Re: Home Automation - Firewalls

[Doogie Brodie <ukhad@xxxxxxxxxxxxxxxx>]

Mark McCall wrote:

> Whilst I have nothing that needs to be open to the public I will need
access
> to some things from the outside like my CCTV server, TiVo, Comfort
etc.  I'm
> unsure whether those systems need to be on the DMZ or not?

Hi Mark,

An important thing to think about is who needs access, from where and on
what device.

If you can say that only you need access, from work or dialup on the
road always from your laptop, then you can get around this whole issue
by using VPN.

I used to have NAT pinholes for Tivo (reverse proxied with Apache),
Homeseer etc etc, but then when I got the Vigor, realised that the
easiest thing to do was to make a VPN connection from my machine in the
office to the LAN in the house, which then gives you full access to
everything inside without having to expose any services publicly except
for VPN.

Of course, if you want to access something from a WAP gateway/ HTML on
phone or PDA device, then a VPN client is unlikely to be available so
you're back to hole poking, same if you want some services to allow
public guest access (!!!) - perhaps for demoing or something.

Cheers
--
Doogie


UK Home Automation Meet 2004 - BOOK NOW!
http://www.ukha2004.com

http://www.automatedhome.co.uk

Member Offers - http://www.freeranger.co.uk/ukha