• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

NAT workaround

G

Grentz

Fully [H]
2FA
Joined
May 5, 2006
Messages
17,320
Have a bit of an odd situation, but definitely not rare.

Have a network that I cannot forward ports on (the external firewall is carrier locked down), that said, I have a camera that I would like to get access to.

Wondering if anyone has seen a man in the middle solution to this. Similar to what products like Logmein and Hamachi do to get around having to forward ports, they keep a connection alive based on an internal client reaching out.

I have plenty of servers that I could setup for this purpose at other locations, just having trouble locating software with the ability to do this.
 
STunnel if you just need a port to port mapping forwarding.

If the camera is inside this NAT that you can't forward ports on but you have another server there that you can get certain ports to like 80 or 443 then you can set STunnel up on that server so that when it receives a connection from certain IPs or any if they have a certificate match then it will forward to the destination IP:port

If you camera is outside the NAT and you're inside the NAT that can't forward ports or wont let you connect to anything but 80 and 443. Then put STunnel on a server using 80 or 443 and have it forward to the IP:port of the camera wherever it is.

I used this tool a lot when bouncing connections for discreet purposes. Takes a little bit to setup.
 
The camera is behind a NAT Firewall that I cannot forward ports on. I could put a server within the same private network as the camera, but I still cannot forward ports to it.

I have access to other servers in different networks that I can forward ports to.

EDIT: Looks like what I am looking for is a TURN or STUN client/server to use as a relay. I can setup the server on one of my public networks and put the client on the network that is behind the NAT.

That said, I am having trouble finding a program already setup to do this, that is not simply a code example.
 
Last edited:
I see, so your hope is to have the server establish a outbound vpn connection of sort to allow you to tunnel in.

This might help you out.
It allows you to do a SSH Reverse tunnel(initiated from the inside NAT side via a server placed there) to an external client or server and then you could setup another stunnel on that internal server or something to forward a port or allow you to connect to that webcam. You could do the SSH Reverse tunnel without STunnel but that would be detected by IDS if you're worried about that.

http://www.bsdnow.tv/tutorials/stunnel
 
You must log in or register to reply here.
Back
Top