Out of curiosity, when remote access/port forwarding is enabled in the DVR server, what does the connection to the Internet-facing port look like? Does the traffic come directly from the outside client? Or is something owned by Channels acting as a middle-man?
The reason I ask is because I've been having intermittent LAN slowness at home lately. Reminds of the symptoms I had a few years ago when I had port 22 forwarded to one of my computers so I could SSH in from outside. I discovered from looking at logs that every now and then I'd get hammered with brute-force attempts to log in over port 22 to the tune of thousands per minute, and it was causing causing these slowness issue. So I stopped forwarding that port.
I'm curious if I can protect my LAN from brute force attacks on port 8089 by enhancing the port 8089 forwarding rule to only forward connections coming from certain IPs or domains.