NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

mc510's avatar
mc510
Guide
Jun 06, 2019
Solved

Block a device from internet?

I want my surveillance camera to access my network, but not have any access to the internet, inbound or outbound. The only thing I see that looks remotely related is the "Block Services" screen, but I don't know what services or ports my device uses, I just know its MAC address and its IP address on my LAN. Is "Block Services" the correct place to block a device from the internet? How is it done when you only know the IP and MAC address of the device?

  • if you don't know which ports your cams use, then block all ports by using 1-65535 as port range

     

    i have it done for a few devices and it works here. they cannot get internet access, only LAN access

7 Replies

  • Are you sure about what you are asking. Most security cameras I am familar with want an Internet connection to update videos to "home". 

    • mc510's avatar
      mc510
      Guide

      myersw wrote:

      Are you sure about what you are asking. Most security cameras I am familar with want an Internet connection to update videos to "home". 


      Yes, I'm sure. My camera will save video on my NAS hard drive, and that's all that I want it to do. Connecting to its "home" is exactly what I want to block.

      • > [...] I don't know what services or ports my device uses, [...]

         

           With a description as detailed as "my surveillance camera", I have no
        idea, either.  But, if what you want is for it "not have any access to
        the internet, inbound or outbound", then blocking all ports (1-65535)
        would seem to be plausible.

         

           ADVANCED > Security > Block Services blocks outbound connections.  By
        default, inbound connections are blocked by the normal NAT functionlity.
        (You'd need to enable something like port forwarding to allow incoming
        connections.)

         

           My D7000[v1] (V1.0.1.70_1.0.1) has a predefined Service Type,
        "Any(ALL)" for that purpose.