Subnostr

OK, I think I have my Hue Bridge locked down. It’s on it’s own VLAN that allows mDNS and response to the LAN, but no other networks. I then have an NAT rule to redirect all NTP traffic to my firewall’s NTP server because it only wants to talk to ntp[1-4].aliyun.com (Alibaba’s NTP server in China).

HomeKit works. The Halloween app can talk to it still because that’s local traffic only. The Hue app is broken and I DGAF about that.

Anything I missed?

sommerfeld 2y ago

You can only allow routing local traffic from LAN IPs that will actually control it like your phone. You don't want a rogue device potentially talking to your other local machines and servers.

Can it do any DNS queries?

Reply to this note

Please Login to reply.

Discussion

Alex Rosenberg 2y ago

nostr:npub16r0tl8a39hhcrapa03559xahsjqj4s0y6t2n5gpdk64v06jtgekqdkz5pl Can't really limit what LAN addresses can talk to it because phones rotate their MACs. (Thank you Facebook.)

sommerfeld 2y ago

You should be able to disable that just for your own home wifi, at least in android.