings on satellite tv related boards. While
it is nice, that you've noticed some difference, we never saw any posting
talking about what exactly the difference is. Without posting a log of the card
being used in a working cam or stb (and make sure to include all from ATR to
the first ECM and EMM being sent, but remove your card number), it's the same
problem as in the FAQ above. We don't have the card and without any logs we
surely can't and won't implement it.

Question: Can you add something like reverse lookup for users that is based on
DNS to verify the user is who he says he is?
Answer: No. Such a feature does not increase security whatsoever. Any user,
who can share his cardserver access account with other people, can just as
well share username/password of a dyndns account with other people. Since
those accounts are free, they can even create an extra account for that very
purpose. So, trying to check the identity of a user by doing a DNS lookup really
is useless, it just wastes network bandwidth.

Question: Can you create a client that is based on PC that drives Season
interface?
Answer: No. Why not? Because we don't personally use it. That's why we made the
protocol specification available. You can program such a client yourself, if you
need it, all the necessary information is available.

Question: After a connection to a card server is lost, I have to restart
newcamd to reestablish it. This sux. Do something about it!
Answer: No, we won't. YOU do something about it! There is camdcmd provided
in the official newcamd.zip distribution, the wanon command will do exactly
that, rebuild all the connections that are designated as "wan" in newcamd.conf
(cardserv.cfg, cardspider.cfg). Start using it! Go make a plugin if calling it
via telnet is too much to ask.

Question: But, I want it to reconnect automatically without user interaction.
Answer: That makes no sense. newcamd<->cardserver uses the tcp protocol,
which means, if a connection is lost, there is something seriously wrong with
your network between newcamd and the cardserver. So an immediate reconnect would
almost certainly fail. A reconnect attempt after say X minutes makes no sense
either, the user will have long zapped to another channel or attempted the
reconnect manually by then. And if you did record something unattended it
certainly makes no difference, if only X minutes or the whole remaining
part of the program are lost. The recording is screwed up either way.
Bottom line, there will be no automatic reconnect for direct newcamd to
cardserver connections.

Question: But, if I restart cardserver, I always have to restart newcamd as
well or use camdcmd to reconnect.
Answer: No, you don't. Setup reverse login for the cardserver<->newcamd
connection.

Question: You're a bunch of idiots, I still WANT my automatic reconnect.
Answer: Then use cardspider to bridge the connection that logs out all the
time. cardspider does attempt to reconnect to peers, but only after ALL peers
are lost (offline). It also uses udp protocol which means in bad internet
connections, you will loose only single control words, but not the connection,
the picture will come back after the communication between the peers works
again.

Question: If I connect a Phoenix interface to the serial port of my Dreambox
7020, the box won't boot any more, it always stops, the display reads
"*** SERIAL MODE ***".
Answer: We've tracked this behaviour to the 2nd stage bootloader, since its
source is available, we're sure, someone will patch it sooner or later

Frage: Gehen mit cardserver die neuen Premiere oder Dreamcrypt Karten?
Antwort: Nein. newcamd enthaelt auch weiterhin keinerlei Funktionen, die das
Entschluesseln von Premiere ohne gueltiges Abo ermoeglichen, also auch kein
Control Word Sharing ueber Internet fuer Premiere. Gleiches gilt auch fuer
Dreamcrypt. In der dbox2 werden die neuen Premiere Karten selbstverstaendlich
im normalen CAM unterstuetzt.

Frage: Wie kann ich dann mit der Dreambox oder einer DVB-S Karte und vdr mein
Premiere Abo nutzen?
Antwort: Es gibt eine spezielle betad Version, die die neuen Premiere Karten
unterstuetzt. Diese kommuniziert im Gegensatz zu cardserver nicht ueber
TCP/IP. Also auch hier kein Control Word Sharing ueber Internet.

Frage: Welche Kartentypen werden von betad unterstuetzt?
Antwort: Getestet wurde betad mit S01 und S02 Karten. Prinzipiell sollten alle
01er und 02er Typen funktionieren, also auch K01, K02, P01, P02, A01, A02.
betad ist nicht geeignet fuer die 03er Kartentypen S03, K03, P03, A03.

