IPCamsBlock.sh with YazFi ??

[lokester]

Asus RT-AC3100 with last Merlin FW for that EOL model,
I have YazFi installed with most of my ESP IOT devices on YazFi guest 2 subnet. 172.16.95.xx
I have @Martineau's IPCamsBlock script installed for VPN access to my IP Cams
I have 2 ESP32 devices with Webcam output on the YazFi network (...95.xx) and 5 IPcams POE hardwired to the router on the main LAN 172.16.85.xx subnet.
I have my "IPGroups" config file populated with all 7 IP addresses (5 of the ..85.xx and 2 of the ..95.xx)

When away from home, using my cell phone and VPN Client, I can access video feed on the IPCams on the 172.16.85.xx but not the 2 devices on the YazFi network.
Using my cell phone at home connected to WiFi, I can access all 7 IP cam feeds.

Is there another tweak I can make to to the IPCamsBlock configuration to allow VPN access to the 2 webcam feeds on the YazFi guest network or should I just take these 2 devices on the YazFi guest network and put them on the 172.16.85.xx Guest Network 1 ?

Here is output of IPCamsBlock status:

(IPCamsBlock.sh): 20261 v1.12 I/P Cameras Firewall blocking.... status


Chain FORWARD (policy DROP 0 packets, 0 bytes)
num   pkts bytes target     prot opt in     out     source               destination
7     885K   91M MyIPCAMs   all  --  br0    *       0.0.0.0/0            0.0.0.0/0

Chain MyIPCAMs (1 references)
num   pkts bytes target     prot opt in     out     source               destination
1        0     0 ACCEPT     udp  --  br0    eth0    0.0.0.0/0            0.0.0.0/0            udp dpt:123
2        0     0 DROP       all  --  br0    !tun2+  172.16.85.132        0.0.0.0/0
3     180K   11M DROP       all  --  br0    !tun2+  172.16.85.133        0.0.0.0/0
4     119K 7167K DROP       all  --  br0    !tun2+  172.16.85.134        0.0.0.0/0
5     119K 7156K DROP       all  --  br0    !tun2+  172.16.85.136        0.0.0.0/0
6     180K   11M DROP       all  --  br0    !tun2+  172.16.85.137        0.0.0.0/0
7        0     0 DROP       all  --  br0    !tun2+  172.16.85.138        0.0.0.0/0
8        0     0 DROP       all  --  br0    !tun2+  172.16.85.139        0.0.0.0/0
9        0     0 DROP       all  --  br0    !tun2+  172.16.95.43         0.0.0.0/0
10       0     0 DROP       all  --  br0    !tun2+  172.16.95.47         0.0.0.0/0

(IPCamsBlock.sh): 20261 I/P Cameras Firewall blocking status request completed.

 

[bbunge]

Sounds like you have a complicated setup with poor results. Why not have your cams record to a local server you can make from an old PC or even a Raspberry Pi? With Zoneminder, open source, you can access all the cams from one connection and block all the cams from the internet if you want. See: https://zoneminder.com/