Dahua IPC-HDW4431C-A trying to make outside connection

[marigo]

Hi all,

I have noticed that this IP camera from Dahua is trying to make outside connections to the following ports and IP addresses:

• 114.55.152.165 9084 TCP
• 115.29.249.74 8800 UDP

Are these connections specific for this camera model or do other camera's from Dahua also trying to make outside connections?

I am blocking the ports in the firewall to prevent it from making the connections and forward traffic.
There doesn't seems an option to disable this behavior.

I know that a few IP camera brands are using this to make life easier for people that want to use an App on there phone to see the live video from the cam, but this is also worry me that there is this traffic which you can't control.

 

[nayr]

Do you have P2P or DDNS enabled?

 

[marigo]

Hi nayr,

Have checked the DDNS setting, but it's disabled.
I don't see a "P2P" setting in my Dahua in the network settings.

Any other suggestion?

Regards

 

[cyberwolf_uk]

Just for the record... ANY IP camera should be blocked from accessing the Internet and any P2P, DDNS and UPNP should be disabled... It's VPN all the way! If you can't implement these you should really think hard about your other setups!

 

[nayr]

I entirely agree w/@cyberwolf_uk, its best to use external network security to secure the cameras than rely on the camera its self.. in theory the camera could re-enable or bypass anything you set on it, but it cannot bypass externally enforced security policies.

here's the location of p2p:

 

[marigo]

All those services you mentioned are disabled and VPN services are enabled.
Just wanted to know if anyone has seen this and know a fix for it to unload my firewall.

 

[marigo]

Seems I don't have that option in the TCP tabs...

 

[nayr]

ah this is one of those china market models, you can brand out options and they may be configured to enable p2p and disable the UI option.. I think @cor35vet made a firmware for these cameras that re-exposed the option so it could be disabled.

might also be some govt mandated backdoor since the cameras are intended only for local Chinese consumption.

 

[marigo]

Aha, You are right! This one comes from Aliexpress.
I am going to search for this firmware.

Meanwhile the firewall (Untangle) is blocking the traffic (> 50000 events a day) that comes from the camera.

@nayr/cyberwolf_uk,
Thanks for support

 

[nayr]

Dahua Firmware Mod Kit + Modded Dahua Firmware (post #76)

 

[marigo]

Thank you for the link.

 

[marigo]

Dahua Firmware Mod Kit + Modded Dahua Firmware (post #76)

Succesfully flashed the modded firmware. The p2p option is now visible and disabled.
No more logs in my firewall anymore!

Thank you for redirecting and enjoy upcoming last days of the year!

 

[hmjgriffon]

Dahua Firmware Mod Kit + Modded Dahua Firmware (post #76)

I just block all incoming and outgoing traffic for China and Russia lol.

Sent from my Nexus 6P using Tapatalk

 

[hmjgriffon]

Dahua Firmware Mod Kit + Modded Dahua Firmware (post #76)

Hey @nayr, I saw the starlight bullets for 199 on Allie and the dealer had good ratings, are you waiting for Adam? I ordered one of those Poe power splitters and a piece sensor that you recommended to play with.

Sent from my Nexus 6P using Tapatalk

 

[nayr]

I wanna get more than one and yeah EmpireTec is promising me a nice discount that it'll make worth waiting.

with winters here the way they are doing installs this time of year requires patients anyhow, most outdoor work may require waiting to spring depending.. Ive learned good things come to those whom wait; especially w/dealing w/AliExpress.. im usually purchasing months before installing, that way I dont go insane waiting for components heh.

 

[hmjgriffon]

I wanna get more than one and yeah EmpireTec is promising me a nice discount that it'll make worth waiting.

with winters here the way they are doing installs this time of year requires patients anyhow, most outdoor work may require waiting to spring depending.. Ive learned good things come to those whom wait; especially w/dealing w/AliExpress

Will that be a deal specific to you? Lol weather is good here, I just have the problem of putting up cams in a rental house haha

Sent from my Nexus 6P using Tapatalk

 

[nayr]

yes, in exchange for rights to use media from my reviews for commercial gain.. pretty sweet deal as Aliexpress vendors have historically ripped off our reviews w/out giving a shit.. Since I want to upgrade my whole system with this generation I'm going to take all the savings I can get.. I have the previous 3 gens of dahua cams (at least) on hand to compare em with.

if you want to go ahead and get it from wherever you can go for it; all the varifocal models share the same optics and hardware, just in different layouts and with different size constraints that dictates what features can be included (like alarm IO).. I'm confident it'll perform as well as the turret, hence why im buying multiples even through shipping is free.

 

[hmjgriffon]

yes, in exchange for rights to use media from my reviews for commercial gain.. pretty sweet deal as Aliexpress vendors have historically ripped off our reviews w/out giving a shit.. Since I want to upgrade my whole system with this generation I'm going to take all the savings I can get.

if you want to go ahead and get it from wherever you can go for it; all the varifocal models share the same optics and hardware, just in different layouts and with different size constraints that dictates what features can be included (like alarm IO).. I'm confident it'll perform as well as the turret, hence why im buying multiples even through shipping is free.

Know anything about this seller? I've messaged Andy to ask when he's getting them in but no response yet. Online Shop Free Shipping DAHUA Security IP Camera 2MP Full HD WDR Waterproof IR Network Bullet Camera with POE without Logo IPC-HFW5231E-Z | Aliexpress Mobile

Sent from my Nexus 6P using Tapatalk

 

[nayr]

deliver time is: 23 days, indicating they also dont have it in stock.

 

[hmjgriffon]

deliver time is: 23 days, indicating they also dont have it in stock.

Lame, guess I'm waiting LOL

Sent from my Nexus 6P using Tapatalk