How to securely connect to to your Amcrest Video Security System using a local Linux server, like a Raspberry Pi

[MrOnosa]

Amcrest has yet to release a firmware update for their older system with a fresh SSL Certificate. It's insecure to connect to these servers remotely with their stale encryption. The solution is simple, SSH Tunnels.

If you have a Linux server that you can safely SSH into that lives on the same local network as your Amcrest video security system, then you can just create a Linode (an SSH tunnel) to your security system. This way you are in charge of securing the connection, which is easily done with proper private/public key management.

You only need to expose your SSH port (typically port 22) on your router. You do not need to expose the HTTP(s)/TCP/UDP ports for your Amcrest security system.

Make sure your Amcrest Video Security System uses a static IP. For example:

2018-09-21_10-08-04_iexplore.png (23.49 KiB) Viewed 3574 times

Also, my example code assumes the default ports. 37776 for HTTP, 37777 for TCP:

2018-09-21_10-11-22_iexplore.png (14.52 KiB) Viewed 3574 times

Then, just use the -L flag to tunnel your HTTP and TCP ports. This is like port forwarding, but your Linux system is doing it, not your router. This means a secure connection that you are in charge of.

Here is how:

Code: Select all

ssh <user>@<host> -L 37776:192.168.1.108:37776 -L 37777:192.168.1.108:37777

Now, fire up Internet Explorer 11, then navigate to http://localhost:37776/ and log in.

[savvy2]

pure genius
and the idea of using low power Raspberry Pi

id pay you cash for full documentation on the Pi.
i have 3 cams with 3 expired, 2016 certificates.

[Devo]

So how would I make that ssh tunnel run on boot?