Static IP address for home security?

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Static IP address for home security?

1 | 2 | 3 | 4

48 posts

Geek

#1234488 11-Feb-2015 09:44

Thanks everyone - I have alot of helpful stuff to go through here. It DOES seem there is a better solution to the $20/month thing, so even though I am usually reluctant to post here when I struggle to understand the answers, I am still far better off doing so.

I will heed the heads-up on Vodafone.
I have been with Woosh since they started and although I have always found their customer service excellent, we have never used more than 10,000MB/month and we pay them $55 for 55,000MB and then about $55 to Spark for the homeline .... which seems very old school now even to me and I thought it was time I got a grip and changed to a package deal for about $75 or thereabouts. We are limited in which plan we can have with Woosh because we are rural (can only have standard broadband, not air or anything fast

) Because we have an old Telecom "Anytime" plan with capped calling, I thought the Vodafone 'five free numbers' deal looked like a good alternative. But I'll hold off deciding in the meantime now I've heard the comments.

I'm surprised the security alarm guy couldn't have told me some of this.

To be honest I don't really understand the DNS side of it fully yet, but I'm working on it. I'm trying to figure out where I start. Am I right in thinking it all comes down to my router whether I can do the dynamic DNS? or is it the camera DVR as well? Probably just as well I am finding all this out before we actually have it done - I can change anything at this point. I have googled the DVR he has quoted us for, but I don't know what I am looking for in the specs. Similarly, would I not just be better off buying a new router - if I find my current one is not suitable - and saving the monthly fee, if I can then do it for free? Or am I misunderstanding this?

Thanks again.

davidcole

6029 posts

Uber Geek

Trusted

#1234491 11-Feb-2015 09:57

Post your router model and people can tell you how to set up the dynamic dns client. Similarly, any computer in the network (computer, not device live cameras etc) can download the dynamic dns client for the service you choose.

Previously known as psycik

Home Assistant: Gigabyte AMD A8 Brix, Home Assistant with Aeotech ZWave Controller, Raspberry PI, Wemos D1 Mini, Zwave, Shelly Humidity and Temperature sensors
Media:Chromecast v2, ATV4 4k, ATV4, HDHomeRun Dual
Server Host Plex Server 3x3TB, 4x4TB using MergerFS, Samsung 850 evo 512 GB SSD, Proxmox Server with 1xW10, 2xUbuntu 22.04 LTS, Backblaze Backups, usenetprime.com fastmail.com Sharesies Trakt.TV Sharesight

ShortyNZ

48 posts

Geek

#1234516 11-Feb-2015 10:23

Thank you. I have a Dynalink RTA1025W.

ShortyNZ

48 posts

Geek

#1234624 11-Feb-2015 11:48

I think I'd try the noip.com service; it was mentioned here and their website looks reassuring enough.

michaelmurfy

meow
13240 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#1234671 11-Feb-2015 13:07

ShortyNZ: I think I'd try the noip.com service; it was mentioned here and their website looks reassuring enough.

I use noip as a dynamic DNS service as well as have a domain name of my own that has a CNAME record pointing back to the noip address, means it masks the noip address and looks much more pro (for example, security.domain.nz could point to homeddns.noip.com via a CNAME record if you have a domain).

As many others have quoted stay away from Voda or Woosh - personally, I'd recommend Bigpipe or Snap if you want a really good provider and if you do go with Snap just ask them about getting a free static IP and they'll likely do it for kicks.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

chevrolux

4962 posts

Uber Geek
Inactive user

#1236096 11-Feb-2015 22:08

What brand camera gear are you putting in? All the decemt ones (and even the rubbish ones) have built in Dynamic DNS services built in. Just sign up for an account and away you go for no extra cost.

Dont shift to Vodafome either.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1236219 12-Feb-2015 07:22

From a security perspective you should also never have any security equipment exposed to the Internet and should only be accessible via a VPN. Reading between the lines it wouldn't surprise me if your security person is simply suggesting a port forward. This is exceptionally poor from a security perspective and should really be avoided.

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1236225 12-Feb-2015 07:49

What Steve is saying is that the majority of security gear use old software, or even if use new software they are not updated. You can find many sites that list consumer home security cameras for people to look at.

If you get a suggestion to port forward to the cameras so you can see them, DON'T DO IT.

