APP and NIC questions

Heywood

n3wb
Sep 16, 2018
6
4
Canada
Hello....longtime lurker, first time poster....I have been following along for quite a while and have always found my answers through WIKI and searching, but I'm either blind at this point, or missing something.

I have 2 issues I'm trying to solve 1-My blue iris app will not log into my WAN.....the LAN works fine.
2- I can't seem to get the BI3 to log into my WAN.

I have a pretty good sense these issues will be pretty similar in solution.

I am using Dahua cams from Andy, Blue Iris on a desktop and a Dual NIC setup. Everything else is working fine, based mostly on information Ive found on these forums.

I am making the assumption that the Dual NIC setup is preventing me from seeing my BI machine from outside the network, which I understand is basically what its supposed to do.

Is there a way for me to log in from outside my network, with the Dual NIC, or am I stuck with the trade off for security? I assumed that the APP would allow this easily, and securely, but that may be wishful thinking.
 
The dual NIC is not the issue. It would be the same regardless.

Most here go with OpenVPN so that we VPN back into our home network LAN and can then access it remotely. If you have an Asus router, it is probably baked into the firmware. This is not a paid VPN - those are to hide your IP for illegal streaming and porn lol. You need a VPN that gets you back into your IP address.

Or you could port-forward, but that is a huge security risk that most will not recommend.
 
  • Like
Reactions: sebastiantombs
I'm running dual NICs and a VPN. UI3 works fine at home or on an LTE connection.
 
The dual NIC is not the issue. It would be the same regardless.

Most here go with OpenVPN so that we VPN back into our home network LAN and can then access it remotely. If you have an Asus router, it is probably baked into the firmware. This is not a paid VPN - those are to hide your IP for illegal streaming and porn lol. You need a VPN that gets you back into your IP address.

Or you could port-forward, but that is a huge security risk that most will not recommend.
Thanx, Ive started to realize the VPN might make things work. My current modem/router combo does not have a baked in VPN, though I believe I can use it as a passthrough and utilize my router that has, if I can find it.
Port forwarding isn't something I'm going to do, I'll make do until I can sort out the VPN aspect....Thanx again
 
  • Like
Reactions: sebastiantombs
The dual NIC isolates the CAMS from the rest of your LAN, if it is set up correctly. It does NOT isolate your BI PC from the rest of your LAN, and if set up correctly, gives your BI PC internet access while preventing the CAMS from internet access. See figure below.

Network Topology 0.JPG

While you do not have a VPN setup to protect your LAN from intrusion and allow you to access your LAN from the internet, you could run a quick, unprotected test, by using the BI Remote Access Wizard to set up remote access. This will open up your LAN to the internet during your test. I had done this for a few hours and there were many attacks without any actual entries. But It allowed me to see that this would work prior to installing a VPN.

Or until you can get your VPN installed, you could use the free utility TeamViewer to access your home LAN from the internet. I have done this in the past and have liked it.

TeamViewer: The Remote Desktop Software
 
Or until you can get your VPN installed, you could use the free utility TeamViewer to access your home LAN from the internet. I have done this in the past and have liked it.

TeamViewer: The Remote Desktop Software
Many great remote desktop softwares out there. Teamviewer should be considered #1 for it's popularity. Surely if there were security issues with Teamviewer, it would of been blasted across the internet by now. So even simpler sake, I use what Fenderman suggested long ago...Chrome Remote Desktop.
For over a year, I used the built in Windows RDP but something changed in the last couple months where it will no longer connect. I just do not have the time to dig through the 54,023 parameter options of certificates, users, privileges, config so just simply went the CRD.
I am trying to ween myself off big boy Chrome with Daddy Google... so maybe one day I'll look back into windows RDP.
 
Many great remote desktop softwares out there. Teamviewer should be considered #1 for it's popularity. Surely if there were security issues with Teamviewer, it would of been blasted across the internet by now. So even simpler sake, I use what Fenderman suggested long ago...Chrome Remote Desktop.
For over a year, I used the built in Windows RDP but something changed in the last couple months where it will no longer connect. I just do not have the time to dig through the 54,023 parameter options of certificates, users, privileges, config so just simply went the CRD.
I am trying to ween myself off big boy Chrome with Daddy Google... so maybe one day I'll look back into windows RDP.
I use RDP but I do remember it was a pain in the butt for me to get it working. Keeping my fingers crossed, it's been working for quite awhile, it uses less cpu on my BI pc than Teamviewer but with the awesome substreams option that's not as important anymore.
 
Many great remote desktop softwares out there. Teamviewer should be considered #1 for it's popularity. Surely if there were security issues with Teamviewer, it would of been blasted across the internet by now. So even simpler sake, I use what Fenderman suggested long ago...Chrome Remote Desktop.
For over a year, I used the built in Windows RDP but something changed in the last couple months where it will no longer connect. I just do not have the time to dig through the 54,023 parameter options of certificates, users, privileges, config so just simply went the CRD.
I am trying to ween myself off big boy Chrome with Daddy Google... so maybe one day I'll look back into windows RDP.

Back in 2020 there was a vulnerability in TeamViewer which allowed for password attacks remotely. Chrome Remote Desktop had a remote code execution vulnerability earlier this year.

Anything internet facing at some point will most likely be vulnerable to something. At the end of the day, it’s all still software and will most likely have a bug uncovered.


Sent from my iPhone using Tapatalk