Hi All,
Any help appreciated. I understand it may be simple, but I'm a newbie.
I have a Unifi USG, 2 AP's and 3 switches. I have a Dahua NVR on its own VLAN.
I have a rule to block all traffic (Lan_IN) from the VLan the NVR is sitting on, to stop it connecting to the internet, for general security purposes.
Question:
Can I create a firewall rule to allow only IVS email notifications to get through, and if so, what ports specifically from my NVR? from previous posts I have tried 2195 and 53, but it does not seem to work. I use Microsoft Outlook as the email server in the Dahua settings. I even went in to SSH and looked at the logs when allowing emails to get through (disabling the general 'drop all' rule), but the source ports from the NVR destination always seem to change on each new email that is sent.
I would really like to keep receiving email notifications from IVS alerts, but cant for the life of me figure out how, if at all, this is possible.
By having a general 'drop all' traffic to maintain NVR security, this may not even be possible - so if not, it would be good to know either way.
Any help appreciated. I understand it may be simple, but I'm a newbie.
I have a Unifi USG, 2 AP's and 3 switches. I have a Dahua NVR on its own VLAN.
I have a rule to block all traffic (Lan_IN) from the VLan the NVR is sitting on, to stop it connecting to the internet, for general security purposes.
Question:
Can I create a firewall rule to allow only IVS email notifications to get through, and if so, what ports specifically from my NVR? from previous posts I have tried 2195 and 53, but it does not seem to work. I use Microsoft Outlook as the email server in the Dahua settings. I even went in to SSH and looked at the logs when allowing emails to get through (disabling the general 'drop all' rule), but the source ports from the NVR destination always seem to change on each new email that is sent.
I would really like to keep receiving email notifications from IVS alerts, but cant for the life of me figure out how, if at all, this is possible.
By having a general 'drop all' traffic to maintain NVR security, this may not even be possible - so if not, it would be good to know either way.
