DLNA and Metadata

rsumner93

Prominent
Sep 9, 2017
5
0
510
I have two networks at home. 1 for internet and one for my DLNA server. I want to allow LAN users access to both internet and DLNA by bridging the networks but want WAN users to have access to local network for DLNA streaming ONLY. I am using two routers on a separate channel and not worried about interference as they are both miles away from the closest wireless router other than each other. I want wireless users to choose between either internet access or DLNA but not both at same time however my DLNA server requires internet access for metadata. The server is connected by LAN for better latency and performance.
 
Solution
It gets really complex to do this with consumer routers.

Running 2 routers on the same network with 2 internet connects is messy in the first place. In general on the secondary internet router you will not run DHCP this prevents the internal users from using it unless they know its ip address. The main router will be the one running DHCP and providing the internet. You would set the gateway in the machines you wanted to use the second internet manually.

You requirements are quickly approaching the need to have a actual router/firewall and not the consumer boxes you likely have. You might load dd-wrt on it if it can do that.

Even with firewalls it is get complex to filter lan-lan traffic.
User coming in from the WAN is actually kinda hard to get to work in the first place. You are going to have to configure the router to cause incoming session to go to the dlna server. This in effect prevent the people on the internet from access anything but that server.

If we ignore some multilevel attack where the server was compromised you networks should be safe.

In general to do what you want you would need a firewall between the networks. Consumer routers are not really designed to provide this function. They are designed to do the simple purpose of connect a simple lan to a single internet address.
 

rsumner93

Prominent
Sep 9, 2017
5
0
510


 

rsumner93

Prominent
Sep 9, 2017
5
0
510
I am not too worried about attacks on the server. I disabled all security on the server itself and told the router to use it as a DMZ. Then on the server I have a small logger that monitors the incoming connections from the primary private ip( the internet enabled router) and alerts me via text and email of suspicious activity that I then can terminate. I have the Primary router (ill call it PR) set to only allow internet access but not local network access so people connected to internet can not access the server. I want Secondary Router (SR: received internet from PR) to provide internet to the server through Ethernet but only wirelessly connected user access to DLNA only and not internet. I have a data cap and don't want everybody connected to the internet using both networks. I then have the server setup to only server certain files and folders but allows no access to what I choose to keep private. I have RDP to connect to server for maintenance that only I have access to. PR is secured and SR Is open.
 
It gets really complex to do this with consumer routers.

Running 2 routers on the same network with 2 internet connects is messy in the first place. In general on the secondary internet router you will not run DHCP this prevents the internal users from using it unless they know its ip address. The main router will be the one running DHCP and providing the internet. You would set the gateway in the machines you wanted to use the second internet manually.

You requirements are quickly approaching the need to have a actual router/firewall and not the consumer boxes you likely have. You might load dd-wrt on it if it can do that.

Even with firewalls it is get complex to filter lan-lan traffic.
 
Solution