A guide to securing and locking down your FOSCAM cameras
Вставка
- Опубліковано 9 лип 2024
- I have 4 FOSCAM IP cameras and one FOSCAM NVR (DVR) -- and in this video I explain what I think is a good way to secure the cameras. It includes information on blocking ports and the best way to do this.
Warning: Full of nerd content, talking about firewalls and port forwarding. :-) - Наука та технологія
thanks for the video. i had no idea how to use that firewall section in my router and i've had this asus router for years now.
So helpful man. Have a Netgear R7000 with the same firmware - made life really easy for me thank you. Also can turn off UPnP off in the WAN tab which helped.
My Foscam cameras (different model) behave slightly differently re: NTP. My firewall blocks all outgoing traffic from the cameras, except NTP (123) and email (25 ?). My cameras are able to set the time properly.
Well done!
Excellent video well presented! I have several FI9826W installed under eaves and in a birdhouse with vinyl siding roof. Anyway, these old cameras are NOT supported by the FOSCAM SW that requires a patch that even Mozilla blocked. So it is hard to get into them any more. My issue is they are still on DCHP and keep changing their ports, even though the power is up, but I could battery back that up. Also I forgot how to set up Port Forwaeding in my old router, now on a TP-Link. Any advice???? We do use Tiny Cam or some other app a Russian made that is great on Tablets as video monitors...
Good analysis of the camera. I looked up several of those IP addresses that you saw in you log with www.iplocation.net and they are owned by Google, Amazon and ChinaNet, etc - popular sites on the net, and a quick way for the camera to discover if it has internet access as you discovered. If you were to use Wireshark, you would probably see an HTTP query to those IPs. So it's probably not a 'bad' thing in terms of security (though I understand your precautions). I watched similar traffic from my cheap network cam and noticed a lot of UDP packets to many IPs in the USA, Europe and China. These are probably servers to allow a mobile app to connect to the camera without having to port forward. These do make me a bit nervous, so I block them like you did in the router. One possible reason for a camera to legitimately connect out would be for a firmware update. So blocking outbound traffic would prevent updates. (Although realistically I doubt the company ever does this)
So, how are you suppose to view the cameras remotely?
Port forwarding. Or OpenVPN can be used for a remote internet device to get a vpn tunnel into a home network with a LAN address. So then access the cameras through the vpn with a lan ip.
Hey Adrian, can I hire you to hook up my cameras?? Seriously! I have two cameras and when speaking to Foscam to have them hooked up to my network and the internet they are telling me to activate everything you are saying not to. Make me scared to even have these running!