Help Connecting to CCTV DVR behind Pfsense - PORT FORWARD TO CCTV DVR
-
Hi All, I have a Q-SEE DVR CCTV that is running on a local network behind Pfsense that i want to connect to (view) from home (externally) but i haven't been successful in setting up my port forwards to get access to the cameras externally via the web GUI on the DVI.
I am running Pfsense 2.0.1 with Dual WAN Fail-over -2 WAN+1 LAN (3NICS). all ports on the firewall are closed only ports that we use are open (outgoing). Port 6036,81 and 80 is open for outgoing.
I have a Q-SEE DVR CCTV that is connected to the network (IP-192.168.0.15). The DVR listens on Port 81 (i changed it from the default port 80)
I have setup a dynamic dns account at myq-see.com for the Q-SEE DVR Device and i am able to ping the assigned dynamic "address name" that was given (example.myq-see.com) but i cant connect to the DVR it Always Times Out. (what could be the problem :()
I am not sure if my port forwards are working or if the are correctly configured for the device.
Can someone who has a similar setup/experience connecting to CCTV behind Pfsense share there settings ??Any help appreciated.
Thanks in advance
Here are my port forward rules
-
Try to create this kind of rule first
-
Try to create this kind of rule first
Thanks for replying to my post, after some major fiddling around and a lot of add/delete rules. I manage to get access to the camera working (remotely) but i'm not sure if my configuration is the Best/Safest way.
I am just glad its working now.see screen-shots links below of my setup you can give some feedback (if you can/must)
Thanks Again
-
Your ruleset is ok. If you don't want to give more than one portforward rule than one per device, then you could use port aliases. You can add up all the ports what that device need.
-
Your ruleset is ok. If you don't want to give more than one portforward rule than one per device, then you could use port aliases. You can add up all the ports what that device need.
Thanx Much!
I'm actually using Aliases with the Firewall Rules, i'll give some thought to Port Aliases.Thnx Again