|
|

 |
|
Port forwarding & dynamic DNS
In principle, port forwarding is where a firewall allows incoming HTTP requests
from the internet and then, forwards those requests to a specific port
number somewhere on its local area network. For a web-camera, the port in question
is the one assigned as the secondary web server port number; which is in the range
from 16385 to 65535 (or 8080). However, port forwarding generally requires that
the device has a fixed IP address on the network, and not the one set at
random by the DHCP server. Which means that the web-camera will need to be configured
with a fixed IP address. For example, 192.168.0.100
To make the web-camera accessible from anywhere on the internet also requires
that the router and firewall are made known to the internet. This requires defining
a Dynamic DNS domain name for the router; and not the web-camera. With security
implications in mind, the router will have it's own domain name recognisable
to any other computer out on the internet. On how to set up a Dynamic DNS name,
read the router's manual. Dynamic domain names are managed by third party Domain
Name Service companies. Their most basic service, which is providing dynamic
domains, is usually free.
Dynamic domain names are called so because the physical IP address of the router
as assigned by the ISP often changes; it is dynamic. When a router receives
a new IP address, it advises its dynamic domain name service with this information.
The dynamic domain name service then knows the current whereabouts of the router
on the internet. From a person's viewpoint, there is never any need to know the
ever changing IP address of the router, only to remember the never changing
dynamic domain name.
In the following example, a router-firewall is assigned a hypothetical static
domain name of:
meteometeo.dnsorg.org.uk
To view the web-camera's image called image.jpg
on a local area network from anywhere on the internet requires entering the
full dynamic domain name and the port number into a web browser:
http://meteometeo.dnsorg.org.uk:64321/image.jpg
Important: if only http://meteometeo.dnsorg.org.uk
was entered into the browser, then it is likely that the router would respond with
it's own log-on admin screen! Thus, exposing the entire local area network to potential
intrusion, especially if the router's administrator account and password were left
in their factory defaults. Port forwarding should only be used for private or restricted
use. For general public access, images should always be uploaded to some third party
disc space.
|
|