port forwarding

[BallzDeep]

Need help with setting up a port forward from my phone to my home network so I can access my security cameras remotely 

[Needfuldoer]

12 minutes ago, BallzDeep said:

Need help with setting up a port forward from my phone to my home network so I can access my security cameras remotely 

You don't want to do this with port forwarding. That exposes your cameras to the wide open Internet, so anyone doing a port scan can find them.

 

Set up a VPN with WireGuard or TailScale instead. That creates a secure tunnel so only your devices can reach back home.

[BallzDeep]

41 minutes ago, Needfuldoer said:

You don't want to do this with port forwarding. That exposes your cameras to the wide open Internet, so anyone doing a port scan can find them.

 

Set up a VPN with WireGuard or TailScale instead. That creates a secure tunnel so only your devices can reach back home.

Have never done any of this. So glad you warned me. I was told. It was less safe. But doesn't require a subscription to a VPN. Was also told there was ways to make a port forward hidden?  Not sure how it all works. But I will look into what you suggested. 

 

Thank you 

[OddOod]

There is no way I am aware of to hide that a port is open. It's kinda how networking/the internet works. 
If you have a machine at home that is always on, setting up tailscale with wireguard should be pretty easy. And the free personal plan should be enough to get this working
One nice thing is, if you have a pihole, you can actually get those filtering benefits on your phone wherever you go!

[Eigenvektor]

1 hour ago, BallzDeep said:

Have never done any of this. So glad you warned me. I was told. It was less safe. But doesn't require a subscription to a VPN. Was also told there was ways to make a port forward hidden?  Not sure how it all works. But I will look into what you suggested.

A subscription is needed if you want to use some company's VPN servers to connect to the internet.

 

Hosting your own VPN server at home and connecting to it from outside (to access devices on your private network) does not require a subscription. It does, however, require you to set up a VPN server on some machine that is "always on". For convenience you'll likely also want to use a DDNS service, so you can connect using domain name, rather than an IP. That might require a subscription, but many providers have a free tier.

 

1 hour ago, OddOod said:

There is no way I am aware of to hide that a port is open.

There is, but it's not necessarily simple the set up or foolproof. Look into "port knocking".

 

The port will act as if it is closed, until a specified sequence of connection attempts (i.e. "knocks") is received. Then it will accept a connection request from that source IP for a certain amount of time.

[BallzDeep]

Thank you everyone who gave info on this.. managed to get the camera app working without the need to make one. But not sure if it will be reliable.  The current app I'm using is ICsee. Came with the camera. But wasn't connecting the other day when I tried and skys where blue. Today pouring rain and it works go figure. 

 

Not sure if I should buy an POE NVR or DVR? And can use that as my always online VPN? Or would it require a computer. I do have a spare laptop that's not doing anything but collecting dust. Figured it would be good on power and can use the Ethernet port? 

 

Just not sure best way to go or what ways I can go. 

[BallzDeep]

Was thinking about something like this? Not sure if I need poe if it is wireless capable and can just run camera power off the original plugs? 

[OddOod]

39 minutes ago, Eigenvektor said:

There is, but it's not necessarily simple the set up or foolproof. Look into "port knocking".

 

Fair. In fact, I thought of an almost identical solution so I'm unsurprised that it's a real thing. But as you say, it's complicated, and OP clearly wants easy (no judgement, I usually want the same) 
 

8 minutes ago, BallzDeep said:

Not sure if I should buy an POE NVR or DVR? And can use that as my always online VPN? Or would it require a computer

Most NVRs are just really REALLY lightweight computers running some flavor of linux hooked up to a bunch of storage. In theory most should allow you to get in via SSH and do whatever you want, but you'd have to do a lot of research on which makes and models don't lock themselves down as well as learn how to set up a VPN via commandline
Alternatively you could pick up some old office PC, slap a couple drives in it, run TrueNAS, and build your own NVR server that can also host your VPN and whatever else you want it to do. 
The sky (and your wallet) are kind of the limit here. 

[BallzDeep]

I was kinda thinking about getting bluestacks and downloading the ICsee app on that and then somehow get PC remote access? so I can view app and check cameras when it's not working when i am away from my wifi?   But not sure if that will still require a VPN? 

 

Cameras all have there own 500gb SD cards and the app allows you to download any footage or pictures. 

So not sure if the NVR is just a waste of money cause the cameras have their own storage. 

 

Seems like the cheapest way I could do it.

4 of my cameras are wireless and 1 allows poe connection as well as wifi. Don't trust Wi-Fi cause a nanoflipper can just jam the signal or whatever but I have  to try and work with my existing hardware till I can put some funds together for a different setup. Or find a way to make connecting remotely safe so that my neighbor cant just get into my cameras somehow. 

 

Also am trying to connect via Android phone so not sure if that throws some hoops in the mix. 

 

 

[ianm_ozzy]

I suggest you look into zero trust networks,  like tailscale or zerotier.

 

You will need a little networking knowledge though.

A vpn may help, but will probably cost money with obvious privacy  issues.