Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.




482 posts

Ultimate Geek
+1 received by user: 5


Topic # 216702 9-Jul-2017 12:11
Send private message quote this post

I am looking to setup a remote IP camera in an area with no phoneline but strong 34/4g connectivity and electrical power.

 

I had planned to use an outdoor wireless IP camera connected via wifi to a router with a 3g/4g data stick in it and a vodafone sim (i have one additional data only sim on my current vodafone plan).

 

However, some research seems to indicate that the old direct APN no longer works on 3g and that its also not possible to directly access a device on 4g? Has anyone got a setup similar to this and a good way to remotely access the device - preferably through vodafone but open to other providers also.

 

 

 

Thanks

 

 

 

 





pɐǝɥ sıɥ uo ƃuıpuɐʇs

View this topic in a long page with up to 500 replies per page Create new topic
 1 | 2
6301 posts

Uber Geek
+1 received by user: 2749

Moderator
Trusted
Subscriber

  Reply # 1817192 9-Jul-2017 12:14
7 people support this post
Send private message quote this post

Don't do this.

 

Cameras especially are often targets to malware and the last thing you want is having become a part of a botnet and doing a DDOS over a mobile network. Have it upload files to a remote web server or set up a VPN.





Michael Murphy | https://murfy.nz
Want to be with an epic ISP? Want $20 to join them too? Well, use this link to sign up to BigPipe!
The Router Guide | Electric KiwiCommunity UniFi Cloud Controller | Ubiquiti Edgerouter Tutorial


3043 posts

Uber Geek
+1 received by user: 484

Trusted

  Reply # 1817198 9-Jul-2017 12:34
One person supports this post
Send private message quote this post

I cant agree more.

 

Google Mirai Botnet for more info - it specifically targets devices such as internet connected cameras.

 

Never, Ever make a port forward to a security camera or DVR recorder





Ray Taylor
Taylor Broadband (rural hawkes bay)
www.ruralkiwi.com

There is no place like localhost
For my general guide to extending your wireless network Click Here




 
 
 
 


BDFL - Memuneh
58351 posts

Uber Geek
+1 received by user: 9803

Administrator
Trusted
Geekzone
Subscriber

  Reply # 1817199 9-Jul-2017 12:36
2 people support this post
Send private message quote this post

Please don't. Read above. If in doubt, read above.


4285 posts

Uber Geek
+1 received by user: 1172


  Reply # 1817204 9-Jul-2017 12:56
Send private message quote this post

The OP hasn't actually said how they intend to configure this, just that a routable IP is required for access. This doesn't mean that the camera itself is either going to have a public IP, or have public facing ports. If the router is running a properly configured VPN server which is used to get access to the camera, then this should be sufficiently secure.

 

I can't answer the question about what (if any) APN will provide the required service, but lets not jump to conclusions (yet!) about how the OP intends to configure the setup.


BDFL - Memuneh
58351 posts

Uber Geek
+1 received by user: 9803

Administrator
Trusted
Geekzone
Subscriber

  Reply # 1817206 9-Jul-2017 12:58
2 people support this post
Send private message quote this post

Good point, we should know more. But preempting anything of the sorts, "port forward to a camera" is always a bad solution.




482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1817211 9-Jul-2017 13:05
2 people support this post
Send private message quote this post

RunningMan:

 

The OP hasn't actually said how they intend to configure this, just that a routable IP is required for access. This doesn't mean that the camera itself is either going to have a public IP, or have public facing ports. If the router is running a properly configured VPN server which is used to get access to the camera, then this should be sufficiently secure.

 

 

 

 

Wow that was a barrage! Yes... I am in the infosec business - so know what I am doing - simplified my setup for the purposes of the question though... lesson learnt! Although you have perhaps given me an idea to see if i can get the router to VPN back to me rather than the other way around.. downside is increased traffic in keeping the VPN alive 24x7 but it shouldn't be too many bytes.





pɐǝɥ sıɥ uo ƃuıpuɐʇs

4285 posts

Uber Geek
+1 received by user: 1172


  Reply # 1817259 9-Jul-2017 14:16
Send private message quote this post

Even if you got a public IP, it may still not be static, so would still require a reverse DNS service to give you a FQDN to address it. If you could put up with the overhead of keeping the VPN connection up all the time, having the VPN client at the camera end could be easier, and far less dependant on the connection type if you needed to change providers or have a fallback connection as well.


3043 posts

Uber Geek
+1 received by user: 484

Trusted

  Reply # 1817261 9-Jul-2017 14:18
Send private message quote this post

Most decent reputable cameras and recorders coming from china now have a cloud service that they can connect to so you can be on a dynamic and natted ip address but still connect to it without the complications of maintaining a VPN. 

