SFB Solutions Posted October 15, 2018 Posted October 15, 2018 Afternoon all, I have a difficult (i think) issue that im hoping somone has had before and can answer. I have installed a Hik Vision NVR in to a residential property and used a dynamic DNS domain to route the app through to the NVR. The internet provider is one that blocks internal traffic entering via a dyndns (sky) so they have an internal IP login as well as an external dyndns one. The internal login works perfectly as you would expect, its only using the internal IP address afterall. The external dyndns throws up a connection failed error. Now i hear you say your a donut and you have not set it up properly but hear me out please. On my phone (three is my provider) the system will log in via the app instantly via the dyndns name whether i am on a wifi network or 4g/3g. I can also use safari to go to the dyndns domain and log in to the NVR remotley. The clients phone will not discover the domain via safari and their provider is EE. The Hik App will not connect to the nvr via the domain name, only th einternal IP. I can sit in the office, ping the domain and it replies, i can log in to the domain via IE, Chrome or firefox no problem. I have checked and dyndns has updated the external IP. Can anyone throw any suggestions at me, i feel like ive checked everything with no other thoughts left bar its an EE dns lookup issue Hoping somene A understands my ramblings above and B has a suggestion or two bar calling EE and trying to explain the issue to them Alex Quote
al-yeti Posted October 15, 2018 Posted October 15, 2018 7 minutes ago, SFB Solutions said: Afternoon all, I have a difficult (i think) issue that im hoping somone has had before and can answer. I have installed a Hik Vision NVR in to a residential property and used a dynamic DNS domain to route the app through to the NVR. The internet provider is one that blocks internal traffic entering via a dyndns (sky) so they have an internal IP login as well as an external dyndns one. The internal login works perfectly as you would expect, its only using the internal IP address afterall. The external dyndns throws up a connection failed error. Now i hear you say your a donut and you have not set it up properly but hear me out please. On my phone (three is my provider) the system will log in via the app instantly via the dyndns name whether i am on a wifi network or 4g/3g. I can also use safari to go to the dyndns domain and log in to the NVR remotley. The clients phone will not discover the domain via safari and their provider is EE. The Hik App will not connect to the nvr via the domain name, only th einternal IP. I can sit in the office, ping the domain and it replies, i can log in to the domain via IE, Chrome or firefox no problem. I have checked and dyndns has updated the external IP. Can anyone throw any suggestions at me, i feel like ive checked everything with no other thoughts left bar its an EE dns lookup issue Hoping somene A understands my ramblings above and B has a suggestion or two bar calling EE and trying to explain the issue to them Alex Does it connect via the hik P2P on his phone? Quote
SFB Solutions Posted October 15, 2018 Author Posted October 15, 2018 I haven’t tried that yet, I always use my own dyndns domains on installs, I have inserted the ISP dns and the local router up address in to the secondary dns and this hasn’t worked. Quote
sixwheeledbeast Posted October 15, 2018 Posted October 15, 2018 25 minutes ago, SFB Solutions said: The internet provider is one that blocks internal traffic entering via a dyndns (sky) so they have an internal IP login as well as an external dyndns one. Sounds like a NAT loopback issue. 27 minutes ago, SFB Solutions said: I can sit in the office, ping the domain and it replies, i can log in to the domain via IE, Chrome or firefox no problem. I have checked and dyndns has updated the external IP. So you have proved the port forwarding and the DDNS/DNS from off site. 25 minutes ago, SFB Solutions said: The clients phone will not discover the domain via safari and their provider is EE. So it's just that device then? Have you tried a DNS check on the problem device? 40 minutes ago, SFB Solutions said: The clients phone will not discover the domain via safari and their provider is EE. The Hik App will not connect to the nvr via the domain name, only th einternal IP. DDNS was not up to date when this test was done? 12 minutes ago, SFB Solutions said: I have inserted the ISP dns and the local router up address in to the secondary dns and this hasn’t worked. Either switch the DNS service to something else or leave it default. The sites DNS must be working so changing these is unlikely to help. Quote
SFB Solutions Posted October 16, 2018 Author Posted October 16, 2018 (edited) Hi All, Quote So you have proved the port forwarding and the DDNS/DNS from off site. Yes, works perfectly on all devices bar EE mobile data So it's just that device then? Have you tried a DNS check on the problem device? No, not sure you can do this on an iphone? DDNS was not up to date when this test was done? No it was up to date, the phone just cant find the url for some reason Either switch the DNS service to something else or leave it default. The sites DNS must be working so changing these is unlikely to help. I have changed the DNS on the Hik unit to the Sky DNS and the secondary to the internal NVR IP I have been in a chat all morning with the EE technical team who seem to think they block any sort of port forwarding over their network, this could be the issue, i have also left a message for a tech guy in their community forum and hoping he can come up with some ideas. Today i will visit the customer and try and use the P2P QR code link rather than the port forward and see if this tricks the EE network in to allowing it through Edited October 16, 2018 by SFB Solutions Quote
al-yeti Posted October 16, 2018 Posted October 16, 2018 32 minutes ago, SFB Solutions said: Hi All, I have been in a chat all morning with the EE technical team who seem to think they block any sort of port forwarding over their network, this could be the issue, i have also left a message for a tech guy in their community forum and hoping he can come up with some ideas. Today i will visit the customer and try and use the P2P QR code link rather than the port forward and see if this tricks the EE network in to allowing it through So basically ee full of it and talking rubbish..... Quote
james.wilson Posted October 16, 2018 Posted October 16, 2018 are we blocking dyndns lookups. If the current wan ip address is working then id assume that Quote securitywarehouse Security Supplies from Security Warehouse Trade Members please contact us for your TSI vetted trade discount.
sixwheeledbeast Posted October 16, 2018 Posted October 16, 2018 P2P should work, no tricks needed. EE have been known for blocking ports but this would normally be outbound to stop you hosting services like port 80. If I understand correctly your EE side is the client? Also if I follow correctly you seem to have no issues from the client using the WAN IP? This ruling out blocked ports. Set the secondary DNS to itself? Just set NVR DNS1/2 to a trusted external DNS provider. I recall a thread a while back of something similar with new Hik units? I remember having a inkling it could be a Double NAT issue due to ISP (CGN) especially knowing the companies mentioned (EE, Sky VM etc) You would need to traceroute your DNS to diagnose that. I think this is what the guy from EE is trying to explain in simple terms. Quote
SFB Solutions Posted October 16, 2018 Author Posted October 16, 2018 Yes P2P has worked fine but it feels like ive cheated Yes EE were saying they block port forwarding but it isnt the phone thats doing the port forwarding. Yes the clients phone is on an EE contract Yes RE DNS, this was on the suggestion of Hik Tech support, i thought it best to speak to them about the issue prior to EE. I normally set DNS to google or alike. Thank you for your help Ive had the same issue on another client on EE but with a Qvis unit now, goign to try P2P with them also. Quote
SFB Solutions Posted October 16, 2018 Author Posted October 16, 2018 Sorry just see the other replies, not sure how i missed them, but yes FYI in my humble opinion EE block dyndns lookups, this will also be the case with other providers that use the EE network, i.e. Virgin Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.