Install script (noob friendly?)

[Geo92]

After 2 days I finally managed to fix my problems to get VPN access to my cameras/LAN. However, I am paranoid about my IPCam and NVR. Just the one camera (so far) and an NVR. I already blocked off all internet access from the IPCam within the Router (RT-AC87U, Merlin) self, under Client Status and blocking it that way.

However, I can't do it that way with the NVR or I am losing VPN access also. I went digging around the last hours and found several solutions, one with a script and another one. But it's a bit much for me to grasp, I already know how to use Xshell and enter my router. But at that point I am clueless. All I really require is to block 1 static ip (the NVR) from accessing the internet, but only allow me accessing the camera via VPN tunnel (and perhaps also allow NTP).

Treat me as if I have no clue at all about this, and that is more or less the case.
Thanks for any help if possible.

 

[Jack Yaz]

After 2 days I finally managed to fix my problems to get VPN access to my cameras/LAN. However, I am paranoid about my IPCam and NVR. Just the one camera (so far) and an NVR. I already blocked off all internet access from the IPCam within the Router (RT-AC87U, Merlin) self, under Client Status and blocking it that way.

However, I can't do it that way with the NVR or I am losing VPN access also. I went digging around the last hours and found several solutions, one with a script and another one. But it's a bit much for me to grasp, I already know how to use Xshell and enter my router. But at that point I am clueless. All I really require is to block 1 static ip (the NVR) from accessing the internet, but only allow me accessing the camera via VPN tunnel (and perhaps also allow NTP).

Treat me as if I have no clue at all about this, and that is more or less the case.
Thanks for any help if possible.

You can use something like this: https://gist.githubusercontent.com/...81d9fa5ea65a42b03e05c41ea/blockwanallowvpn.sh

Replace 10.14.16.81 with the IP of your NVR. Create a file named blocknvr.sh or similar in /jffs/scripts (make sure to run chmod +x on it afterwards!)

Next, create /jffs/scripts/fireall-start (chmod +x also) and add:

#!/bin/sh

#Block NVR from WAN
/jffs/scripts/blocknvr.sh &