Frage: Kann ich mit Hilfe von betad und Multicam auch eine S01 (K01, P01, A01)
Karte an der dbox2 benutzen?
Antwort: Ja.

Frage: Ich habe zwei Premiere Abos mit unterschiedlichen Paketen. Kann ich diese
kombinieren?
Antwort: Ja. Mehrere betad auf unterschiedlichen seriellen Ports starten und
alle Server in newcamd.conf anmelden (uds 0, uds 1, ...). dbox2: Erste Karte
in dbox CAM einlegen, zweite Karte in Multicam mit betad.

Frage: Ich habe ein Premiere Abo und meiner Bekannter hat ebenfalls eins, beide
mit unterschiedlichen Paketen. Kann ich diese kombinieren?
Antwort: Nein, siehe "Gehen mit cardserver die neuen Premiere Karten?".

Frage: Wenn ich ein Phoenix an die serielle Schnittstelle anschliesse, bootet
die dbox2 nicht mehr, im Display sind die Inforamtionen vom Debug Modus und
volle Balkenzahl zu sehen.
Antwort: Das ist eine Debug Funktion des Beta Research Bootloaders. Wenn beim
Booten bestimmte Pegel an der seriellen Schnittstelle anliegen, wird der
Bootvorgang angehalten. Mir ist keine Abhilfe bekannt, ich empfehle daher den
Standby-Modus von Neutrino oder ein MultiCam, falls noch nicht vorhanden.

______________________________________________________________________________
recent text

Q: dbox2, multi camd, /proc/bus/gtx
A: Yes, we've removed support for /proc/bus/gtx indeed, but preventing any
multi camd solutions to work wasn't the intention for that decision. In
fact, we've had no idea that multi camds need /proc/bus/gtx to work, we've
never used this before. We've removed /proc/bus/gtx, because dbox2 images
have been providing /dev/dvb/adapter/ca1 for a while now and we consider it
the better solution, because it conforms to the Linux-TV API. However, if
you want to continue to use /proc/bus/gtx, you can write a libcamdio.so
library to do exactly that, output the control words to /proc/bus/gtx.
That's in fact the reason why all box-specific code was split from the main
newcamd binary, so people have an opportunity to use whatever special
configurations they need.

Q: Dreambox, nds channel decoding dropouts while recording
A: Yes, unfortunately, we must confirm this problem. We've been hoping, it's
just our box/hard drive that causes this, but apparently, it's not. We've
spend another weekend investigating this, but unfortunately there's simply
nothing we can do about it. The driver (both /dev/sci and also RS-232
unfortunately) starts eating bytes in longer nds card answers as soon as a
recording is started. An application like betad has no change to determine
any bytes that were lost in the driver, all it can do is reinitialize the
card, resend whatever message caused the problem and hope the result will be
ok this time around. Unfortunately, not even recording via nfs helps with
this problem, it seems the problem is not the hard drive itself, but the mere
fact that enigma's recording feature is being used. So, unless you can
convince someone at DMM who's responsible for the kernel/drivers to look into
this problem, you just have to live with it. You can try ngrab maybe to
record, we haven't tried that yet.

Q: Can you allow LAN sharing for nds, but not Internet?
A: No. For the simple reason that both is the same. We could of course make a
simple check for IP addresses for something, but that would be too easily
patchable. You can thank the idiots that patch and then distribute our stuff
despite we've ask nicely not do that.

Q: Communication errors with Via2.4 TPS card when sending ECM on i386
A: Well, we don't have this particular card, but we've tried two other Viaccess
cards on two different machines and had no problems. We would like to hear
from other people that have an original TPS Via2.4 card, if they encounter
the same problem. We do suspect however, that the original poster was trying
to use some other card (not original) that only emulates a TPS Via2.4 card.
Those we make no effort to support of course, because 1. you can use emu and
2. we don't want to support commercial hackers.

