CCTV Port Forwarding



  • Hello

    I have Standalone CCTV DVR i assigned IP 192.168.1.50/24

    then  i want to view this external connection so i used port forwarding

    WAN TCP/UDP * * WAN address 8003 192.168.1.50 80 (HTTP) WEB CCTV
    WAN TCP/UDP * * WAN address 8003 192.168.1.50 9000 WEB CCTV

    i can able to see the webpage of my CCTV with login the only problem is when i tried to login the account it appears login failed
    I believed the account is correct so i tried internal connection yes i can able to login, so i opened the port 80 for HTTP and 9000 for Media Port.

    i dont know if do i need to open database port?

    Thanks

    ![cctvwebfailed to login.png](/public/imported_attachments/1/cctvwebfailed to login.png)
    ![cctvwebfailed to login.png_thumb](/public/imported_attachments/1/cctvwebfailed to login.png_thumb)


  • LAYER 8 Netgate

    Completely depends on what the software requires. There is no way for anyone here to know what ports are required. Post the documentation from the manufacturer.

    Most people here would likely use a VPN for this sort of thing over port forwards with source any.



  • Thanks for your reply Derelict,

    I have copied of my CCTV operational manual it says here port must be opened port: 9000, 8080 and 554 Protocol: TCP/UDP

    VPN connection it works for me but sometimes i dont want to use VPN to login after that connect to my CCTV web.

    but if not possible to port forwarding, i have no choice to use vpn.


  • Rebel Alliance Developer Netgate

    CCTV systems have notoriously weak security. Ask yourself: Would you really want someone (not you) to be able to view your cameras over the Internet?

    Leaving such a system exposed is a ticking time bomb. Adding a VPN is pretty easy (especially OpenVPN), and eliminates the possibility that a vulnerability in your CCTV device will expose your cameras (and perhaps your entire LAN) to an attacker.

    Save yourself the potential headache and don't port forward that traffic. VPN all the way, every time.


Log in to reply