ShortyNZ

48 posts

Geek

#1236328 12-Feb-2015 10:05

WELL, that DID make me pause for thought.

So I phoned him and it appears you are right - he even phoned the manufacturer before he phoned me back and the manufacturer told him that "unless I was operating a high-risk business like a bank or hospital, a VPN is ridiculous". So I guess that means it is port-forward

I'm not sure where that leaves me, other than going elsewhere (different company) - or whether I can use the equipment via a VPN anyway, if I choose to? I only know what I've briefly googled about VPN's so far. I would prefer not to take risks with security if that is what port forward leaves me exposed to - it rather defeats the purpose of having it, I would have thought!

The cameras we have been quoted for are Hikvision (slightly unfortunate name?!) DS-2CE infra red (and the recorder is a Hikvision analogue 4 channel 500GB HDD VRC. I don't think that tells me the model though).

Thanks again.

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1236331 12-Feb-2015 10:07

Do you need remote access? Do you have a NAS or PC at home that can receive remote desktop connections via Chrome Remote Desktop, TeamViewer, etc?

Use that instead. Do not open your ports to these devices.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1236339 12-Feb-2015 10:14

ShortyNZ:

The cameras we have been quoted for are Hikvision (slightly unfortunate name?!) DS-2CE infra red (and the recorder is a Hikvision analogue 4 channel 500GB HDD VRC. I don't think that tells me the model though).

Thanks again.

Ohh well.. Fark. I'd find a new "security" consultant.

I hope you're installer isn't the one who's configured port forward for the hundreds of Hikvision cameras in NZ that are now exposed to the internet and freely viewable due to a combination of insecure setups (simply port forwards) and backdoor passwords in the Hikvision gear due to the poor security of their products. insecam isn't online now so you can't see these, but one can assume most of the cameras are probably still insecure (http://www.geekzone.co.nz/forums.asp?forumid=73&topicid=154827 & http://www.geekzone.co.nz/forums.asp?forumid=73&topicid=154822)

freitasm

BDFL - Memuneh
79250 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#1236344 12-Feb-2015 10:17

ShortyNZ: ... and the manufacturer told him that "unless I was operating a high-risk business like a bank or hospital, a VPN is ridiculous". So I guess that means it is port-forward

Security companies that don't understand security or privacy are the worst. Bunch of useless people interested in money more than safety/security/privacy.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1236346 12-Feb-2015 10:18

freitasm:
ShortyNZ: ... and the manufacturer told him that "unless I was operating a high-risk business like a bank or hospital, a VPN is ridiculous". So I guess that means it is port-forward

Security companies that don't understand security or privacy are the worst. Bunch of useless people interested in money more than safety/security/privacy.

Many security people don't understand networking. They don't know what leaving default passwords on security hardware isn't smart and seem completely oblivious to the risks once confronted.

sbiddle

30853 posts

Uber Geek

Retired Mod

Trusted

Biddle Corp

Lifetime subscriber

#1236347 12-Feb-2015 10:21

ShortyNZ:
The cameras we have been quoted for are Hikvision (slightly unfortunate name?!) DS-2CE infra red (and the recorder is a Hikvision analogue 4 channel 500GB HDD VRC. I don't think that tells me the model though).

Any reason why you're still looking at analogue cameras? IP kit is so vastly superior and the pricing is now so cheap.. But maybe your security guy simply doesn't know enough about IP to want to touch it.

ShortyNZ

48 posts

Geek

#1236375 12-Feb-2015 10:51

Gosh, and I thought we were doing the right thing by just getting a professional to do it!

I had heard about the hacked cameras before, but I thought it was because people hadn't changed their passwords from the default ones and that we would just need to be careful about that - but it seems you are saying that the gear itself is also part of the problem? I also didn't know there was an alternative (i.e. VPN).

You hit the nail on the head about the security people not understanding networking - he knew as much about VPN as I did (i.e. had never heard of it).

I guess I will have to ring around and find someone who does know about these things and installs securer gear.

We are only using analogue because that is what he recommended - he said they were decent cameras and they weren't interested in installing junk - I think he is sincere, but I guess he doesn't know what he doesn't know, maybe.

Looks like I better do some more shopping around security companies; you wouldn't think it would be so hard, just to get a basic home security camera fit-out sorted. I'm glad I asked anyway - thanks for so much help with this.

1 | 2 | 3 | 4