Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 4945 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall not blocking IP Camera Traffic

lawler
I'm trying to block my two IP cameras from accessing the internet. The cameras are D-Link cameras that periodically attempt to connect to D-Link's servers. I setup firewall rules to stop all traffic from the two static IP addresses belonging to the camera, but it seems like the web filter is allowing the traffic out before it reaches the firewall. This is my assumption because the firewall logs don't show traffic from the camera, but the web filtering logs show outgoing traffic to the internet. The firewall rule blocking the cameras access to the internet is my first user created rule.

The web filter is setup using transparent mode with "Internal Network" listed under allowed networks.

What do I need to change to stop the cameras from accessing the internet?


Here is an example from the web filtering log: 

/var/log/http/2015/03/http-2015-03-07.log.gz:2015:03:07-21:04:10 DOMAIN httpproxy[28942]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.x.x.x” dstip="54.238.186.67" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (iPhone)" filteraction="REF_HttCffAllow (iPhone)" size="3307" request="0xe3b3f000" url="54.238.186.67/" referer="" error="" authtime="0" dnstime="2" cattime="216180" avscantime="0" fullreqtime="710048" device="0" auth="0" ua="" exceptions="" country="Japan" category="9998" reputation="unverified" categoryname="Uncategorized" 



/var/log/http.log:2015:03:08-08:21:55 DOMAIN httpproxy[28942]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="CONNECT" srcip="192.x.x.x” dstip="54.193.41.31" user="" ad_domain="" statuscode="200" cached="0" profile="REF_HttProContaInterNetwo (iPhone)" filteraction="REF_HttCffAllow (iPhone)" size="368411" request="0x988c000" url="54.193.41.31/" referer="" error="" authtime="0" dnstime="2" cattime="215837" avscantime="0" fullreqtime="40664325754" device="0" auth="0" ua="" exceptions="" country="United States" category="9998" reputation="unverified" categoryname="Uncategorized"


Thanks in advance.


This thread was automatically locked due to age.