Q: ...gbox sharing protocol not available...but the internal cardspider
(spider<->spider) protocol is not available either, so why do you critise
gbox?
A: Well, the difference is, cardspider has a well-known camd client interface
that is available, gbox does not. The gbox critism was aimed at the fact,
that it isn't possible to participate in the gbox sharing network unless
you indeed use the gbox binary on one of the limited number of platforms,
where a gbox binary is available for. This is different with cardspider and
always has been, because you can use evocamd, mgcamd, Samsung 9500 machine,
some Windows DVB-S client, in fact any platform that someone cares to write
a client for, which is easily possible with the information available and
without the need to reverse engineer anything.



__________________________________________________________________________________

/var/tuxbox/config/newcamd/newcamd.conf
#
# newcamd mandatory settings
#
# Use emulator?
EMU = yes
# if both control word server and emulator keys are available for the
# channel, which method should be tried first?
PREFER_EMU = yes
# Autoupdate for Emu and Control Word Servers
# AU is always yes if there are betad UDS control word server
# connected to newcamd
AU = yes
#
# OSD
#
# number of seconds to show the newcamd OSD, works on enigma only
# 0 seconds -> OSD off
# 1 second -> show "Can't decode" messages only
OSD_TIMEOUT = 3
# Recent Enigma versions come with a new option "Use http authentication"
# in the Expert Setup menu. If this option is enabled, the Enigma web server
# requires all clients to authorize themselves with username (root) and
# password (usually dbox2 or dreambox). The following option tells newcamd
# about the authentication username and password to use for the web server
# in order to be able to display its on screen information.
OSD_WEB_LOGIN = root:dreambox
#
# newcamd debug options
#
# dumps all ca systems used by a channel on the console
SHOW_ALL_CA_SYSTEMS = no
# print debug messages about ECM handling
DEBUG_ECM = yes
# print debug messages about EMM handling
DEBUG_EMM = no
# print debug messages about Control Word Server (CWS)
DEBUG_CWS = yes
# print debug messages about dbox2 CAM (cam-alpha.bin)
DEBUG_CAM = yes
# hex dump of entire PAT
SHOW_PAT = no
# hex dump of entire PMT
SHOW_PMT = no
# hex dump of entire ECM
SHOW_ECM = no
# hex dump of entire CAT
SHOW_CAT = no
# hex dump of entire EMM (AU)
SHOW_EMM = no
# show network ECM messages being sent and received from/to the cardservers
SHOW_CWS_ECM = no
# show network EMM messages being sent and received from/to the cardservers
SHOW_CWS_EMM = no
# hex dump of EMMs with wrong signature
EMM_REPORT_WRONG_SIG = no
#
# newcamd optional settings
#
# Delay between reception of new control word and writing them into
# the CSA registers
# this is a default, can be changed for each individual key in keylist
DEFAULT_CW_DELAY = 0
# reload config on every channel zap
RELOAD_CONFIG_ON_ZAP = yes
# reload keylist on every channel zap
RELOAD_KEYLIST_ON_ZAP = no
# write osd ca info to file
CA_INFO_FILE = /tmp/cainfo.txt
#
# newcamd mandatory settings for control word servers (cws)
#
# Cardserver list
#
# <14 byte triple-des key in hex> [noecm]
#
# wan connections will be dropped and rebuild if newcamd is told so by camdcmd
# (see admin options)
#
# If the last word in the CWS line is noecm, newcamd will not attempt to send
# any ecms to that card, it will only send EMMs (AU) if userid is 1. Useful if
# you want to merge several cards of one provider into one port using
# cardspider.
#
# hostname = uds to use betad, port is the serial port in that case
#
# CWS = uds 1 dummy dummy
# CWS = linux.domain.com 10000 dummy2 dummy2 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
# CWS = 127.0.0.1 10000 dummy3 dummy3 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
CWS = uds 0 local local
CWS = 127.0.0.1 10001 local local 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
#
# newcamd optional settings for using control word servers (cws)
#
# Timeout for cardserver login in 100ms
CWS_CONNECT_TIMEOUT = 20
# Port to listen for incoming cardserver connections (reverse login)
# and/or admin connections
CWS_INCOMING_PORT = 12000
# Port to get a list of all connected cardservers, just telnet to it
CWS_DEBUG_PORT = 12001
# send keep alive messages to servers to keep connections from dying by
# unreasonable router NAT timeouts, make sure all cardservers/spiders you
# conntect to are v5.25 or newer, otherwise you'll loose connection to them,
# if set to yes
# seems this feature is commonly misunderstood, it only keeps connections
# open even if no data packets are using it for while (NAT routers tend to
# forget about established tcp connections when they are inactive), it is
# NOT to automatically reconnect to servers, see also Q&A in readme.txt
CWS_KEEPALIVE = no
#
# newcamd admin control options
# (incoming port is the same as CWS_INCOMING_PORT)
#
# <14 byte des key>#
ADMIN_PASSWORD = test 00 00 00 00 00 00 00 00 00 00 00 00 00 00

