Bigpipe Netcomm NF4V - Port forwarding or virtual server

Forums › Spark New Zealand (including Skinny and BigPipe) › Bigpipe Netcomm NF4V - Port forwarding or virtual server

beemerac3

19 posts

Geek

#198668 18-Jul-2016 13:34

Hi all,

First time post so I apologise if this has been covered somewhere but I have searched thoroughly.

I have set up my NF4V Netcomm modem & have VDSL functioning perfectly. My issue is with port forwarding. I have set it up so that the ports needed (NAT) to route our security camera feed (NDVR) should be open however when testing via canyouseeme these ports show as closed.

1. Am I missing something in the set-up side?

2. Is there an easier way to feed the NVR signal out?

Really frustrating spending so many hours with no result - help :-)

richms

28178 posts

Uber Geek

Trusted

Lifetime subscriber

#1594478 18-Jul-2016 13:42

Do you have a static IP from bigpipe? You cant connect in when you are behind carrier NAT

Richard rich.ms

beemerac3

19 posts

Geek

#1594485 18-Jul-2016 13:51

Yes we have a static IP.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1594490 18-Jul-2016 14:01

I would never ever under any circumstances allow port forwarding to a NVR/DVR. It's a bit like leaving your door wide open, and really just inviting everybody in the world to hack you. If you have an insecure device it won't be a matter of if you'll get hacked, but when you'll get hacked.

You should only allow access to local devices via VPN.

beemerac3

19 posts

Geek

#1594491 18-Jul-2016 14:05

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1594493 18-Jul-2016 14:08

beemerac3:

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.

You should set up a VPN. The NF4V doesn't support being a VPN endpoint so you would need additional hardware to do this.

beemerac3

19 posts

Geek

#1594495 18-Jul-2016 14:11

So I suppose what I am after is the most secure way without buying more kit. Currently all our computers... intact everything sits on a Cisco router which comes off the Netcomm.

The only item that connects directly to the Netcomm is the NDVR.

Regards

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1594499 18-Jul-2016 14:14

beemerac3:

So I suppose what I am after is the most secure way without buying more kit. Currently all our computers... intact everything sits on a Cisco router which comes off the Netcomm.

The only item that connects directly to the Netcomm is the NDVR.

Regards

There are two secure ways to access a NVR securely.

VPN

Setting up whitelisting on the port forward to allow access only from specific IP addresses.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Note that to use Quic Broadband you must be comfortable with configuring your own router.

Spyware

3762 posts

Uber Geek

Lifetime subscriber

#1594500 18-Jul-2016 14:14

Raspberry Pi as a gateway running OpenVPN client. OpenVPN server running on AWS maybe. Or run the server locally and only need a single port forward to VPN appliance.

Spark Max Fibre using Mikrotik CCR1009-8G-1S-1S+, CRS125-24G-1S, Unifi UAP, U6-Pro, UAP-AC-M-Pro, Apple TV 4K (2022), Apple TV 4K (2017), iPad Air 1st gen, iPad Air 4th gen, iPhone 13, SkyNZ3151 (the white box). If it doesn't move then it's data cabled.

richms

28178 posts

Uber Geek

Trusted

Lifetime subscriber

#1594510 18-Jul-2016 14:45

Some light reading, but there are plenty of threads on similar issues where people think that they have a good password on an appliance and that is enough to keep people out.

https://www.ipcamtalk.com/showthread.php/3425-Is-this-a-bot-or-someone-hacked-this-Dahua-NVR

https://www.ipcamtalk.com/showthread.php/11948-Secure-remote-access-to-new-Hikvision-system?highlight=nvr+hack

Richard rich.ms

Jase2985

13461 posts

Uber Geek

ID Verified

Lifetime subscriber

#1594572 18-Jul-2016 16:19

sbiddle:

beemerac3:

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.

You should set up a VPN. The NF4V doesn't support being a VPN endpoint so you would need additional hardware to do this.

is something like team viewer suitable and secure enough for viewing?

richms

28178 posts

Uber Geek

Trusted

Lifetime subscriber

#1594673 18-Jul-2016 18:38

Google for team view hacked and have a read. Last I looked they were still denying anything and blaming users for passwords.

Richard rich.ms

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1594690 18-Jul-2016 19:11

Jase2985:

sbiddle:

beemerac3:

Thanks for your reply. I am, however, a newbie to this so unsure of how I would go about accessing our NVR/Cameras in the most secure way possible. Any assistance greatly appreciated.

You should set up a VPN. The NF4V doesn't support being a VPN endpoint so you would need additional hardware to do this.

is something like team viewer suitable and secure enough for viewing?

Most NVR's these days have dedicated desktop and mobile apps for viewing rather than being facing the limitations of a web browser, so you're not going to be able to use these remotely using Team Viewer.