Jump to content


Photo

External Access

Security External emby connect

  • Please log in to reply
3 replies to this topic

#1 bb_xspeed OFFLINE  

bb_xspeed

    Newbie

  • Members
  • 1 posts
  • Local time: 01:35 AM

Posted 19 May 2016 - 01:45 PM

Hi,

 

I currently use emby on a windows server as an internal MediaCenter with Emby for WMC client.

 

2 users are created

- 1 for my kids without any password allowing them to access easily to all the stuff they like through the remote command + TV

- 1 for parents with a very simple numeric password that we can enter with the remote control. The idea is to disallow kids to watch films and series that are not for their age

 

Today,  I would like to active external access to let friends access my media library from the internet. So I activated Emby Connect which works great.

 

But, as I entered a nat rule in my internet box, It opens access to my server from the outside.

So anyone that scan my IP and tries port 8096 is able to access my medias through my kid unrotected user ou through the very simple parent user password.

 

So, I would like to use emby connect but to disallow direct http access on my external public IP adress with kids and parents user (that I still need to be viewable from emby for WMC client. I do not want to enter manually login/pass from my remote commande :)

 

Is it possible ?

 

Other Idea : Today, When I use TeamViewer, I do not need to open any incoming nat rule on my internet box to connect my PC from the outside. I do not know how it works but I suppose that my PC has a permanent outgoing https connection to teamviewer cloud that, then, let me connect to it.

Would it be possible to have this kind of functionnality in emby ? Emby server would have a permanent connection to the emby cloud that would let emby connect users to connect it. On the other hand, it would not let direct http access on 8096 port for other users ...

 

Thanx


Edited by bb_xspeed, 19 May 2016 - 01:47 PM.


#2 ebr OFFLINE  

ebr

    Chief Bottle Washer

  • Administrators
  • 47023 posts
  • Local time: 07:35 PM

Posted 19 May 2016 - 01:51 PM

What you need to do is put a password on the kids accounts (and a more complex one on yours) and then activate the "Easy PIN" feature for each account in the following way:

 

- For the kids just check the box to enable the easy PIN but don't supply one.  That will make it still allow access internally without requiring any password

- For your account, put your simple numeric password in the easy PIN field and check the box

 

Then, when remote, all accounts will require complex passwords and, when local, it will work just as it does now.



#3 dcook OFFLINE  

dcook

    Advanced Member

  • Members
  • 866 posts
  • Local time: 07:35 PM

Posted 24 May 2016 - 08:36 AM

You could also in additon to above,  instead of allowing access from anywhere just specific your friends ip address so that only they have remote access



#4 Natilus13 OFFLINE  

Natilus13

    Advanced Member

  • Members
  • 89 posts
  • Local time: 07:35 PM

Posted 09 June 2016 - 07:41 PM

You could also in additon to above,  instead of allowing access from anywhere just specific your friends ip address so that only they have remote access


I like this idea, but very few people are going to have static IP addresses and this would also then never work with mobile devices as their IP addresses will constantly change as they switch between networks.





Also tagged with one or more of these keywords: Security, External, emby connect

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users