Static IP address for home security?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Static IP address for home security?

1 | 2 | 3 | 4

48 posts

Geek

#1236383 12-Feb-2015 11:01

freitasm: Do you need remote access? Do you have a NAS or PC at home that can receive remote desktop connections via Chrome Remote Desktop, TeamViewer, etc?

Use that instead. Do not open your ports to these devices.

I'm sorry that I don't know the answer to this. I have an HP Touchsmart 520 PC and I've just googled the specs, but I don't know what I'm looking for.
I think we do want remote access anyway, as currently we have to drive home to check if the alarm goes off - which is 30kms and can take an hour in Auckland traffic - and so far, they've all been false alarms. We just wanted to be able to look around the perimeter of the house via the cameras and know whether there was anybody going in or out.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1236384 12-Feb-2015 11:02

Considering you probably know more about networking than him you could always just try installing your own cameras. You can get Dahua outdoor 3MP IR cameras (that will be vastly superior to anything analogue) for about US$90 each and a NVR and HDD will all cost about the same, so for around US$500 - $700 depending on the hardware you choose, and another NZ$100 - $150 for a HDD you'll have a fantastic 4 camera IP system with NVR. If you have Ethernet cabling (or can run it) it's a pretty straight forward plug and play process.

qyiet

454 posts

Ultimate Geek

Trusted

#1236389 12-Feb-2015 11:09

sbiddle: Any reason why you're still looking at analogue cameras? IP kit is so vastly superior and the pricing is now so cheap.. But maybe your security guy simply doesn't know enough about IP to want to touch it.

I'd second this question. I'm a fan of the Ubiquity gear which you can get starting at about $150/camera. If you have a spare PC you can use that as the NVR for no additional cost, but otherwise you can get a preconfigured one for $500. The downsides of the UBNT stuff is the software that comes with it only works with UBNT stuff. No mix and match. There are also higher quality cameras out there, but usually with an associated price tag.

"unless I was operating a high-risk business like a bank or hospital, a VPN is ridiculous"

Unless you don't care about anyone anywhere in the world looking through your cameras/using your data whenever they want then a VPN is ridiculous. Port forwards lower the security to whatever you forward them to can manage, usually not much.

Warning: reality may differ from above post

ShortyNZ

48 posts

Geek

#1236392 12-Feb-2015 11:13

sbiddle: Considering you probably know more about networking than him you could always just try installing your own cameras. You can get Dahua outdoor 3MP IR cameras (that will be vastly superior to anything analogue) for about US$90 each and a NVR and HDD will all cost about the same, so for around US$500 - $700 depending on the hardware you choose, and another NZ$100 - $150 for a HDD you'll have a fantastic 4 camera IP system with NVR. If you have Ethernet cabling (or can run it) it's a pretty straight forward plug and play process.

Haha - I have trouble even asking the right questions and understanding the answers - I don't think we are remotely capable! My husband doesn't understand much more about it than I do, either. But thanks for the specifics - perhaps I can find someone who could supply these and install them for us. I will see how I get on when I ring around.

And at least now I (think) I have avoided the $20/month static ip address and dodgy camera over the internet thing - it's all been very worthwhile

qyiet

454 posts

Ultimate Geek

Trusted

#1236396 12-Feb-2015 11:16

ShortyNZ:
freitasm: Do you need remote access? Do you have a NAS or PC at home that can receive remote desktop connections via Chrome Remote Desktop, TeamViewer, etc

I'm sorry that I don't know the answer to this. I have an HP Touchsmart 520 PC....

If you leave that PC running you can install one of the pieces of software that freitasm mentioned then use that as your window in without having to port forward. Teamviewer lets you remote control your PC from another PC/tablet/cellphone.

So you could do a link like Cellphone --> HP Touchsmart 520 --> NVR to check on your cameras.

Warning: reality may differ from above post

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1236403 12-Feb-2015 11:27

qyiet:
Unless you don't care about anyone anywhere in the world looking through your cameras/using your data whenever they want then a VPN is ridiculous. Port forwards lower the security to whatever you forward them to can manage, usually not much.

The port forward risk isn't because of the port forward per se, it's because of the dodgy Chinese hardware - the Hikvision IP cameras and NVRs have documented backdoors with older firmware. This has allowed anybody to access them, and compromise the NVRs with malware which became a big issue last year when massive numbers of Hikvision NVRs were used to mine bitcoins.

The fact the security installer doesn't understand what a VPN is means they're probably unlikely to understand the risks and/or update the firmware!

ShortyNZ

48 posts

Geek

#1236472 12-Feb-2015 12:19

qyiet:
ShortyNZ:
freitasm: Do you need remote access? Do you have a NAS or PC at home that can receive remote desktop connections via Chrome Remote Desktop, TeamViewer, etc

I'm sorry that I don't know the answer to this. I have an HP Touchsmart 520 PC....

