How safe is my server from hackers?

[Goobie]

Hello,

my cctv cameras at home feeds into a pc with a dvr card that also runs as a server so I can view the images from work. The software (DICO800) that runs the server is not setup with a password, I basically type in the xxxx.dyndns.org URL and up comes the cameras. To allow this I opened up port 80 on the router and set it up to forward all incoming traffic to 192.168.1.107:910, the IP and port number of the cctv server. Windows firewall is running but allows traffic through to port 910.

So port 80 is open and forwarding traffic to port 910 of the server. How easy is it to hack this setup? Apart frrom taking the server down, what can I do to protect myself?

thanks

 

[davemc]

You have to examine the functionality provided by the camera software. If that software allows me to upload data and store it on your machine, and the allows me to launch software, then your risk is very high.

But, why not chose a port number like 25678 instead of 80 ?

A port scanner will find that port and identify the web service running there, but a casual hacker will give up after the standard ports are examined.

But, in general, you need to determine what can be done with the camera software. I ran a system that did this (view my 4 camera's from work) on a random port for more than 3 years and never had any problems that I was aware of.

I routed the data through a tiny piece of software that logs all ip traffic coming in, but I only checked the logs initially and cannot say for sure that no attempts were made to try to hack my software.

 

[ColinR]

Does your work run off a static IP internet service?
If so, only allow external connections from that IP in on the router forwarding.