Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Blubber]

I am a recent purchaser of a DCS-960L camera and am trying to learn about the different options for remote viewing of the camera. I understand I can go through the mydlink site and have verified it works. I also understand the alternative is to use port forwarding with DDNS, which I will try soon.

Going the mydlink route worries me some in terms of security and I would like more information on how exactly it works.*

From my initial impression, it means that mydlink, or any website for that matter, can somehow see inside of my network and directly access a device that is behind my router, despite me never having port forwarded anything. Is the camera listening or publishing data on a port that is not documented? How does mydlink.com know how to get to the camera? What is stopping any other website from also getting to this camera?

Any information clarifying this would put my mind at ease.

Thank you.

*I scoured the numerous FAQ posts and saw nothing containing this information, so I figured it was appropriate to ask here.

[FurryNutz]

No other web sites can access your camera or MDL account unless you give access. All access is controlled via the MDL web site and any camera, router or NAS device that supports the cloud feature and is associated with the MDL site can only be accessed by you the user and no body else. Should this happen may violate the privacy policy put forth by D-Link: https://www.mydlink.com/privacyPolicy

I recommend that you phone contact your regional D-Link support office and ask for help and information regarding this. We find that phone contact has better immediate results over using email.
Let us know how it goes please.

[Blubber]

I was more interested in *how* an external website can access a device behind my router. Everything I know and understand about routers should make such access impossible. The last 20+ years of internet security disasters on every device, OS and program under the sun has shown why such a thing would be a bad idea.

I will try the phone support, but I was hoping someone from the engineering team could answer here.

[Blubber]

I contacted support and they told me to try the forums. Is there another subforum here that would be more appropriate for this question?

[Kakashi::.]

Blubber,

It is great that you have taken an interest in knowing the interworking of our mydlink® service, but as you have already have found out,  this isn't something we put out there for everyone's reference.
The system has various parts, the products, the cloud service and the two common ways to access the service: mydlink Portal and mydlink Apps. Starting with the product. At the factory, devices are Geo Tag using what is called a  (mydlink No.), meaning these products are built for the specific regions that will be sold. Devices from one region are not allowed registration on a separate region server. The service is a worldwide service and has been broken down in regional section for various reasons.  Accessibility, stability, and safety are just some of those.  An account holder can reach its regional server from anywhere in the world, once an account has been setup and devices are attached, but the setup is still only allowed from the proper regional service. 
The product's firmware also contains what is called a mydlink agent. This program allows for proper authentication of the device to the Service by providing the S/N, MAC address, and mydlink No. once a secure connection has been established with the regional mydlink service. D-Link's main concern is always security, so periodic updates to the firmware of devices that are fully supported and at times even legacy devices, which are no longer supported, delivered updates to this program to ensure it's cloud service security.

The Cloud Service is run under the Amazon Cloud Services ensuring its stability and availability for millions of our customers worldwide. All communications to the cloud services are authenticated under strict security policies, and that is as far as I can go describing the service without having you sign an NDA.
The portal and mobile Apps (Android, iOS, and Windows mobile compatible) are the easy way to access your devices once a mydlink  account has been created.

The beauty of this is that this service is completely free and if you are skeptical about it, you DO NOT have to use it. There are other solutions out there that will allow this remote functionality  with sometimes minimal configuration.  Properly researched deployments are as secured as this service is,  so no worries, this is not the only option. 
Hope this information helps you understand the service, even if it is a little bit.
Thanks for your interest.

[Blubber]

Thanks Kakashi, that helps a lot. You don't need to disclose any proprietary information.

My main question was how can the service see a device behind my router, since routers will only allow data from the WAN to pass through when the connection was first established by a device on the LAN. From what you stated, I assume the agent reaches out and establishes the connection with mydlink first, which then allows mydlink to communicate back to the device through the router.

Thanks, hopefully this information is useful to others who are also curious.

[Kakashi::.]

Thanks Kakashi, that helps a lot. You don't need to disclose any proprietary information.

