1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
  2. SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

    Dismiss Notice
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

Install script (noob friendly?)

Discussion in 'Asuswrt-Merlin' started by Geo92, Jan 28, 2020.

  1. Geo92

    Geo92 Occasional Visitor

    Joined:
    Jun 27, 2019
    Messages:
    13
    After 2 days I finally managed to fix my problems to get VPN access to my cameras/LAN. However, I am paranoid about my IPCam and NVR. Just the one camera (so far) and an NVR. I already blocked off all internet access from the IPCam within the Router (RT-AC87U, Merlin) self, under Client Status and blocking it that way.

    However, I can't do it that way with the NVR or I am losing VPN access also. I went digging around the last hours and found several solutions, one with a script and another one. But it's a bit much for me to grasp, I already know how to use Xshell and enter my router. But at that point I am clueless. All I really require is to block 1 static ip (the NVR) from accessing the internet, but only allow me accessing the camera via VPN tunnel (and perhaps also allow NTP).

    Treat me as if I have no clue at all about this, and that is more or less the case.
    Thanks for any help if possible.
     
  2. Jack Yaz

    Jack Yaz Part of the Furniture

    Joined:
    Apr 20, 2017
    Messages:
    2,772
    You can use something like this: https://gist.githubusercontent.com/...81d9fa5ea65a42b03e05c41ea/blockwanallowvpn.sh

    Replace 10.14.16.81 with the IP of your NVR. Create a file named blocknvr.sh or similar in /jffs/scripts (make sure to run chmod +x on it afterwards!)

    Next, create /jffs/scripts/fireall-start (chmod +x also) and add:
    Code:
    #!/bin/sh
    
    #Block NVR from WAN
    /jffs/scripts/blocknvr.sh &
    
     
    L&LD and Stevens243 like this.