_____________________________________________________________________________

#
# /var/tuxbox/config/newcamd/cardserv.cfg
#
# The new cardserver can run several cards at once. It detects cards being
# inserted and removed from configured card readers. Every card uses its
# own TCP port to listen for incoming client connections. Card readers, that
# are configured, but where no card is inserted, will not be initialized.
# Supported are both serial ports of dbox2 (SERIAL_PORT = 0, 1), Dreambox
# cardreaders (SERIAL_PORT = 0 (upper), SERIAL_PORT = 1 (lower)) and the
# Dreambox's serial port (SERIAL_PORT = 2). Supported CA systems are Seca,
# Viaccess, Irdeto, Viasat-NDS, Conax, Cryptoworks and Nagra1. Irdeto cards (or
# some of them) probably won't work in the Dreambox cardreaders, due to driver
# issues. In fact, the only Irdeto cards, that were successfully tested in
# Dreambox cardreaders, are the new Premiere cards and I2 cards. Premiere cards
# will ONLY work with betad (no sharing allowed for Premiere). Betad is a small
# subset of cardserver, using Unix Domain Sockets to communicate with newcamd.
# Also betad will only understand a very small subset of the options described
# here. Each instance of betad will only be able to serve exactly one card,
# while one instance of cardserver can serve multiple cards at the same time.
# Therefore betad is not able to handle the sc8in1. Betad configuration file is
# called betad.cfg. There is no special manual for betad.cfg, we everyone will
# be able to figure out, which cardserv.cfg options, described below, will also
# work in betad.cfg and which won't.
# Configuration consists of global (all cards) and local (single card) options.
# betad.cfg will of course only have one local (single card) section. The
# global section is located at the beginning of the file before the first
# SERIAL_PORT option. The SERIAL_PORT option is a "divider" between the global
# and the local sections, it also is a divider between options for different
# cards. The SC8IN1_SLOT options is a similar divider, but it divides only
# between different cards in the sc8in1 cam and the first SC8IN1_SLOT options
# has to preceeded by a SERIAL_PORT option. Some options may appear in the
# global as well as in local sections, in the case the option in the global
# section is a default for all cards, that don't have the same option in their
# particular local section. Options that appear in an incorrect section will
# be rejected with a "parse error" and the cardserver won't start. Betad will
# also reject all cardserver options, that aren't necessary or allowed for its
# operation. betad will understand the following options, of used correctly:
# SERIAL_PORT, BAUDRATE, USER, PARITY, CARD_DETECT_INVERT, CARD_DETECT_BIT and
# IGNORE_CARD_DETECT_SWITCH.
#
# You can also start cardserver multiple times by specifying different cfg
# files in the command line. Use only the name of the cfg file, the path of the
# file is always fixed to /var/tuxbox/config (dbox2, Dreambox) or /etc (i386)
#
# (G) = global section only
# (L) = local section only
# (A) = all sections
#
# 14 byte des key for the connection (A)
# DESKEY = 01 02 03 04 05 06 07 08 09 10 11 12 13 14
#
# id name of the cardserver (G)
# SERVER_NAME = cardserv
#
# debug port, lists all cards and their open connections (G)
# just telnet to it
# DEBUG_PORT = 12002
#
# entitlement port, lists entitlements of Seca, Conax and Cryptoworks cards
# just telnet to it
# ENTITLEMENT_PORT = 12003
#
# optional admin options (G)
# port for incoming camdcmd connections
# password and 14 byte des key for admin connections
# ADMIN_PORT = 12004
# ADMIN_PASSWORD = secret 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#
# Userlist (A)
# there can be multiple users, user 1 always do AU for the card
# additional AU users can be defined by adding "au" at the end of the USER line
# keep in mind that your card number will be sent to all AU users
# global user preceed local users in terms of userid
# lan/wan/spider gives the type of connection
# lan = local area network
# wan = wide area network (those connections can be rebuild with camdcmd wanon)
# connections from cardspider to "wan" declared cards in cardserver are not
# possible
# spider = acts like wan, but allows connections from cardspider
# (A)
# everything starting from is optional (reverse login is optional)
# USER = dummy dummy lan dbox2 12000
# two examples for additional AU users
# USER = dummy2 dummy2 lan dbox2 12000 au
# USER = dummy3 dummy3 au
#
# CLIENT_CONNECT_TIMEOUT (in 100ms) (G)
# max time to wait for a login at a newcamd client
# CLIENT_CONNECT_TIMEOUT = 20
#
# debug options (A) - show network and card init, ecm and emm packages
# DEBUG_INIT = no
# DEBUG_NET = no
# DEBUG_ECM = no
# DEBUG_EMM = no
#
# Serial Port (Phoenix/Multicam) (Section divider)
# The first SERIAL_PORT options ends the global section
# On DM7000 SERIAL_PORT = 0 is the upper card slot,
# SERIAL_PORT = 1 is the lower card slot and 2 is the
# actual serial port.
# On DM500 SERIAL_PORT = 1 is the card slot, 2 is the
# serial port.
