Re: Placing our Squeezeboxes in a separate IoT network?

rajdude wrote: 
> Thanks! 
> This is exactly what I was looking for :-)
> 
> Looks like you opened a lot of ports for LMS (?). Does it really need
> that many ports? :eek:
> 
> Do you disallow IoT network from accessing the internet?
> I noticed that my IoT devices do not work if I do not give their VLAN
> internet access.
> 
> Since I setup these VLANs just last week, I have not done enough
> research to secure down tight, yet.


Yep, it's quite a number of ports but remember this is all still LAN -
on the internet side none of these are open (well, http is but not
related to any of the squeezebox devices or services). Also note that
the first three UDP ports for INPUT are for DHCP and DNS. You may need
to rearrange those if you use  different machines for those services and
LMS.

Regarding allowing internet access: I actually got some Tuya devices a
while back. Bit of a mistake and I was thinking of converting them to
Tasmota but an internet search learned that I would have to physically
damage the devices more than would be safe to operate afterwards. I did
however manage to create a local access method allowing me to control
them without needing to go through some China based server and I figured
I could block internet access from that point on. Guess what? If the
devices are powered cycled for one reason or another and possibly some
other disturbances as well the local access doesn't function until the
device has been able to `phone home`. That was/is... disappointing.

So yes I had to open that back up, but it won't stop me from evaluating
whether future IoT devices coming into my home really need internet
access to my benefit.


------------------------------------------------------------------------
gordonb3's Profile: http://forums.slimdevices.com/member.php?userid=71050
View this thread: http://forums.slimdevices.com/showthread.php?t=116703