Solved Help blocking incoming traffic

[macster2075]

Trying to block incoming traffic only to one of my IP cameras.
So far I have tried

iptables -I INPUT -s 192.168.1.126 -j DROP

but, that doesn't seem to work.
Is this correct?

Thanks.

 

[ColinTaylor]

Incoming from where?

 

[macster2075]

Incoming from where?

incoming traffic from outside network.

 

[ColinTaylor]

So you've got a port forwarding rule for 192.168.1.126? Try using the FORWARD chain rather than INPUT.

 

[macster2075]

you mean like this?
iptables -I FORWARD -s 192.168.1.126 -j DROP

 

[Tech9]

Block Internet access doesn't work?

 

[ColinTaylor]

you mean like this?
iptables -I FORWARD -s 192.168.1.126 -j DROP

Yes.

 

[macster2075]

Block Internet access doesn't work?

That blocks internet access altogether. I only need to block incoming traffic to this camera.
When internet access is blocked...it starts disconnecting/reconnecting every few minutes...very annoying.

It only stops doing that when I enable internet access. I am trying to test if the issue is gone by blocking incoming connection only.. just a test.

 

[ColinTaylor]

It only stops doing that when I enable internet access. I am trying to test if the issue is gone by blocking incoming connection only.. just a test.

You could also test by removing your port forwarding rule.

 

[macster2075]

You could also test by removing your port forwarding rule.

there is no port forwarding rule. It was removed.

 

[ColinTaylor]

there is no port forwarding rule. It was removed.

Then there's no point using your iptables command because there is no "incoming traffic from outside network".

 

[macster2075]

Then there's no point using your iptables command because there is no "incoming traffic from outside network".

Maybe I am not explaining what I meant. When I am outside my network, I can access this camera via its app.
I would like to NOT be able to do that from outside my network and only have access to it when I am inside my network.

Does that make sense? Not sure If I am using the correct term here.

 

[ColinTaylor]

Then you'll have to explain to us how, technically the app is accessing the camera. Without knowing that we don't know what we're meant to be blocking.

 

[macster2075]

Thanks for your time.

 

[ColinTaylor]

Is your camera using UPnP to forward ports perhaps? You can check on the router at System Log - Port Forwarding.

 

[macster2075]

Is your camera using UPnP to forward ports perhaps? You can check on the router at System Log - Port Forwarding.

On the Connections tab, I see the camera there and I can see an external destination IP.
Does that mean that IP is where the camera is trying to connect to?

 

[Justinh]

The app is probably negotiating thru the camera company's web services. If you know their IP address(es) and/or any special ports it uses, I'd think you could use one of these to accomplish your goal:
- network services filter
- URL filter
- or port-forwarding (into a black hole), this can also specify a remote IP

 

[Justinh]

Does that mean that IP is where the camera is trying to connect to?

I would think so.

 

[ColinTaylor]

On the Connections tab, I see the camera there and I can see an external destination IP.
Does that mean that IP is where the camera is trying to connect to?

As the previous poster said, it's likely using the company's servers as an access proxy. You could block that connection but that's effectively what you've already tried that created disconnecting/reconnecting problems for you. It might work if the disconnecting/reconnecting was caused by a lack of connectivity to DNS rather than the company server.

 

[macster2075]

My concern is that this company called WYZE are known for dialing home (China). They say they don't do that anymore, but I just don't trust them.

So when I disable internet access, I can view them while inside my network, but every few minutes the screen says disconnected, but then it reconnects right away.. it does it all day every few minutes when internet access is disabled.

As soon as I enable internet access, it stops doing that

I want to make sure no rogue employee from that company is able to access the camera.
Until I can get a different brand, I am trying to circumvent whatever is trying to do when no internet is available.

It's like it knows there's not internet access and it starts doing this.