# All numbers SERIAL_PORT = 3 and higher on Dreambox will use /dev/usb/tts/X
# devices for Phoenix on USB-to-RS232 adapters. This feature depends on a
# driver for your particular SB->RS232 adapter being insmod into the kernel of
# your image, your particular USB->RS232 driver supporting RS232 handshaking
# signal generation and on the particular card used. Basically this feature
# should be considered unstable and for advanced users only. The BAUDRATE option
# is not available for SERIAL_PORT = 3 and higher on Dreambox and would be
# rejected with a parse error
# SERIAL_PORT = begins a single card's local section
# SERIAL_PORT = 0
#
# Serial Port (sc8in1) (section devider)
# SERIAL_PORT = sc8in1 begins a sc8in1 description
# SC8IN1_SLOT must follow immediately to start a local section
# SERIAL_PORT = 1 sc8in1
#
# sc8in1 slot (sc8in1 sub section divider)
# valid slots are 0-7, 0 being the left most connector on the sc8in1
# SC8IN1_SLOT = 1
#
# Parity - serial communication parameter for the smartcard (L)
# The default is on, which is correct for all cards except Irdeto
# This is for reading the ATR only, after the ATR has been recognized by
# cardserver, it automatically switches to the correct communication parameters
# Some Irdeto cards work with PARITY = on also, some need PARTIY = off, so just
# test it. Dreambox cardreaders don't need this option, so it will be rejected
# for SERIAL_PORT = 0, 1 on Dreambox
# PARITY = on
#
# CARD_DETECT_BIT (L)
# different Phoenix readers sometimes use different serial lines to detect an
# inserted card, here you can specify, which line cardserver should use for a
# particular card. Possible values are CTS, DCD and DSR
# Default is CTS for sc8in1 and dbox2 serport 1, DCD otherwise
# Will be rejected for SERIAL_PORT = 0, 1 on Dreambox (internal cardreaders)
# CARD_DETECT_BIT = DCD
#
# Baudrate (L) (DBOX2/DREAMBOX versions ONLY!)
# Baudrate selection for the dbox2/Dreambox server. Allows to run 6 MHz with
# 3.579 MHz crystal and (theoretically) the other way around.
# Keep in mind, running anything but Irdeto cards at 6 MHz is overclocking!!!
# Irdeto card at 3.57 MHz: BAUDRATE = 5727
# other card at 6 MHz: BAUDRATE = 16128
# Default is 9622, which is correct for all except Irdeto cards at 3.579 MHz
# 3579545 Hz / 372 = 9622 bit/s (see iso 7816)
# This option will be rejected on I386 and on Dreambox ports other than
# SERIAL_PORT = 2
# BAUDRATE = 9622
#
# TCP port (L) - the port listening for connections for a particular card
# TCP_PORT = 2000
#
# EMM options - block EMM-U, EMM-G or EMM-S (A)
# EMM-G = no
# EMM-S = no
# EMM-U = no
#
# For iso cardreaders that close the card switch contact instead of opening it,
# when a card is inserted (L)
# Will be rejected for SERIAL_PORT = 0, 1 on Dreambox (internal cardreaders)
# CARD_DETECT_INVERT = yes
#
# Disable Pin (L) Seca only
# suppress all pin enter requests on Seca cards
# be very careful with this feature, if you have ordered PPV events or have
# prepaid Jetons on your card, if this is enabled, cardserver will use them
# up on any ppv event without ever asking
# DISABLE_PIN = yes
#
# Special features (only for some cards) (L)
# SPECIAL_FEATURES = no
#
# Exclude services - Some providers offer a PPV preview by allowing a card
# to decrypt a certain number of ECMs of each PPV event before it has to be
# bought. Sharing such a card with other people allows them to "steal" this
# PPV preview. With this option, you can tell cardserver to not ask the card
# to decrypt ECMs for certain services, except if user 1 (the EMM user) asks
# for them. Each blocked service has to be listed with its service id.
# A service id is a 16-bit number and has to be given in hex.
# camdcmd offers a possibility to change the list of blocked services without
# restarting cardserver (if for example you have bought a PPV event and now
# want to share it).
#
# Block single service (L)
# EXCLUDE_SERVICE = 13a9
# You can also block a range of service ids, the following blocks all services
# from 02be to 02c8
# EXCLUDE_SERVICE_MULTIPLE = 02be:02c8
#
# Boxid (for Viasat-NDS cards only) (L)
# 10-digit serial number of the STB, your Viasat card is married to
# you find this serial number on your original Viasat STB in the following menu:
# Setup->Decoder information->STB Identifier
# take this number and remove the last digit
# take the first (left-most) 10 digits, omit the last (right-most) digit
# BOXID = 0000000000
#
# Boxkey (for Nagra1 cards only) (L)
# 8 byte des boxkey of your nagra smartcard. This boxkey is needed for proper
# use of your card, otherwise you'll get incorrect control words
# BOXKEY = 11 22 33 44 55 66 77 88
#
# Example
#
DESKEY = 01 02 03 04 05 06 07 08 09 10 11 12 13 14
SERVER_NAME = cardserv
DEBUG_PORT = 14000
ENTITLEMENT_PORT = 14001
ADMIN_PORT = 14002
ADMIN_PASSWORD = secret 00 00 00 00 00 00 00 00 00 00 00 00 00 00
USER = local local lan 127.0.0.1 12000
USER = spider spider lan 127.0.0.1 15003
DEBUG_INIT = no
DEBUG_NET = no
DEBUG_ECM = no
DEBUG_EMM = no
#SERIAL_PORT = 0
#TCP_PORT = 10000
SERIAL_PORT = 1
TCP_PORT = 10001


