Dahua cameras alerts

[dohat leku]

folks

Current BI user and thinking of switching to Dahua NVR.

i know this question has been asked before but with placing the dahua NVR behind a VPN, would it be able to send mobile alerts? That's a priority for me

Also do most folks feel safe giving blue iris access to the internet directly? That's how I have it right now and the mobile app

Thx

 

[fenderman]

folks

Current BI user and thinking of switching to Dahua NVR.

i know this question has been asked before but with placing the dahua NVR behind a VPN, would it be able to send mobile alerts? That's a priority for me

Also do most folks feel safe giving blue iris access to the internet directly? That's how I have it right now and the mobile app

Thx

yes, the vpn will not stop outbound alerts.
You should not expose blue iris or NVR directly to the net.
I am glad you are switching to a dahua NVR. I encourage every BI user to try an NVR, it will make you appreciate blue iris so much more when you come running back.

 

[dohat leku]

1) so you are still allowing NVR to have some outbound access to the internet to send alerts to mobile app? In that case, is the VPN mostly to just view live feeds?
2) what's the point of BI not having access to the internet?

Thx

 

[fenderman]

1) so you are still allowing NVR to have some outbound access to the internet to send alerts to mobile app? In that case, is the VPN mostly to just view live feeds?
2) what's the point of BI not having access to the internet?

Thx

1) if you want alerts you need some outbount access
2) just like with the NVR you setup a vpn for inbound access.

 

[SouthernYankee]

My general VPN post
There are two types of VPN, do not get them confused.

The type depends on where the traffic conversation (traffic) originates

1) origination: local home network, destination the internet.
This type of VPN purpose to hides your activity from the internet, it is outbound, it normally costs a monthly fee to use. Direction is from your home PC to the internet, going to your bank, google, porn sites,,,, this not what you want

2) Origination: the internet world wide web, destination: your home network
This VPN type is used to provide a secure connection onto your local network, in bound to you local home network, from your office computer, your cell phone in your car, tablet at the coffee shop.. This is what you want, it does not have a monthly fee and is normally completely free. OpenVPN is this type of VPN.
If you home internet provider is a cellular network, then DDNS (dynamic Domain Name System) may not work, the DDNS is needed for most Inbound VPN services (OpenVpn), so OpenVPN may not work for you.

if you are thinking about 1

 

[dohat leku]

Thanks! Why are folks comfortable with the NVR sending outbound alerts but not with inbound VPN? If there is compromised code, the NVR could quite easily establish a session to a botnet and wait for instructions. It's the common architecture with command and control botnets the last 10 years. In other words, simply configuring your firewall to block inbound ports doesn't do anything if you are allowing the NVR some outbound access (irrespective of port as most home firewalls don't have application intelligence, they just understand TCP & UDP ports)

 

[dohat leku]

Anybody care to comment on this? Thx

 

[mikeynags]

Anybody care to comment on this? Thx

You should be blocking Intenet Access for the NVR but allow access to the NVR from the VPN. This solves the issue you describe.

 

[dohat leku]

Are the alerts a direct communion between the NVR and mobile app or is there a cloud server in between hosted by dahua

 

[foghat]

Thanks! Why are folks comfortable with the NVR sending outbound alerts but not with inbound VPN? If there is compromised code, the NVR could quite easily establish a session to a botnet and wait for instructions. It's the common architecture with command and control botnets the last 10 years. In other words, simply configuring your firewall to block inbound ports doesn't do anything if you are allowing the NVR some outbound access (irrespective of port as most home firewalls don't have application intelligence, they just understand TCP & UDP ports)

VPN aside, I too am trying to understand the best way to allow for notifications to work and stay secure.

a thread I started:

If you properly lock down you nvr/computer - how do you get notifications?

Hi all, Getting ready to take the plunge using Dahua and am trying to figure out as much as I can beforehand so I don't have any surprises (or at least fewer surprises). As I understand from reading here, it is best practice to: 1. have your cameras on a different subnet than the rest of your...

ipcamtalk.com

Still not 100% certain if I am on the right track. To your point, I would be allowing outbound traffic on a couple of ports. I dunno.