Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




19 posts

Geek


Topic # 198668 18-Jul-2016 13:34
Send private message

Hi all,

 

First time post so I apologise if this has been covered somewhere but I have searched thoroughly.

 

 

 

I have set up my NF4V Netcomm modem & have VDSL functioning perfectly. My issue is with port forwarding. I have set it up so that the ports needed (NAT) to route our security camera feed (NDVR) should be open however when testing via canyouseeme these ports show as closed.

 

1. Am I missing something in the set-up side?

 

2. Is there an easier way to feed the NVR signal out?

 

 

 

Really frustrating spending so many hours with no result - help :-)


Create new topic
21613 posts

Uber Geek
+1 received by user: 4430

Trusted
Subscriber

  Reply # 1594478 18-Jul-2016 13:42
Send private message

Do you have a static IP from bigpipe? You cant connect in when you are behind carrier NAT





Richard rich.ms



19 posts

Geek


  Reply # 1594485 18-Jul-2016 13:51
Send private message

Yes we have a static IP.


 
 
 
 


27270 posts

Uber Geek
+1 received by user: 6699

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1594490 18-Jul-2016 14:01
2 people support this post
Send private message

I would never ever under any circumstances allow port forwarding to a NVR/DVR. It's a bit like leaving your door wide open, and really just inviting everybody in the world to hack you. If you have an insecure device it won't be a matter of if you'll get hacked, but when you'll get hacked.

 

You should only allow access to local devices via VPN.

 

 

 

 




19 posts

Geek


  Reply # 1594491 18-Jul-2016 14:05
Send private message

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.


27270 posts

Uber Geek
+1 received by user: 6699

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1594493 18-Jul-2016 14:08
Send private message

beemerac3:

 

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.

 

 

You should set up a VPN. The NF4V doesn't support being a VPN endpoint so you would need additional hardware to do this.

 

 

 

 

 

 




19 posts

Geek


  Reply # 1594495 18-Jul-2016 14:11
Send private message

So I suppose what I am after is the most secure way without buying more kit. Currently all our computers... intact everything sits on a Cisco router which comes off the Netcomm.

 

 

 

The only item that connects directly to the Netcomm is the NDVR.

 

 

 

Regards


27270 posts

Uber Geek
+1 received by user: 6699

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1594499 18-Jul-2016 14:14
Send private message

beemerac3:

 

So I suppose what I am after is the most secure way without buying more kit. Currently all our computers... intact everything sits on a Cisco router which comes off the Netcomm.

 

 

 

The only item that connects directly to the Netcomm is the NDVR.

 

 

 

Regards

 

 

There are two secure ways to access a NVR securely.

 

VPN

 

Setting up whitelisting on the port forward to allow access only from specific IP addresses.

 

 

 

 


2096 posts

Uber Geek
+1 received by user: 357

Lifetime subscriber

  Reply # 1594500 18-Jul-2016 14:14
Send private message

Raspberry Pi as a gateway running OpenVPN client. OpenVPN server running on AWS maybe. Or run the server locally and only need a single port forward to VPN appliance.





Ross

 

Spark FibreMAX using Mikrotik CCR1009-8G-1S-1S+

 


Speed Test


21613 posts

Uber Geek
+1 received by user: 4430

Trusted
Subscriber

  Reply # 1594510 18-Jul-2016 14:45
Send private message

Some light reading, but there are plenty of threads on similar issues where people think that they have a good password on an appliance and that is enough to keep people out.

 

https://www.ipcamtalk.com/showthread.php/3425-Is-this-a-bot-or-someone-hacked-this-Dahua-NVR

 

https://www.ipcamtalk.com/showthread.php/11948-Secure-remote-access-to-new-Hikvision-system?highlight=nvr+hack

 

 





Richard rich.ms

7845 posts

Uber Geek
+1 received by user: 2588

Subscriber

  Reply # 1594572 18-Jul-2016 16:19
Send private message

sbiddle:

 

beemerac3:

 

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.

 

 

You should set up a VPN. The NF4V doesn't support being a VPN endpoint so you would need additional hardware to do this.

 

 

 

 

 

is something like team viewer suitable and secure enough for viewing?


21613 posts

Uber Geek
+1 received by user: 4430

Trusted
Subscriber

  Reply # 1594673 18-Jul-2016 18:38
Send private message

Google for team view hacked and have a read. Last I looked they were still denying anything and blaming users for passwords.




Richard rich.ms

27270 posts

Uber Geek
+1 received by user: 6699

Moderator
Trusted
Biddle Corp
Lifetime subscriber

  Reply # 1594690 18-Jul-2016 19:11
Send private message

Jase2985:

 

sbiddle:

 

beemerac3:

 

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.

 

 

You should set up a VPN. The NF4V doesn't support being a VPN endpoint so you would need additional hardware to do this.

 

 

 

 

 

is something like team viewer suitable and secure enough for viewing?

 

 

Most NVR's these days have dedicated desktop and mobile apps for viewing rather than being facing the limitations of a web browser, so you're not going to be able to use these remotely using Team Viewer.

 

 

 

 


Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Geekzone Live »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.