Finally got all 16 security cameras functional

[ZipZap]

Originally Posted by Steve_R

Don't forget people brazen enough to briefly park in front of your driveway.

I'm glad I don't live in your neighborhood.

You get towed here for on street parking unless you pre-arrange it.

Nice deal owning the roads...

[Onebadcad]

I have a HUGE reputation, everyone knows where I reside, no need for cameras, I have a bat near the front door.

Wifey says we can never get cameras, as I wear only my undies 20+ hours each day.

[Datawiz]

Originally Posted by Moond0ggie

I was wondering if you could channel that feed to all of your HDTVs,
say you were watching TV in the front room or bedroom & heard a noise outside, could you select another HDTV input B or C & see all of the camera feeds from the room you are in, or do you have to walk into the office-PC room to only view from a single location ?

it seems like it would be a nice ability to see all of the camera feeds from any HDTV room location you are in .

I never watch TV. The only device I'm on when I leave my office is my iPad to watch a movie. I "may" be able to put the app on it using the private network. Would be a worthwhile exercise.

[Datawiz]

Originally Posted by dvarapala

What brand(s) of cameras?

And what do you mean by "private?" Technically anyone behind a NAT gateway is on a "private IP network" but if you plug a Chinese IP camera in it can still "phone home" to the servers in China.

Hopefully you mean isolated IP network where your cameras connect ONLY to your DVR and have no access to the rest of your home network or to the Internet.

System "asked" to be exposed...."Hey, change these firewall settings". How about "No...**** you". That's pretty much how it went when I set these up.

[snide]

So, you finally have a use for all 18 monitors.

[simpleman68]

Nice to see the garage AC unit still in place; working well still, I hope?

I have 6 cams sitting new in a box needing to be installed... Gotta finish the damn shed rebuild first.
Oh, and then I have to hit the FL compound to finish drywall in the lanai and set up the outdoor kitch/bbq station.

Bitch is I've only been home 5 days of the last month.
Scott

[Frankie the Fink]

Originally Posted by Onebadcad

I have a HUGE reputation, everyone knows where I reside, no need for cameras, I have a bat near the front door.

Wifey says we can never get cameras, as I wear only my undies 20+ hours each day.

Anyone that feels it necessary to say so, doesn't..

[dvarapala]

Originally Posted by Datawiz

System "asked" to be exposed...."Hey, change these firewall settings". How about "No...**** you". That's pretty much how it went when I set these up.

OK, so the cameras are on the same internal network as the rest of your computers. Which means any one of those cameras can establish an outgoing connection to China just like the rest of your computers can - they don't need a "hole in the firewall" (i.e. port forwarding) in order to do that. Also, depending on how secure your router is, they may be able to configure port forwarding anyway, even without admin access to your router's config page.

Not exactly optimal from a cyber-security perspective.

[Datawiz]

Originally Posted by simpleman68

Nice to see the garage AC unit still in place; working well still, I hope?

I have 6 cams sitting new in a box needing to be installed... Gotta finish the damn shed rebuild first.
Oh, and then I have to hit the FL compound to finish drywall in the lanai and set up the outdoor kitch/bbq station.

Bitch is I've only been home 5 days of the last month.
Scott

A/C blows cold, and used it recently to wax the '21 in that most recent insane heat/humidity wave that we had. Can't wait till you're back.

[ZipZap]

Originally Posted by Datawiz

A/C blows cold, and used it recently to wax the '21 in that most recent insane heat/humidity wave that we had. Can't wait till you're back.

Thoughts and prayers

[TripleBlack]

Originally Posted by dvarapala

OK, so the cameras are on the same internal network as the rest of your computers. Which means any one of those cameras can establish an outgoing connection to China just like the rest of your computers can - they don't need a "hole in the firewall" (i.e. port forwarding) in order to do that. Also, depending on how secure your router is, they may be able to configure port forwarding anyway, even without admin access to your router's config page.

Not exactly optimal from a cyber-security perspective.

I know just enough about LAN networks to be dangerous... wouldn't a separate, properly configured VLAN be able to isolate a camera network from the internet? That had been my plan.

[ZipZap]

Originally Posted by TripleBlack

I know just enough about LAN networks to be dangerous... wouldn't a separate, properly configured VLAN be able to isolate a camera network from the internet? That had been my plan.

Yes. You are still depending on encryption as a basic defense. I believe Data has gone to a hardwired solution, which is basically the gold standard for protection. No connection to rf or internet.

[Datawiz]

Originally Posted by ZipZap

Yes. You are still depending on encryption as a basic defense. I believe Data has gone to a hardwired solution, which is basically the gold standard for protection. No connection to rf or internet.

I have two wireless networks on my system, and two wired networks, both have different subnets. If I have configured it correctly, the network that the cameras are on have no access to the outside world. I'll have to test it again and confirm that's the case, but I think I'm good. And if I'm not...except for the garage camera, everything is outside the house, so no personal risk to me and my family. I don't do cameras inside the house.

[dvarapala]

Originally Posted by TripleBlack

I know just enough about LAN networks to be dangerous... wouldn't a separate, properly configured VLAN be able to isolate a camera network from the internet? That had been my plan.

That would be a good start. Don't forget that you also want to isolate the camera VLAN from the VLAN that the rest of your house is on, not just from the Internet. There is malware out there that uses network-connected appliances like cameras and printers to pivot into private networks that are behind a firewall, so as long as everything is on the same (V)LAN there is a danger.

Bottom line, the only things that should be on your camera (V)LAN are the cameras themselves and one port on your NVR. And make sure your NVR is locked down tight as well.

[ZipZap]

Originally Posted by Datawiz

I have two wireless networks on my system, and two wired networks, both have different subnets. If I have configured it correctly, the network that the cameras are on have no access to the outside world. I'll have to test it again and confirm that's the case, but I think I'm good. And if I'm not...except for the garage camera, everything is outside the house, so no personal risk to me and my family. I don't do cameras inside the house.

Last thing to do is make your home a Faraday cage so we can't sniff you.

[dvarapala]

Originally Posted by Datawiz

I have two wireless networks on my system, and two wired networks, both have different subnets. If I have configured it correctly, the network that the cameras are on have no access to the outside world. I'll have to test it again and confirm that's the case, but I think I'm good. And if I'm not...except for the garage camera, everything is outside the house, so no personal risk to me and my family. I don't do cameras inside the house.

Here's a test: from your desktop PC, see if you can PING the IP addresses of any of your 16 cameras. If you get a response, then you're vulnerable to the issues I have been talking about.

[Bill]

Originally Posted by OnPoint

Meh.

Just choot 'em Lizbeth.

Originally Posted by ZipZap

*Lizbet

YouTube

[ZipZap]

Originally Posted by bill_daniels

https://www.youtube.com/watch?v=1Ns8uGaG1is

His best joke was a trounce on one of my CA towns.

El Segundo has had an interesting history. It's named "the second" because Chevron set up their second refinery in CA there, behind Richmond. The town has a reputation for it's unofficial motto; Walk straight and be white. There was a sign in the day that said, in essence, be gone by sundown. Like South San Fransisco, it was a working town. We still call it Mayberry by the Sea.

Ol' Redd was lit up and driving down Imperial Highway one night. ESPD threw him in the slammer and not recognizing his stature really pissed him off.

"My wife asked me to kiss her where it smells. I took her to El Segundo."