Hacking Blocking 9.3.0-21 with your Wi-Fi router

[bobtheglob101]

Hello guys, I have a stupid router which only allows me to do filter with "keywords". For example I add nintendo to keyword list and it blocks every url with nintendo domain. For example I set this now and I can't access neither nintendo.fr or co.uk which doesn't bother me but I wonder if it will work on my N3DS. Is there a way to test its functionality on my computer? Ah also I can succesfuly ping nintendo servers but I can't connect them using my browser.

The most successful way for me to test the blocking is to visit https://nus.cdn.c.shop.nintendowifi.net in your browser on your PC. If you don't get anything then try connecting your N3DS to the Internet. Make sure you don't lounge around on the home menu or put the 3DS to sleep and try opening the eShop. If the eShop is saying you need an update that means the block didn't work and you'll need to shut off your 3DS immediately. If you get an error code you're all set and the block should be all good

 

[ground]

do you still recieve de update if you press"firmware update"in the system settings app?

 

[bobtheglob101]

do you still recieve de update if you press"firmware update"in the system settings app?

If you have the block set up you won't be able to do that and it will just return an error code.

 

[ground]

If you have the block set up you won't be able to do that and it will just return an error code.

ok strange, my computer cant access nus, but my 3ds can still download the updates, puzzle time

 

[TidusWulf]

ok strange, my computer cant access nus, but my 3ds can still download the updates, puzzle time

Might be a useragent string that blocks NUS access from PC.

 

[ground]

Might be a useragent string that blocks NUS access from PC.

nah, it works if i remove the block

Well, i think i got it working. But if I start the update i get the black error screen, is that normal? (i tested it on emunand of course)

edit2: but i still get the update nag

 

[kheldar]

Is there a way to test its functionality without risking the nag? Also do these servers include EU servers?

 

[bobtheglob101]

Is there a way to test its functionality without risking the nag? Also do these servers include EU servers?

Least risky way is to test on your PC by visiting the URL in the browser.
And..

The URL's are the same for all regions.

 

[kheldar]

Least risky way is to test on your PC by visiting the URL in the browser.
And..

I tested them in the browser. Opendns is blocking them. Now the question is are these urls the ones that I'm supposed to block for my region? I'm currently residing in Turkey and I don't know to which update servers my 3ds connects.

c.shop.nintendowifi.net
ccs.wup.shop.nintendo.net
ecs.wup.shop.nintendo.net
ias.wup.shop.nintendo.net
nintendo.net
nus.c.shop.nintendowifi.net
nus.cdn.c.shop.nintendowifi.net
nus.cdn.shop.wii.com
nus.cdn.wup.shop.nintendo.net
nus.wup.shop.nintendo.net
tagaya.wup.shop.nintendo.net

 

[bobtheglob101]

I tested them in the browser. Opendns is blocking them. Now the question is are these urls the ones that I'm supposed to block for my region? I'm currently residing in Turkey and I don't know to which update servers my 3ds connects.

Like I said, it doesn't matter where you're residing or what region your 3DS is under, it is the same for all regions. Your list will work, but its a bit too overkill. Really the only two URL's you'll need to block is nus.c.shop.nintendowifi.net (URL to check if an update is available) and nus.cdn.c.shop.nintendowifi.net (URL to download the update). I actually have a couple of unnecessary URL's in my block list as well, but I'm just paranoid

 

[kheldar]

Like I said, it doesn't matter where you're residing or what region your 3DS is under, it is the same for all regions. Your list will work, but its a bit too overkill. Really the only two URL's you'll need to block is nus.c.shop.nintendowifi.net (URL to check if an update is available) and nus.cdn.c.shop.nintendowifi.net (URL to download the update). I actually have a couple of unnecessary URL's in my block list as well, but I'm just paranoid

sorry man I missed that part saying the update servers are all the same. It thought it was your signature and didn't even bother to read xD Anyway thanks for your response! I'll try it tonight

 

[Pablo007]

So I set up opendns --- it seems my fritz.box does not get an new ip when i reconnect the box, perhaps i have a static one? I put in the domains, configured the nameservers on my laptop and the domain "https://nus.cdn.c.shop.nintendowifi.net " gets perfectly blocked. If I use ping:~$ ping nintendo.net

PING nintendo.net (67.215.65.131) 56(84) bytes of data.
64 bytes from hit-block.opendns.com (67.215.65.131): icmp_seq=1 ttl=57 time=32.4 ms
64 bytes from hit-block.opendns.com (67.215.65.131): icmp_seq=2 ttl=57 time=45.8 ms
64 bytes from hit-block.opendns.com (67.215.65.131): icmp_seq=3 ttl=57 time=39.5 ms

So looks fine, right? So only thing thats left: checking if I really have a static ip. If not, I hope setting up dynamic-dns-updates via dns-o-matic is not so hard to do. Just waiting for a new ip, if there are dynamic one. Thanks for your help.

