port forwarding and security cameras

spreadsheet · 06-10-2014, 13:54

Have a superhub - connected to it - computer
and swann security cameras so I can view the site remotely

the superhub got reset to factory settings and all
the rules and port forwarding got wiped out

had to phone swann tech support before now
but can't remember what he did

ip address of the cameras is 192.168.0.14

gateway is 192.168.0.1

would really appreciate a walkthrough

---------- Post added at 13:54 ---------- Previous post was at 13:43 ----------

done - used the dmz

qasdfdsaq · 06-10-2014, 21:03

DMZ is a very bad idea. Them IP cameras are already well known for being full of security flaws and allowing complete unrestricted access from the outside is just begging for someone to hack your camera and spy on you.

spreadsheet · 07-10-2014, 21:09

Quote:

Originally Posted by qasdfdsaq

DMZ is a very bad idea. Them IP cameras are already well known for being full of security flaws and allowing complete unrestricted access from the outside is just begging for someone to hack your camera and spy on you.

I don't see how they could as they would have to log on to router first?

the port forwarding thing didn't seem to work

in fact the tech bloke at swann tech support used that technique last time
i asked for assistance

but will stand corrected if any alternatives available

Matthew · 07-10-2014, 23:11

If you put it in a DMZ that device is plain accessibly to the internet basically. It would be seen on the internet as if it was on your home LAN.

The ports I have on a port forward for my Swann is port TCP 85, 18004 & 9000.

85 for mine is for web access from my PC when not at home, 18004 and 9000 are the mobile application ports, but you can go into the settings on your DVR and check these out in the various sections.

Hope this helps.

idi banashapan · 07-10-2014, 23:12

i second qasdfdsaq - DMZ is a no-no. internally, the camera will use a port for you to use to view the stream. you may be able to change this in some software that came with it. port forwarding is set on the router. this means you could connect externally to your external IP on any port you designate, which then forwards to the internal port you set (or is preset) for the camera. Putting anything in DMZ basically means that all ports to that device are unrestricted. you will not need to log onto a router to get to it as the router is just allowing the traffic through. There is a reason why people set things up in a certain way! there's a real irony in setting up security cameras without any security.

spreadsheet · 17-10-2014, 20:17

Quote:

Originally Posted by idi banashapan

i second qasdfdsaq - DMZ is a no-no. internally, the camera will use a port for you to use to view the stream. you may be able to change this in some software that came with it. port forwarding is set on the router. this means you could connect externally to your external IP on any port you designate, which then forwards to the internal port you set (or is preset) for the camera. Putting anything in DMZ basically means that all ports to that device are unrestricted. you will not need to log onto a router to get to it as the router is just allowing the traffic through. There is a reason why people set things up in a certain way! there's a real irony in setting up security cameras without any security.

when the tech I spoke to at swann couldn't sort it via remote access it was him that initially did it - as i mentioned above - just realised sorry

idi banashapan · 17-10-2014, 20:44

It's called a workaround - just to get it working!! It doesn't mean it's the way it should be done.

spreadsheet · 17-10-2014, 20:52

Quote:

Originally Posted by idi banashapan

It's called a workaround - just to get it working!! It doesn't mean it's the way it should be done.

so what could a hacker do in some kind of doomsday situation with this?

idi banashapan · 17-10-2014, 21:07

well, in this case, your webcam is public. not necessarily a danger in itself, but it would allow anyone who found said open port/stream to monitor you and your movements. if they cared enough and were local enough (yes people can and will attempt the scan IP ranges geographically close as distributed by ISPs), they could ironically use your security webcam against you to determine when you are out, take down the camera, then break in.

it's no skin of my back, nor anyone else's here how you set it up. people here are just trying to offer you some technical guidance, being we work in technical roles day in, day out. it's up to you if you wish to take heed.

just bear in mind that the tech guy at Swann who told you to put it in the DMZ is getting paid to log and close tickets as quickly as he/she can in order to get paid. if he/she doesn't close tickets, his/her job is on the line. putting the webcam in the DMZ is a sure-fire workaround. Of course it will work - anything in the DMZ will work - that's the point of it - it's a De-Militarised Zone - there is no security. But people offering help here get nothing - we are just actually trying to help and advise.

spreadsheet · 17-10-2014, 21:10

Quote:

Originally Posted by idi banashapan

well, in this case, your webcam is public. not necessarily a danger in itself, but it would allow anyone who found said open port/stream to monitor you and your movements. if they cared enough and were local enough (yes people can and will attempt the scan IP ranges geographically close as distributed by ISPs), they could ironically use your security webcam against you to determine when you are out, take down the camera, then break in.

it's no skin of my back, nor anyone else's here how you set it up. people here are just trying to offer you some technical guidance, being we work in technical roles day in, day out. it's up to you if you wish to take heed.

just bear in mind that the tech guy at Swann who told you to put it in the DMZ is getting paid to log and close tickets as quickly as he/she can in order to get paid. if he/she doesn't close tickets, his/her job is on the line. putting the webcam in the DMZ is a sure-fire workaround. Of course it will work - anything in the DMZ will work - that's the point of it - it's a De-Militarised Zone - there is no security. But people offering help here get nothing - we are just actually trying to help and advise.

yeah - I appreciate the help and am not slagging off anyone - just I don't have much patience with the thing and was glad to get it working at all

might try altering the ports - just such a pain when you can't access it remotely

idi banashapan · 17-10-2014, 21:13

port forwarding has been made really easy these days - most good routers have a GUI for it. it's well worth playing about for an hour to get it right. without trying to scare-monger, it has a real potential to save you a LOT of grief, money and time in the long run.

spreadsheet · 17-10-2014, 21:21

Quote:

Originally Posted by idi banashapan

port forwarding has been made really easy these days - most good routers have a GUI for it. it's well worth playing about for an hour to get it right. without trying to scare-monger, it has a real potential to save you a LOT of grief, money and time in the long run.

ok thanks for all the help

idi banashapan · 17-10-2014, 21:26

you're welcome

Matthew · 17-10-2014, 22:02

Even if you have a SWANN DVR in a DMZ unless you have login details for the SWANN DVR you are not going to see the cameras until you login in!

idi banashapan · 17-10-2014, 22:17

Quote:

Originally Posted by Matthew

Even if you have a SWANN DVR in a DMZ unless you have login details for the SWANN DVR you are not going to see the cameras until you login in!

http://www.theregister.co.uk/2013/01/29/cctv_vuln/