If you leave that PC running you can install one of the pieces of software that freitasm mentioned then use that as your window in without having to port forward. Teamviewer lets you remote control your PC from another PC/tablet/cellphone.

So you could do a link like Cellphone --> HP Touchsmart 520 --> NVR to check on your cameras.

Oh - that's pure brilliance!
That sounds great - I will do some more homework.
Thanks.

Sharesies kids

Free kids accounts - trade shares and funds (NZ, US) with Sharesies (affiliate link).

qyiet

454 posts

Ultimate Geek

Trusted

#1236525 12-Feb-2015 13:11

sbiddle:
qyiet: ... Port forwards lower the security to whatever you forward them to can manage, usually not much...

The port forward risk isn't because of the port forward per se, it's because of the dodgy Chinese hardware ... massive numbers of Hikvision NVRs were used to mine bitcoins.

Yeah I was trying to convey that. But I was unaware that some of them were so badly configed that they'd been 'borrowed' by bitcoin miners.. that's pretty solidly broken and kind of funny.

Warning: reality may differ from above post

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1236564 12-Feb-2015 14:03

qyiet:
sbiddle:
qyiet: ... Port forwards lower the security to whatever you forward them to can manage, usually not much...

The port forward risk isn't because of the port forward per se, it's because of the dodgy Chinese hardware ... massive numbers of Hikvision NVRs were used to mine bitcoins.
Yeah I was trying to convey that. But I was unaware that some of them were so badly configed that they'd been 'borrowed' by bitcoin miners.. that's pretty solidly broken and kind of funny.

People also tend to forget that if you create a simple port forward it's not going to take long to appear on Shodan!

ShortyNZ

48 posts

Geek

#1273342 30-Mar-2015 12:12

Hello again

Just an update and one more question please.

After much research and contacting various security companies, I did find one that I was happy with. He was very knowledgeable and he seemed to tick all the boxes in terms of what I had learnt via this forum.
I was surprised how hostile or patronising some of the others were if I questioned anything, given I was careful to ask in the most unchallenging of ways. When I asked (very innocently

) if port forwarding was secure, one of them suggested very snidely that "I had been talking to a geek"

So, anyway, I found a company I liked (and feel I can trust) and am quite keen to use; the only hiccup being that it is also quite expensive. The NVR alone is around $1800-$2K (depending whether purely IP or IP + analog). I have Googled NVR's extensively and really only found pricing on eBay - I was just wondering where exactly you would buy this stuff?
And, if I buy stuff from America (or elsewhere), can you just use it here without any modification?

I still may bite the bullet and just stomach the cost if that is the easiest way out, but I was curious to know where the DIY-ers get their gear ;)

Thanks again.

freitasm

BDFL - Memuneh
79263 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1273347 30-Mar-2015 12:17

Those guys who said "you've been talking to a geek" won't be there to help you if your computers, cameras and other systems are penetrated.

These are useless sales people.

ShortyNZ

48 posts

Geek

#1273352 30-Mar-2015 12:21

freitasm: Those guys who said "you've been talking to a geek" won't be there to help you if your computers, cameras and other systems are penetrated.

These are useless sales people.

Yes - exactly :) I would have already bought a really dodgy system if I hadn't asked here first.

michaelmurfy

meow
13242 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1273358 30-Mar-2015 12:28

ShortyNZ:
freitasm: Those guys who said "you've been talking to a geek" won't be there to help you if your computers, cameras and other systems are penetrated.

These are useless sales people.

Yes - exactly :) I would have already bought a really dodgy system if I hadn't asked here first.

I almost exclusively use the Ubiquiti UniFi video products and have found them very good. Since the Ubiquiti NVR just runs Debian it is easy to secure it that little bit more as compared to your regular NVR.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

nakedmolerat

4629 posts

Uber Geek

Trusted

Lifetime subscriber

#1273364 30-Mar-2015 12:44

ShortyNZ: ....

I still may bite the bullet and just stomach the cost if that is the easiest way out, but I was curious to know where the DIY-ers get their gear ;)

Thanks again.

Where are you based? Ubiquiti system would be my choice.

coffeebaron installs security system as well - if you happen to be in upper north island area. (he has done a few excellent jobs for me)

ShortyNZ

48 posts

Geek

#1273375 30-Mar-2015 13:00

nakedmolerat:
ShortyNZ: ....

I still may bite the bullet and just stomach the cost if that is the easiest way out, but I was curious to know where the DIY-ers get their gear ;)

Thanks again.

Where are you based? Ubiquiti system would be my choice.

coffeebaron installs security system as well - if you happen to be in upper north island area. (he has done a few excellent jobs for me)

Thanks. I'm Nor'west Auckland.

1 | 2 | 3 | 4