Business CommunityGatewaysER605 - how to block constant pinging of DNS server
Gateways

ER605 - how to block constant pinging of DNS server

ER605 - how to block constant pinging of DNS server

ER605 - how to block constant pinging of DNS server
ER605 - how to block constant pinging of DNS server
21 hours ago
Tags: #Firewall
Model: ER605 (TL-R605)  
Hardware Version: V2
Firmware Version: 2.3.3 Build 20251029 Rel.18054

Hi, I have an IP camera, wireless, that I am blocking from accessing the Internet using ER605 Access Control and IP Groups. I also use PiHole to block ads. PiHole is set as the DNS server under "LAN" settings.

 

Camera is correctly blocked from going outside of the network bu that camera is constantly pinging one particular cloud website, it pings once per second. PiHole is registering this ping and even though computer running PiHole is not necessarily overloaded with this constant pinging, I want it to stop.

 

However I cannot find a way to stop the camera from pinging PiHole. I tried combination of domain groups and IP groups in "Access Control" but it keeps pinging PiHole. I did not reboot when I tested these but other lines in "Access Control" work immediately.

 

Is it possible for this particular piece of hardware to never ping the DNS server, PiHole in this case? If so, how do I do it?

0
0
#1
4 Reply
Re:ER605 - how to block constant pinging of DNS server
13 hours ago

  @pajtaz What model camera are you using? It seems like the problem is moreso with the camera rather than the router itself.

That being said, if it's only DNS/pings, it's possible the camera is just reaching out to potential cloud management (like Omada devices for the cloud controller). This traffic shouldn't cause any harm to the network, but I'd check with the camera vendor to see if they can help you disable the pings.

Check out our subreddit, r/Omada_Networks! Want to help test and give feedback on new products? Sign up for the US Enterprise Beta Program here! Need a ticket? Contact Technical Support
0
0
#2
Re:ER605 - how to block constant pinging of DNS server
4 hours ago

  @NeilR_M It is Dahua DH-T5A-PV. Yes it is the problem with the camera itself but there is no setting to stop it from pinging the cloud.

 

I just want to stop the camera constant pinging and I thought this was possible with ER605. Dahua will probably tell me that it cannot stop the pinging without changing the firmware and anyway the camera is expected to be used with an app that uses the cloud. Obviously that is not possible since I am blocking the camera from accessing the internet using ER605 Access Control. I don't want to use the "cloud", I am running it locally only.

 

I don't understand how network works so I do not know is it possible to stop the pings before they go to the specified DNS server, in my case local PiHole computer. Maybe this is not even possible? If it is possible though, I would like to learn how to do it.

0
0
#3
Re:ER605 - how to block constant pinging of DNS server
3 hours ago - last edited 3 hours ago

Is it pinging inside or outside the network (wan) ?

 

Either way you can block pings with an ACL source / destination IP group and use protocol ICMP only

 

This wont stop the camera actually trying to ping though, so the traffic will still exist inside the network up to the point of the ACL blocking it.

0
0
#4
Re:ER605 - how to block constant pinging of DNS server
3 hours ago

  @GRL I will try what you suggested. I know it won't stop the traffic but at least PiHole computer won't be bombarded with these pings.

 

It is pinging inside the network since I am blocking all LAN->WAN from this camera using Access Control.

0
0
#5

Information

Helpful: 0

Views: 64

Replies: 4

Tags

Firewall
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.