Remote View Camera Software, DMZ server? firewall rules? whats most secure?

Soldato
Joined
18 Oct 2002
Posts
4,671
Location
Stoke-on-Trent
Hi guys, a friend of mine has installed a DVR camera recording card in his PC @ his car garage to keep tabs on things, it has a feature for remote view so he can watch the cameras at home via the good ol' tinternet.

The software uses port 80 (so HTTP) for this feature. He has a BT router in place... I've been playing and opened port 80 on the router for UDP and TCP protocols but still cannot connect to his PC using his internet IP address...

If I set his computer as a DMZ server though it works fine, and even though his software firewall says everything bar port 80 is stealth if i use the sheilds up test on GRC.com it makes me wonder if it's a good idea setting it as a DMZ.

Is there anything I'm missing or any other way around it to get it to work whilst still using the hardware firewall on the router?

Cheers.
 
As well as 'opening' port 80, have you then forwaded that port to his internal IP address and ensured that any software firewall also allows access ?
 
Yep sorry was in a rush and forgot to say I've done that also, no go :( that was the way I'd have expected it to work myself but I aint a networking genius lol so thought I'd better ask on here.

Quite strange though it doesn't go when doing all that but does if you set his computers internal address as DMZ
 
says just port 80, gone through the book etc... tried opening a small range like 80 to 82 but no good... just works fine with the machine set to DMZ but makes me wary about overall security just letting a software firewall do the work :( plus the fact port 80 is constantly open but cant do nowt about that really!
 
I take it your using a web based interface to access the camera?

Try

http://"Your IP here":80

Do you know the make or model of the camera your using and the software to connect to the camera?

Also dont use the DMZ feature just forward port 80 to the inside address of the CAMERA not your Pc, also make sure the camera has a static address on the same subnet as the inside address of your router.
 
Nah these aint IP cameras mate... so the IP address has to be of the machine, not an individual camera with driver software.

It's a "DVR card" - basically a PCI card which lets you connect 4 CCTV cameras to it and then some software which lets you view them, record stuff from them and some other bits and bobs.

One thing I haven't tried is the :80 at the end, so that could be an idea if I just set it up as you'd expect (port 80 UDP/TCP forwarded to machine with DVR card in).

I just think there has to be a way of making them work without having the machine set as a DMZ server.

The card is an "Eyes to Eyes Powerview" card, some cheap taiwanese thing but I used to use cards by Leadtek which I had the same "issues" with when it came to remote view.
 
have tried it using windows firewall and allowed the camera software to connect out via it, same with others like zone alarm... all fine with normal modems (no hardware firewall) and routers aslong as it's set to DMZ.
 
just sounds like to me that another port(s) needs opening

if it works in the DMZ there is no issue with the PC running the the cameras or the camera software
 
Aye the PC(s) as I've tried a few are all fine... I'm just no networking/broadband expert lol... so I can't see where I'm going wrong.

Emailed the supplier anyway to ask for his ideas as I just dont like this DMZ thing and no other hardware security lol
 
I'll have another read of the book just incase :) But it doesn't go into much detail and from what I remember just says TCP and UDP for port 80 need opening and forwarding to the respective PC.

The guy who sells the cards hasn't got back to me yet so probably doesn't know the answer heh :D
 
Back
Top Bottom