External Access

[bb_xspeed 0]

Hi,

 

I currently use emby on a windows server as an internal MediaCenter with Emby for WMC client.

 

2 users are created

- 1 for my kids without any password allowing them to access easily to all the stuff they like through the remote command + TV

- 1 for parents with a very simple numeric password that we can enter with the remote control. The idea is to disallow kids to watch films and series that are not for their age

 

Today,  I would like to active external access to let friends access my media library from the internet. So I activated Emby Connect which works great.

 

But, as I entered a nat rule in my internet box, It opens access to my server from the outside.

So anyone that scan my IP and tries port 8096 is able to access my medias through my kid unrotected user ou through the very simple parent user password.

 

So, I would like to use emby connect but to disallow direct http access on my external public IP adress with kids and parents user (that I still need to be viewable from emby for WMC client. I do not want to enter manually login/pass from my remote commande . 

 

Is it possible ?

 

Other Idea : Today, When I use TeamViewer, I do not need to open any incoming nat rule on my internet box to connect my PC from the outside. I do not know how it works but I suppose that my PC has a permanent outgoing https connection to teamviewer cloud that, then, let me connect to it.

Would it be possible to have this kind of functionnality in emby ? Emby server would have a permanent connection to the emby cloud that would let emby connect users to connect it. On the other hand, it would not let direct http access on 8096 port for other users ...

 

Thanx

Edited May 19, 2016 by bb_xspeed

[ebr 14903]

What you need to do is put a password on the kids accounts (and a more complex one on yours) and then activate the "Easy PIN" feature for each account in the following way:

 

- For the kids just check the box to enable the easy PIN but don't supply one.  That will make it still allow access internally without requiring any password

- For your account, put your simple numeric password in the easy PIN field and check the box

 

Then, when remote, all accounts will require complex passwords and, when local, it will work just as it does now.

[dcook 265]

You could also in additon to above,  instead of allowing access from anywhere just specific your friends ip address so that only they have remote access

[Natilus13 10]

You could also in additon to above,  instead of allowing access from anywhere just specific your friends ip address so that only they have remote access

I like this idea, but very few people are going to have static IP addresses and this would also then never work with mobile devices as their IP addresses will constantly change as they switch between networks.