________________________________________________________________________________


#
# /var/tuxbox/config/newcamd/cardspider.cfg
#
# Cardspider is an advanced card sharing solution for newcamd. It implements a
# decentralised network of card servers, through which ECM requests from clients
# are forwarded until a suitable card is found.
#
# With cardspider you can define so called "virtual cards" (NETWORK_CARD),
# which will look to newcamd just like local cardservers with real cards. Then
# you define neighbouring cardspiders (PEER) which will be your links to the
# cardspider network. Last but not least you will have to give your cardspider
# access to at least one of your own cards, that will be shared to other people
# in the cardspider network. You will not be able to obtain any control words
# from the cardspider network, unless you share at least one card of your own.
# If cardspider finds no local cards to share to the network, it will act as
# forwarder only.
#
# Supported CA-Systems are: Seca, Viaccess, Irdeto, Viasat-NDS, Conax,
# Cryptoworks and Nagravision1
#
# The config file is made up of a global section and several local sections,
# just as the config file of cardserver is. The NETWORK_CARD option acts as
# the divider between global and local or two local sections.
#
# You can also start cardspider multiple times by specifying different cfg
# files in the command line. Use only the name of the cfg file, the path of the
# file is always fixed to /var/tuxbox/config (dbox2, Dreambox) or /etc (i386)
#
# The maximum length of each line in this file is 256 Byte. You should get a
# parse error, if you exceed it.
#
# (G) = global section only
# (L) = local section only
# (A) = all sections
#
# SERVER_NAME - This name identifies your cardspider to all newcamd clients,
# (G) cardservers and neighbouring cardspiders. The name must be
# different from the names of all neighbouring cardspiders, you
# connect to.
#
SERVER_NAME = defaultSpider
#
# DESKEY - The deskey to be used in communication with newcamd clients
# (A)
#
DESKEY = 01 02 03 04 05 06 07 08 09 10 11 12 13 14
#
# CWS - This connects to your real cards. Remember you must share at least one
# (G) card to access other cards over the cardspider network
# <14 byte triple-des key in hex> ::...
# for explanation of the optional sid parameters see avoidDropoutsHowto.txt
#
CWS = 127.0.0.1 10001 spider spider 01 02 03 04 05 06 07 08 09 10 11 12 13 14 lan cardserv
#
# send keep alive messages to servers to keep connections from dying by
# unreasonable router NAT timeouts, make sure all cardservers/spiders you
# conntect to are v5.22 or newer, otherwise you'll loose connection to them,
# if set to yes
#
CWS_KEEPALIVE = no
#
# USER - userlist for cardspider's virtual cards
# (A)
# #
USER = local local lan dbox2 12000
#
# PEER_INCOMING_PORT - This will be the port, neighbouring cardspiders must use
# (G) to connect to yours. You must enable port forwarding on
# your internet router for this port for both tcp and udp
# protocols
#
PEER_INCOMING_PORT = 15000
#
# DEBUG_PORT - port to connect to with the telnet command to obtain a status
# (G) report from cardspider
#
DEBUG_PORT = 15001
#
# CARD_SCAN_PORT - port to connect to with the telnet command to scan the
# cardspider network for available provider idents. The scan
# will take 15 seconds.
#
CARD_SCAN_PORT = 15002
#
# CWS_INCOMING_PORT - Incoming port for reverse connections from cardserver
# (G) also used for admin connections
#
CWS_INCOMING_PORT = 15003
#
# SID_SCAN_PORT - port to connect to with the telnet command to get a list of
# caid:provid:sid of all channels decoding was requested for
# on the spider network in the last 30 sec
#
SID_SCAN_PORT = 15004
