Camera Isolation from Internet

Something I ran into when blocking LAN to WAN on my setup is that with everything blocked the cameras could not resolve smtp.gmail.com to send out the motion alerts I'd set up.

I had set up allow port 587 for SMTP but it still didn't work. After much hair pulling figured out had to make firewall rule to allow port 53 too, and put that before the 587 rule. Those two rules before the block all rule.
 
All of this is similar to leaving your house and locking the door with the door knob lock and a dead bolt. Neither will stop a determined attack but they will, certainly, defer most. Being prudent with IP config and router blocks certainly isn't foolproof, 'cuz fools can be so damn inventive but it will deter the average fool.
 
  • Like
Reactions: Philly