Blocking internet on cameras makes them inaccessible via VPN
reddit / selfhosted

----------------------------------------------------------------------
devshore · 2023-10-30 04:32

This makes no sense. I have some reolinks and a Ubiquiti Dream Machine
router. I am trying to block the internet on to make them only
accessible via local network and VPN. I go to uniquiti / settings /
application firewall / traffic rules, and there I choose "block", then
"internet" in "category", and select my cameras. This makes them
inaccessible from the internet, but accessible via local network.
Great. But then, if I connect to my cellphone's internet and turn on
the wiregaurd VPN connection to my UDM, the connection works (I can
use internet), but the cameras are not accessible. What is going on?

----------------------------------------------------------------------
zfa · 2023-10-30 06:21

Better asking /r/ubiquiti dude.

----------------------------------------------------------------------
wideace99 · 2023-10-30 06:23

How about troubleshooting ?

----------------------------------------------------------------------
hyperblu7 · 2023-10-30 07:00

I maybe wrong, but openvpn connections I believed are assigned a
127.0.x.x  address. You may need to assign additional routing
parameters.

----------------------------------------------------------------------
ElevenNotes · 2023-10-30 09:36

Check your routing. You probably forgot to push the routes of your
security camera subnet to your client config.

----------------------------------------------------------------------
liveyourdreamsmax · 2023-10-30 10:54

Sounds like an acl or mdns issue. Probably mdns

----------------------------------------------------------------------
taxigrandpa · 2023-10-30 13:49

somoene is downvoting all the answers they dont like

it's routing, you need to allow traffic from the VPN subnet to the
cameras otherwise the traffic is classed as internet

----------------------------------------------------------------------
devshore · 2023-10-30 15:04

This sounds correct. Where do I do this? (Which section of ubiquiti
settings)

----------------------------------------------------------------------
kmisterk · 2023-11-06 18:50

## Post Removed

Hey, devshore!

Thanks for your submission on selfhosted.

Your post has been removed due to a violation of the purpose of the
subreddit: **Self Hosting**

## Not Self-Hosted

When it comes to posts regarding applications in this subreddit, they
must feature a self-hosted tool, or a tool that *can be* self-hosted,
or some kind of related information, help request, or otherwise
related to a tool that is something that one can self-host.

If you believe this post *is in fact* relevant to /r/selfhosted, feel
free to [message the mods](https://www.reddit.com/message/compose/?to=
/r/selfhosted&subject=Removed For Not Being Self-
Hosted&message=[Removed
Post](https://www.reddit.com/r/selfhosted/comments/17jlfbs/-/\)) with
your concerns.