#
# ADMIN_PASSWORD - password and 14 byte des key for admin connections
# (G)
#
ADMIN_PASSWORD = secret 00 00 00 00 00 00 00 00 00 00 00 00 00 00
#
# PEER - neighbouring cardspiders to connect to directly. You need at least one
# (G) online connection to a neighbouring cardspider to be connected to the
# network. There is however no need, to connect to all other cardspiders
# on the network directly, because each cardspider will forward your
# requests to all of its neighbours and so forth. To many peers can
# actually be harmful to the network, because it increases network
# traffic unnecessarily. The ideal number of neighbours depends on how
# reliable your neighbours are online. 3 neighbours should usually be
# enough.
# #
# PEER = somewhere.online.net 15000 otherSpider password 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e
#
# NETWORK_CARD - this concludes the global section and starts the first local
# section, it also divides two local sections from eachother.
# (section It will define a virtual card (caid + provider id-s), newcamd
# divider) can connect to. One important thing to understand about the
# concept of virtual cards is that what you define here does not
# necessarily match any real cards that are present on the
# cardspider network. Once you are connected to the network, you
# can however use the CARD_SCAN_DEBUG port to "ask" the network
# about what providers are currently present. Basically, what
# this NETWORK_CARD option is for, is to provide a point of
# access for a newcamd client to the cardspider network. The caid
# and provider id-s, you define for your virtual cards will just
# tell newcamd clients, what ECMs to send to cardspider.
#
# Examples:
#
# Seca2 Digital+, Cyfra+, Sky Italia
# NETWORK_CARD = 0100:000064:000065:000070:000071:000072
#
# Viaccess NTV+, NTVint, HRT
# NETWORK_CARD = 0500:01a400:01ac00:020a00
#
# Irdeto Pink+
# NETWORK_CARD = 0602:000000:000001
#
# Conax
# NETWORK_CARD = 0b00:000000
#
# Cryptoworks Czechlink (black card)
# NETWORK_CARD = 0d01:000054
#
# Cryptoworks UPC Direct
# NETWORK_CARD = 0d02:00008c
#
# Cryptoworks Slovaklink + Digiturk
# NETWORK_CARD = 0d03:000020:0000c0:0000c4
#
#
# TCP_PORT - tcp port where this virtual card is listening for incoming
# (L) connections from newcamd
#
# TCP_PORT = 4000
#
# ECM_TIMEOUT - number of seconds, after which, if no control words from the
# (L) cardspider network are received, cardspider will give a
# "can't decode" answer to the newcamd clients. The default
# (in maximum value) is 8 seconds.
#
# ECM_TIMEOUT = 8
#
# USE_ONLY_CHANID - this is a help option to speed things up for Irdeto
# (L) providers. Irdeto has the unpleasant "feature" that multiple
# channel id's to access a channel are not given within the
# same ECM as in all other CA Systems, but in multiple ECMs.
# Since cardspider never gives a negative answer, you have to
# wait the whole timeout (up to 8 seconds), before the next
# ECM is being sent, making zapping within such providers a
# big pain in the butt. With this option, you can enter
# chanid/key combinations and, if you do so, only ECMs
# matching one of the given chanid/key combination will be
# sent out to the cardspider network. So, if you know the
# correct chanid/key combination valid for the card being
# used, you can setup cardspider so picture will appear
# straight away. It's possible, this option has to be
# changed from time to time, if the provider changes keys or
# his chanid structure.
#
# The following example for Bulgarian package on 39E forwards only ECMs with
# channel id 0003 and keys 04 or 06
# Multiple lines can be added in each card section, if you want to enter more
# combinations as fit into one 256 byte line.
#
# USE_ONLY_CHANID = 00030004:00030006