 

[Pablo007]

Just one more question: there is no need to put in opendns nameservers in my router? It is enough to have always the actual ip in opendns and having the opendns-nameservers in the 3ds internet-connection-config, right? I ask because I cant change the nameservers in my router-config.

 

[bobtheglob101]

Just one more question: there is no need to put in opendns nameservers in my router? It is enough to have always the actual ip in opendns and having the opendns-nameservers in the 3ds internet-connection-config, right? I ask because I cant change the nameservers in my router-config.

It's perfectly fine having just the 3DS point to OpenDNS servers as long as the 3DS has the same public IP address you have setup on OpenDNS

 

[Pablo007]

Spoiler

well fine. Whats with streetpass and spotpass and all These things? Arent they also giving Users Firmware Updates if WiFi is enabled? is this also blocking Nintendo Zone? I heard that a Lot of people receive their Updates there ...

 

[bobtheglob101]

Spoiler

well fine. Whats with streetpass and spotpass and all These things? Arent they also giving Users Firmware Updates if WiFi is enabled? is this also blocking Nintendo Zone? I heard that a Lot of people receive their Updates there ...

StreetPass is just local wireless (3DS to 3DS) and SpotPass is where you get stuff over the internet. Since you have the update servers blocked you won't be getting any update nags or any firmware updates downloaded to your 3DS so you don't need to worry about SpotPass. I did get a SpotPass notification about a new system update being available a week ago and that scared me a bit because I thought it went through the block and downloaded the update but turns out nothing was downloaded and I got no nag. And no, this does not block Nintendo Zones from giving you the nag so I'd be very careful about bringing the 3DS to McDonalds or something. In fact I'd disable wireless communication before going around town (although this does remove StreetPass abilities as well )

 

[aos10]

bumb

this thread could help you for the new update of gateway

 

[4scarrs]

bumb

this thread could help you for the new update of gateway

I want to block just the update and not the eshop. I found in another thread the following i am confused as to what i should do now

The essentials:

nus.cdn.c.shop.nintendowifi.net (http) (Where the update content is hosted)
nus.c.shop.nintendowifi.net (https) (Where updates are checked)
cp3s-auth.c.shop.nintendowifi.net (https) (eShop)


Overkill (All https):

cp3s-auth.c.shop.nintendowifi.net
ecs.c.shop.nintendowifi.net
cp3s.cdn.nintendowifi.net
npdl.cdn.nintendowifi.net
cas.c.shop.nintendowifi.net
eou.cdn.nintendowifi.net
pls.c.shop.nintendowifi.net
npul.c.app.nintendowifi.net

 

[bobtheglob101]

I want to block just the update and not the eshop. I found in another thread the following i am confused as to what i should do now

The essentials:

nus.cdn.c.shop.nintendowifi.net (http) (Where the update content is hosted)
nus.c.shop.nintendowifi.net (https) (Where updates are checked)
cp3s-auth.c.shop.nintendowifi.net (https) (eShop)


Overkill (All https):

cp3s-auth.c.shop.nintendowifi.net
ecs.c.shop.nintendowifi.net
cp3s.cdn.nintendowifi.net
npdl.cdn.nintendowifi.net
cas.c.shop.nintendowifi.net
eou.cdn.nintendowifi.net
pls.c.shop.nintendowifi.net
npul.c.app.nintendowifi.net

Unfortunately you can't block updates without blocking eShop as well. The eShop will check for a newer version and will force you to update if you aren't and will refuse to work if it can't contact the update servers.

 

[3DSXLGamer]

Just wanted chime in and say that the dd-wrt way works flawlessly,(using linksys wrt54g v2) currently at school but does anyone know if you can access the pokemon event for ruby/sapphire even with these ports blocked? I'll try once I get back if nobody knows and report back with findings.