Access internal URL from generic external? (webcam snapshots, w/ security)

MrPete

I've done some searching and haven't found a discussion of the following. Presumably this ought (lol) to be simple.

I have a webcam aimed outside, accessible from a particular internal URL of the form http://ip.ad.d.r/cgi-bin/api.cgi?cmd=Snap&channel=0&user=username&password=pw
I want to hide that entire URL, and provide a simple external URL that retrieves the (JPG snapshot) available there, eg http://snapshot.example.com (or https, I don't care ;) )

The idea being, I do NOT want people to access any other URL related to that internal IP.

Anyone with idea(s) how to do this? Seems it ought to be simple in pfSense, perhaps HAproxy or ??? But I haven't found anything that fits.

THANKS!

stephenw10

I assume you also don't want external users to need to know the login there?

Probably easiest to use a separate server that pulls the jpg from the webcam.

Otherwise it would have to be a proxy of some sort but I'm not sure if HAProxy could redirect to that specifically without revealing any if the internal details.

hadrins

@stephenw10 I agree.
I would up vote but don't have the reputation.
This is more of a configuration of the server serving that image,
Netgate would only handle the port forwarding to the server.

Gertjan

@MrPete said in Access internal URL from generic external? (webcam snapshots, w/ security):

I have a webcam aimed outside, accessible from a particular internal URL of the form http://ip.ad.d.r/cgi-bin/api.cgi?cmd=Snap&channel=0&user=username&password=pw

So not really "user friendly", but you could make a browser favorite.

Also, normally, cameras and stuff like that should never be made accessible from the outside.
Isn't there some sort of phone or tablet app avaible that handles everything for you ?
And before you use the camera app, you fire up another app that makes everything secure : OpenVPN.
This is well tested since 2019 (member when everyone worked from home ?).

stephenw10

I think this is to allow access to single snapshots for the general internet rather than actually viewing the webcam directly. I had something like that setup at one time (a while ago!) and used a separate webserver with a script that periodically pulled a jpg.