Problem port forwarding two DVR

Rondras

Hi, new on the forum!

I'm trying to set up port forwarding for two DVR systems that we have in an hotel, we're accesing from another office but we're getting the same cameras on both web services when locally the people from the hotel can see different cameras on each DVR.
This is how I have the NAT configured:
1) WAN - TCP - Destination port: 82 - Redirected IP: 192.168.1.244 Redirected port: HTTPS(443) - Nat reflection: system default

2)WAN - TCP - Destination port: 81 - Redirected IP: 192.168.1.230 Redirected port: HTTP(80) - Nat reflection: system default

(It creates a rule for each one)

The second one is the web service that is showing the cameras from the other dvr, it shows the correct web service but not the cameras.
Both DVR have Upnp enabled(local: 192.168.1.254 wan: 192.168.6.254)

Any ideas on what it could be? Both are from Dahua, if it's of any help.

Thanks in advance!

johnpoz

First off I would not suggest you open up camera's to the public net.. Or dvr managing the camera's either.

Have you atleast locked down the rules to only limit the IP from your other office?

If your seeing the web servers your forwarding too.. Then your port forwards are working as they should. As to how those webservers provide the video of the cameras? That would have nothing to do with pfsense. Can you hit 443 when you access port 82 on 192.168.1.244, and do you hit 80 on 192.168.1.230 when you hit port 81.. If so then pfsense is doing what you told it to do.

Rondras

Yes I'm connecting to https on port 82 and http on port 80. The only problem is that we're getting the same image in both, I know it's not good to open cameras to external networks but that are my orders. P2P isn't working in one of the DVR and the other doesn't have P2P so port forwarding is the only solution, like you say it's working, yes, but the signals are getting mixed.
I imagined that was because the pfsense but could be something else, sure.

Also each rule applies to one IP, isn't open for others. Could be some option in the pfsense that is confusing the rules or something like that?

johnpoz

Pfsense is doing what you told it.. Its forwarding the traffic.. How the interfaces show camera video has nothing to do with pfsense.

jimp

Sounds like you have cameras that require using a specific port to operate and don't like being remapped.

Use a VPN instead. Aside from being more secure than opening DVRs up to the Internet, there is no NAT so it will probably work without any other adjustments.

Never open any cameras to the Internet like that. It's just asking for trouble.

Rondras

@jimp:

Sounds like you have cameras that require using a specific port to operate and don't like being remapped.

Use a VPN instead. Aside from being more secure than opening DVRs up to the Internet, there is no NAT so it will probably work without any other adjustments.

Never open any cameras to the Internet like that. It's just asking for trouble.

Ok, I will try to do that. I was thinking about that but I never did anything with VPNs before(aside of HOLA, like everyone)

Also, today we tried to uncheck https on the one that did have and suddenly it showed the cameras that I wanted to see but instantly started showing those cameras in the other DVR as well.