 

 





Ray Taylor
Taylor Broadband (rural hawkes bay)
www.ruralkiwi.com

There is no place like localhost
For my general guide to extending your wireless network Click Here






482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1817403 9-Jul-2017 17:27
Send private message quote this post

raytaylor:

 

Most decent reputable cameras and recorders coming from china now have a cloud service that they can connect to so you can be on a dynamic and natted ip address but still connect to it without the complications of maintaining a VPN. 

 

 

Cchinese cloud server was what i was trying to avoid..





pɐǝɥ sıɥ uo ƃuıpuɐʇs



482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1817405 9-Jul-2017 17:28
Send private message quote this post

RunningMan:

 

Even if you got a public IP, it may still not be static, so would still require a reverse DNS service to give you a FQDN to address it.

 

 

Most routers (including the one i was looking at) - support no-ip/dynamic ip updating services so I think I can solve that part





pɐǝɥ sıɥ uo ƃuıpuɐʇs

3079 posts

Uber Geek
+1 received by user: 833


  Reply # 1817416 9-Jul-2017 17:56
Send private message quote this post

Filterer:

 

Wow that was a barrage! 

 

 

Nothing like invoking the wrath of GZ.  A fearsome foe indeed. 

 

Good advice though . . .   Isn't it great how tech people share knowledge.   

 

I sometimes wonder if there might be a 'lawyerzone' equivalent forum for kiwis?


520 posts

Ultimate Geek
+1 received by user: 70

Trusted

  Reply # 1817425 9-Jul-2017 18:27
Send private message quote this post

I concur with many of the above posts. I have a public IP address range with my internet connection but I exclusively use RFC1918 and NAT for all embedded devices. Put another way, I do not connect anything directly to the internet which I don't fully understand what is going on in terms of firewalling, etc.

 

With the increasing use of IPV6 I expect this will open up a whole new Pandora's box.


3869 posts

Uber Geek
+1 received by user: 158


  Reply # 1817701 10-Jul-2017 11:01
Send private message quote this post

A VPN will chew ~3gb a month aiui.  Use a mikrotik router with USB dongle and you can do this quite easerly.

 

 

 

You can then, also lock the camera down to only be talking to your endpoints and nothing else, so it can't get instructions from the mother ship.

 

 

 

Have you ever wondered why the 'spy ware' is in those cameras and the benefit of it?

 

 

 

 

 

 

 

 





Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz




482 posts

Ultimate Geek
+1 received by user: 5


  Reply # 1818836 10-Jul-2017 13:53
Send private message quote this post

DonGould:

 

A VPN will chew ~3gb a month aiui.  Use a mikrotik router with USB dongle and you can do this quite easerly.

 

 You can then, also lock the camera down to only be talking to your endpoints and nothing else, so it can't get instructions from the mother ship. 

 

 

 

 

3GB / month just idling? Hrrm that's too much for my purpose. Just to link back to original topic of the thread - no-one knows if it is still possible to connect to 3g/4g direct? Is this different with rural broadband?





pɐǝɥ sıɥ uo ƃuıpuɐʇs

3869 posts

Uber Geek
+1 received by user: 158


  Reply # 1818921 10-Jul-2017 15:13
Send private message quote this post

Filterer:  3GB / month just idling? Hrrm that's too much for my purpose. 

 

If I've done my math correctly, that's about 9.7bits per second CIR, or about 1 byte every second.  It adds up.

 

 





Promote New Zealand - Get yourself a .kiwi.nz domain name!!!

Check out mine - i.am.a.can.do.kiwi.nz - don@i.am.a.can.do.kiwi.nz


 1 | 2
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

IDC thinks ANZ is a nation
Posted 27-Jul-2017 11:51


British new home buyers see ultrafast broadband as vital
Posted 27-Jul-2017 09:46


Australians want NZ-style gigabit, but for less
Posted 27-Jul-2017 08:57


Push notifications: A productivity killer
Posted 25-Jul-2017 14:15


Intergen takes SKYCITY to the cloud
Posted 25-Jul-2017 14:04


Nothing nebulous about Microsoft’s cloud-transition
Posted 21-Jul-2017 15:34


We’re spending more on tech, but not as much as Australians
Posted 21-Jul-2017 11:43


Endace announces EndaceFabric for network-wide packet recording
Posted 20-Jul-2017 20:49


Acorn 6: MacOS image editing for the rest of us
Posted 20-Jul-2017 17:04


HTC faces backlash over keyboard pop-up ads
Posted 19-Jul-2017 15:53


BNZ adds Visa credit cards to Android Pay wallet
Posted 18-Jul-2017 19:44


Still living in a Notification hell – Om Malik
Posted 18-Jul-2017 13:00


Duet Display uses iPad to extend Mac, PC
Posted 18-Jul-2017 10:58


PC sales could be worse
Posted 17-Jul-2017 07:34


Crypto-currencies, tulips, market bubbles
Posted 17-Jul-2017 06:38



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.