My main question was how can the service see a device behind my router, since routers will only allow data from the WAN to pass through when the connection was first established by a device on the LAN. From what you stated, I assume the agent reaches out and establishes the connection with mydlink first, which then allows mydlink to communicate back to the device through the router.

Thanks, hopefully this information is useful to others who are also curious.

Blubber,

     Yes, the correct camera behavior is that of any UPnP supporting device. Once connected to the local network it will  try to discover a UPnP gateway to use as its way out to the mydlink service. If no UPnP gateway is found (in the case UPnP is off or not supported by the router) the unit will try reaching the mydlink services using port 80 and 443. No communication is established with the service, it just a way to discover the path to it (more like a ping).
It will be up to the Installation Wizard or Mobile App to establish a secure connection  in order set up the account and link up a device once it is authorized by the Cloud Service to attached to that region's Service.

Hope this helps!

[Blubber]

Much appreciated, thanks!

[FurryNutz]

Thank you Sir.

Enjoy. 

[BAMoh]

Blubber,

It is great that you have taken an interest in knowing the interworking of our mydlink® service, but as you have already have found out,  this isn't something we put out there for everyone's reference.
The system has various parts, the products, the cloud service and the two common ways to access the service: mydlink Portal and mydlink Apps. Starting with the product. At the factory, devices are Geo Tag using what is called a  (mydlink No.), meaning these products are built for the specific regions that will be sold. Devices from one region are not allowed registration on a separate region server. The service is a worldwide service and has been broken down in regional section for various reasons.  Accessibility, stability, and safety are just some of those.  An account holder can reach its regional server from anywhere in the world, once an account has been setup and devices are attached, but the setup is still only allowed from the proper regional service. 
The product's firmware also contains what is called a mydlink agent. This program allows for proper authentication of the device to the Service by providing the S/N, MAC address, and mydlink No. once a secure connection has been established with the regional mydlink service. D-Link's main concern is always security, so periodic updates to the firmware of devices that are fully supported and at times even legacy devices, which are no longer supported, delivered updates to this program to ensure it's cloud service security.

The Cloud Service is run under the Amazon Cloud Services ensuring its stability and availability for millions of our customers worldwide. All communications to the cloud services are authenticated under strict security policies, and that is as far as I can go describing the service without having you sign an NDA.
The portal and mobile Apps (Android, iOS, and Windows mobile compatible) are the easy way to access your devices once a mydlink  account has been created.

The beauty of this is that this service is completely free and if you are skeptical about it, you DO NOT have to use it. There are other solutions out there that will allow this remote functionality  with sometimes minimal configuration.  Properly researched deployments are as secured as this service is,  so no worries, this is not the only option. 
Hope this information helps you understand the service, even if it is a little bit.
Thanks for your interest.

Does this mean if I buy a cam for a friend living  outside of North America, they can't use it? OR does it mean they would have to register it on the North American mydlink site?

[FurryNutz]

Products should be bought with in each users region, not only for mydlink services reasons also for D-Link support reasons. Regional D-Link support probably doesn't support products out side of there perspective region. i.e. UK wont support a product that is only sold here in the USA and vs versa.

[RYAT3]

There are also those differences in wifi specifications to deal with in Europe.

[BAMoh]

Products should be bought with in each users region, not only for mydlink services reasons also for D-Link support reasons. Regional D-Link support probably doesn't support products out side of there perspective region. i.e. UK wont support a product that is only sold here in the USA and vs versa.

OK ignoring the support as frankly its not necessary, there is a cost factor. Cams usually cost 2x as much elsewhere as they do in the US. My question again is can a cam purchased here work properly abroad if its hooked up to the US mydlink site? If you don't know then say you don't know. I don't about the corporate answer regarding DLINK support this or that, its irrelevant. I want to purchase some as a gift for friends abroad.

[RYAT3]

Any customs import duties /taxes? (Assuming shipping).
and some items might fall under export restrictions.

[FurryNutz]

Explanation here as well:
http://forums.dlink.com/index.php?topic=52632.0