remote view firewall/protect computer

[jack111 0]

Have a GV800 geovision card set up on a dedicated computer which only runs geovision.

 

I would like to set it up so that friends and family can view the cameras.

 

So I am planing to connect the computer to the internet via linksys router.

 

But I need to make sure the geovision computer does not get hacked into. All other computers connected to the router have norton internet security installed. But donot want to install norton internet security on the geovision set up for obivious reasons. I think an unprotect computer gets infected in something like 23 minutes so how do i protect the computer.

 

1] Any links on set setting up a hardware firewall in the router and a step by step how to guide would be most appreciated.

 

2] Using a firewall..................Windows firewall and if I use it how to configure it or different firewall if so which one.

 

thanks

[VST_Man 1]

linksys router will protect you. As long as the Server JUST records video you won't need virus or firewall protection. Just set up the port forwarding to the Server.

 

guides? do a search on the forum as there are many good points, ect.

[rory 0]

Set up Port Filtering in the Network Advanced Settings.

 

Only Add TCP Ports required by Geo.

 

See this post for more info ..

 

http://www.cctvforum.com/viewtopic.php?p=36977#36977

[jack111 0]

Thanks for those links.......................simply great. Ran through the list. I Have just decided to use windows firewall, and pretty much removed everything else and ran ccleaner. Hope that should be secure enough.

 

 

How do I go about setting port filtering................any links or a how to do it step by step guide would be great.

 

THere are quiet a few ways to remotely monitor the cctv set up but .....

What is the most secure way to set up remote access i.e that others can view the cameras with a web browser from a remote location with user name and password.

 

Currently I use mutlicam remote viewer. As the geovision computer is in the attic and via an ethernet cable to the main computer I occassionally have a look at the cameras to see what is going on. But will be going on holiday soon and it would be nice if myself and friends and family can login from a browser from time to time to check on things.

 

Thanks in advance.

[rory 0]

Here is another document geared for security ..

 

http://www.bahamassecurity.com/uploads/XP-TWEAKING.pdf

[jack111 0]

Have done most of the suggestions above.

Would be grateful if you could tell me how well protected my pc is from getting hacked into.

 

Find the specifications and details of my pc in the signature.

Now the pc only runs geo vision software

 

I have disabled the features below,

Error Reporting Service

Fast User Switching

Help & Support

Indexing Service

Messenger

Netmeeting Remote Desktop Sharing

Remote Access Auto Connection Manager

Remote Access Connection Manager

Remote Desktop Help Session Manager

Remote Registry

Routing and Remote Access

Security Accounts Manager (unless you use IIS)

Security Center

System Restore Service

Themes

Universal Plug and Play Host

Wireless Zero Configuration (unless you use wireless)

 

Used ccleaner to clean up pc http://www.ccleaner.com/

So only go geovision software runing on it.

have uninstall IE and windows messenger using mozilla firefox instead.

 

The pc is clean for virus check.

 

 

Windows firewall

Have windows firewall enabled and in my exceptions have allowed port 80 4550 and 5550 and have allowed the programs below

 

blast tcp application

Webcam

Dynamic DNS server

HTTP SERVER

Microsoft Management Console

Multicam remote view system

Register Dynamic IP

TcpSvr Application

DMWebcam.exe port 80 opened

DMWebcam.exe port 4550 opened

DMWebcam.exe port 5550 opened

 

Local area in services on ly FTP server is allowed.

No other process are runing apart form geovision, TcpSvr application and webcam server

 

linksys router

Connect to the internet via a linksys router with port forwarding

80 , 4550 and 5550

Firewall in router is enalbed and Filter Multicast and Filter IDENT(Port 113) boxes are ticked.

 

How SAFE is my box from being hacked into.

[rory 0]

TCPServer requires port 3550 BTW, if you are only going to use WebCam no need to enable it.

 

Running any web server there is always going to be a "risk", but unless you are the CIA or something like a large Federal bank, who is looking ..

 

Windows Firewall only blocks incoming.

 

If they were to use IE then they could end up downloading something bad, so make sure to start with, Content Control is turned on, secondly turn security on high, thirdly disable IE in Program Access in Add Remove Programs. Even if you do this they can still goto the Contol panel or other and type a web address in the Address Bar, so thats why the following is essential.

 

Next change the port from 80 to another like 81, 82 or even others like 8234, etc .. use Port Filtering in the Network Connecttions TCP Properties, Advanced Tab. Enable Filtering on all TCP ports, add the ports you want opened.

 

Also note, dont install FireFox, there are some holes in that also, or moreso the issue is with Windows Media Player but still, trojans are able to get through. There are ways around it but best to leave it off.