Jump to content

cannot connect to Emby outside my home


danpol

Recommended Posts

8 hours ago, Calmac83 said:

Thank you for the reply. I will take a look.

Many Thanks

Let us know how you get on. Thanks.

Link to comment
Share on other sites

Hello,

I am having the same issue as @danpol (can access server on home network, can see it on Emby Android app, but cannot connect to it externally).

I've gone through all of the same troubleshooting from the Emby articles, including setting up the manual ports. Nothing has worked.

I did notice that the IP address on canyouseeme.org does not match my IN HOME or REMOTE IP address.

Is a remote session possible to take a look?

 

Link to comment
Share on other sites

16 hours ago, mmcwill said:

I did notice that the IP address on canyouseeme.org does not match my IN HOME or REMOTE IP address

Hi.  You supply the address to check on canyouseeme.  You should supply the proper Remote address for your setup.

Link to comment
Share on other sites

The IP on canyouseeme is not editable. I can only supply the port...

I tried https://portchecker.co/canyouseeme and put in the Remote IP/PORT and it's telling me it's closed. 

Link to comment
Share on other sites

47 minutes ago, mmcwill said:

The IP on canyouseeme is not editable. I can only supply the port...

I tried https://portchecker.co/canyouseeme and put in the Remote IP/PORT and it's telling me it's closed. 

@mmcwill please step through our Connection Troubleshooter and let us know exactly which steps succeed and which steps do not. Thanks !

Link to comment
Share on other sites

@Luke From the help page I verified with the internal IP address I can access my server. I did not do any of the port set up, firewall, Virus scanning, or VPN troubleshooting (since the internal IP address worked). 

 

Next I tested the external address and I got a webpage took to long to load error. I followed all the troubleshooting steps in your External Connections help page, up until the Verify Public IP and Port section. Here I saw that the IP on canyouseeme.org does not match the Emby dashboard. 

 

Thanks for looking into this (really liking the app, looking forward to seeing the external connection functionality)

Link to comment
Share on other sites

10 hours ago, mmcwill said:

I did not do any of the port set up, firewall,

Hi.  In order for external access to work, you will need to setup some sort of port forwarding.

@cayars

Link to comment
Share on other sites

@ebr @Luke sorry for the confusion,  I did set up port forwarding while testing the External connection (it wasn't necessary for the Internal connection testing). 

 

After setting up port forwarding, the external connection did not work so I looked up my IP on canyouseeme.org and saw it did not match the Emby dashboard IP. 

Link to comment
Share on other sites

34 minutes ago, mmcwill said:

@ebr I went onto canyouseeme.org and compared the IP the website detected to the IP on my Emby dashboard. 

Which one is correct?

Link to comment
Share on other sites

43 minutes ago, mmcwill said:

@ebr I went onto canyouseeme.org and compared the IP the website detected to the IP on my Emby dashboard. 

Were you on a device on your local network at this time?  Okay, Luke just beat me to it...

Link to comment
Share on other sites

4 hours ago, mmcwill said:

@Luke I think the Emby dashboard is correct because that's what I see in my Google Home app and in my system settings on Mac. 

I think they're likely both correct and both wrong. :)

It's typical for you to get one IP when behind a CGNAT but see a different IP that often rotates on sites that show you the IP your traffic is coming from.  If you are behind a CGNAT which it sounds like you'll have to play a network trick to bypass the CGNAT.

Let's first try to determine for sure if this is the case.  If on Windows open a command prompt  Windows key - R for the run box.  Type cmd and hit enter.

now type without quotes "tracert 8.8.8.8" and private message me the results (hover over my avatar for messaging).
What I'm looking for is reserved IPs starting with 172., 10, 192 right after the packets leave your LAN.  If the next line or two uses those addresses you're in a CGNAT.

Carlo

Link to comment
Share on other sites

@mmcwill sent me a message with the traceroute showing his IPs using 192 and the first few from the ISP in the 10 reserved range.  So almost surely behind an ISP CGNAT.

There are a few ways around this but which technique you need to use depends on your need.

Give us an idea what you were planning to do with remote access.  Is it just for you and direct family if not at home?  Was your intention to share with multiple friends?

Carlo

Link to comment
Share on other sites

That makes it one of the easier methods to setup and uses a private tunnel.
There are two free services that are very similar to each other that allow you to have your very own private VPN service.  They do a nice trick which is key to this working. Your server which is "stuck" behind the CGNAT makes an outgoing "ping" to their service every once in a while while keeping a socket open to their server.  Since your server opened the communication it pushed through the block and now can allow traffic back in to your server for anyone a part of your private VPN.

The only downside to this approach is that you have to setup their client on any device used to communicate with your server.  You server will be on the VPN 100% of the time but not using any bandwidth unless you're using it.

https://www.zerotier.com/
https://tailscale.com/

Check out the clients each have available to make sure they have a client available for your server and other devices you would use.
https://www.zerotier.com/download/:
https://tailscale.com/download

Read what they each say about the other service:
https://discuss.zerotier.com/t/zerotier-vs-tailscale/3800
https://tailscale.com/kb/1139/tailscale-vs-zerotier/

The initial setup of both is likely a little tough if you've not done something like this before but they have very good documentation and setup instructions so you can actually just follow the directions/instructions even for parts you don't understand. :)

Carlo

Link to comment
Share on other sites

Public VPNs can be made to work but would not be my first choice to use.

Public VPNs are used for lots of shady things and this tends to get the IPs they used banned by sites as their IP pools make the different lists providers/infrastructure companies use to ban or filter from.  I see this a lot in Emby Server logs where the Emby Server can't pull meta-data as the provider won't except the connection from the IP the server is running on (VPN).

You also want to think about all the hackers using the very VPNs service you plan to have a 24/7 inbound connection with. A popular hack is exploiting the VPN server you're connected to to gather the connection info such as IP and time logged in.

Public VPN servers used this way have the advantage of allowing you to use the VPNs external IP address and port so no VPN client is needed to use Emby.  The downside besides other things I've mentioned is that there is a server sitting between your the Emby Client and Emby Server that most likely isn't anywhere near as fast as your connection so you take a speed hit. You will want to run a few speed test looking at the upload speed your Emby Server will have available running through the VPN connection.

Use one of these to check your actual usable speed vs speedtest.net which isn't accurate for our needs.
https://speedof.me/
https://speed.cloudflare.com/

With a service such as ZeroTier or Tailscale the connection is usually point to point as the "server" is only used to setup the connection. It's highly secure as well but the downside is the need install a client app.

A third possibility and pretty good one is a self host VPN you run for yourself.  A $5/month hosting plan is all that's needed. You use this to establish a tunnel between your Emby Server and the hosting account.  All incoming traffic to a specific port on the host will forward to your Emby Server.  This gives you all the positive features you need with a possible downside (could be an upside depending on person) of being in control.  You can find a lot of guides to setting your own tunnel up like this with a Google search.

Link to comment
Share on other sites

@cayars I've first downloaded Tailscale then ZeroTier on my Mac and Android phone, but neither service has allowed me to connect to my Emby server remotely. Was there more steps I needed to take?

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...