Linode LLC

[Johannes_L]

Hello,

I have 4.0.4 Mac OS version installed. I have also the remote access activated through my iPhone client.

From my Firewall, I have noticed that every now and then, there is a connection attempt from IP address 198.58.120.8 to the port number dedicated for SH remote access. iplocation.net gives information that IP address belonging to Linode LLC, which seems to be a cloud hosting company.

What is your relationship with this IP address and that particular hosting company? Are those attempts somehow belonging to the normal operation of SH remote access? I have changed the port number for SH remote access from SH configuration pages and the attempts from that IP address seems to follow. Strange....

Regards
J

[ryan]

While it is simple to query for the local IP displaying the external IP is a little more involved. To do so we have servers that the app can send a message to which will attempt to report back with what the generating IP was. This is also the only way to check whether the external port was automatically opened as requested, as the reply won't make it to the app if not.

[Johannes_L]

While it is simple to query for the local IP displaying the external IP is a little more involved. To do so we have servers that the app can send a message to which will attempt to report back with what the generating IP was. This is also the only way to check whether the external port was automatically opened as requested, as the reply won't make it to the app if not.

Thank's for your fast answer,

Sighthound is a SW for security cameras, which are protecting households, corporates, critical places. Especially these days, the security from an Internet is an equal concern. Those IP packets from Linode servers seems to be using DNAT, which means that destination is out of the visibility from majority of your customers, who are using simple WiFi routers from home.

In my opinion, to take into account Sighthound brand as a security SW for cameras, you should be publishing how you are actually using the network, which IP addresses are as allowed destination and what information you are sending out from the SH server from your customer homes and corporates.

Those are pretty basic things and openness during the days, when cyber attacks are more than common.

Thank's for your co-operation

J

[ryan]

Your router itself will necessarily perform DNAT when you have any port forwarding enabled. Machines outside of your network can only address external_ip:external_port, not anything on your internal network directly. Your router will see that you have external_port mapped to internal_ip:internal_port and update the address in the packets to route accordingly.

portcheck.sighthound.com is used to display external address and verify automatic port opening success (outgoing & incoming)
licensing.sighthound.com is used for licensing (outgoing)
gateway.sighthound.com is used for push notifications, IFTTT responses (outgoing)
sighthound.com is used for app update checks (outgoing)

These exist because there is otherwise no way to accomplish them within the app itself. You're welcome to block traffic to any or all of these though the corresponding functionality will of course break.