______________________________________________________________________________
Camdcmd.cfg

# camdcmd can be used to trigger or shutdown cardserver connections for example
# when you dialup or drop Internet connection (put it in /etc/ppp/ip-up or
# /etc/ppp/ip-down) on your Internet router. Also for shutting down / restarting
# cardspider peer and wan connections.
#
# It also can be used to add/remove service id's of services excluded from card
# sharing, while cardserver is in operation.
#
# camdcmd wanon - restart all connections designated as wan in newcamd.conf,
# cardserv.cfg and cardspider.cfg & all peer connections of
# cardspider
# camdcmd wanoff - drop all connections designated as wan in newcamd.conf,
# cardserv.cfg and cardspider.cfg & all peer connections of
# cardspider
# camdcmd service - toggle exclusion from sharing for
# service id for the card listing on port
# camdcmd swap - swap the service id exclusion list between two
# cards
#
# This configfile has to be copied to /var/tuxbox/config/camdcmd.cfg on dbox2
# or Dreambox or to /etc/camdcmd.cfg on i386 PCs. It lists the newcamd clients
# cardserver's and cardspider's, you want to issue wanon/off or service commands
# to. You can also use multiple config file, specifying the config file to use
# on the commandline: camdcmd -c someconf.cfg wanon
# = host port password 14-byte-des-key
# Remember, for wanon/wanoff commands, camdcmd has to be copied to your Internet
# router, NOT to the box or PC running newcamd or cardserver (unless both are
# one and the same of course).
# For the service command, camdcmd can be run from any host.
#
newcamd = 127.0.0.1 12000 test 00 00 00 00 00 00 00 00 00 00 00 00 00 00
cws = 127.0.0.1 14002 secret 00 00 00 00 00 00 00 00 00 00 00 00 00 00
spider = 127.0.0.1 15003 secret 00 00 00 00 00 00 00 00 00 00 00 00 00 00

______________________________________________________________________________



Fortsättning i