videopalace 26 Posted September 4, 2019 Share Posted September 4, 2019 Hello, I have the following: I have Emby server installed on a Windows server 2016 (server PC), on this PC I have also installed Express VPN (I use this because of the split tunneling). The Emby server app is excluded on the ExpressVPN app to use VPN. When I now contact the server via a web browser on a different PC other than the server, I get a privacy error on my website (when the VPN is enabled on the server). When the VPN is switched off I get it without problems. My site is SSL verified (https). Is there a setting in Emby that I should pay attention to so that I get that privacy error when logging in via a web browser when the VPN is on? Link to comment Share on other sites More sharing options...
Luke 37116 Posted September 4, 2019 Share Posted September 4, 2019 Is there a setting in Emby that I should pay attention to so that I get that privacy error when logging in via a web browser when the VPN is on? No setting. Are you using an SSL certificate that the browser trusts? If the browser doesn't' trust your certificate, then this could be why. Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 4, 2019 Author Share Posted September 4, 2019 yes, it is with an SSL certificate (issued by let's encrypted). The strange thing is: with VPN and split tunneling there is a privacy error, without VPN there is no privacy error. Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 4, 2019 Share Posted September 4, 2019 Are you sure that the VPN will play well with your SSL/domain? Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 4, 2019 Author Share Posted September 4, 2019 (edited) Like i say, with VPN enabled it doesn't connect to my https website, with VPN disabled it connects to my https website. (Everything except Emby must behind the VPN). Edited September 4, 2019 by Patrick1945 Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 4, 2019 Share Posted September 4, 2019 So that would imply that the VPN doesn't play well with your SSL/domain. Im assuming you've portforwarded, correctly? Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 4, 2019 Author Share Posted September 4, 2019 what ports are you talking about? In Emby, port 443 is assigned for https traffic and this port is also forwarded on the modem / router. Link to comment Share on other sites More sharing options...
Luke 37116 Posted September 4, 2019 Share Posted September 4, 2019 Try switching back to the default ports and see how that compares. Try using http and see how that compares to https. Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 4, 2019 Share Posted September 4, 2019 It sounds like you're hitting the VPN firewall, or there is a port conflict. I know that Torguard doesn't allow you to forward port 443. Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 4, 2019 Author Share Posted September 4, 2019 on the standard port (8920) it works the way I want it, VPN on and access to my https website. Only: the wording of the URL is not what I want, it is now "https: // mydomain: 8920" and I would just like to have "https: // mydomain" to enter in the web browser (easier for friends). which port can I use for this (except port 443 where it was blocked) Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 4, 2019 Author Share Posted September 4, 2019 port 443 works without VPN but not with VPN? Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 4, 2019 Share Posted September 4, 2019 Yes, the VPN service has their own firewalls and security, with their own rules. You need to navigate that, in the same way you navigate your own router/firewall. So they may not be allowing you to do certain things. You'll have to check with them. This is one of the reasons I have not taken the SSL/domain route. Someone else on here was having the same issue. I suggested they might use cloudflare, as they offer something similar to a VPN. I'm assuming you want a VPN for the anonymity? Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 4, 2019 Author Share Posted September 4, 2019 what matters to me is that Emby uses its own reverse proxy (from Emby itself) and that the rest of the server uses the VPN (for anonymity indeed). Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 4, 2019 Share Posted September 4, 2019 I think you need to talk to the VPN peeps. Or use Cloudflare. Link to comment Share on other sites More sharing options...
moviefan 184 Posted September 5, 2019 Share Posted September 5, 2019 There is clearly a conflict with ExpressVPN and port 443. You demonstrated that above by it working on port 8920. If you are getting a certificate warning then something else is serving up an untrusted certificate. Emby is not involved and there is no setting inside of Emby which will change this behavior. Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 7, 2019 Author Share Posted September 7, 2019 How I solved this now: There are 3 programs on the server that needed to be protected. 1) Emby Server. 2) DELUGE Torrent client. 3) Web browser. Since a VPN client does anonymize the entire server, this is a good consideration, only: Emby conflicts with VPN clients (no longer accessible via web browser). The solution: an anonymous PROXY! 1) Leave Emby untouched. 2) DELUGE supports proxy settings in its software and 3) I use an extension for the web browser. Conclusion: no more conflicts and I remain externally accessible! Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 7, 2019 Share Posted September 7, 2019 But you have no encryption. I used to do that, and they still traced back to me. Trust me, it isn't secure. You want strong encryption between you and the proxy. And using their VPN servers, all identifying information is removed. That doesn't happen if you just use a proxy. Your ISP can see everything. Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 7, 2019 Author Share Posted September 7, 2019 It is a socks5 Proxy I use Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 7, 2019 Share Posted September 7, 2019 It is a socks5 Proxy I use So was the one that I used. It still cost me $10 a song when they found me. Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 7, 2019 Author Share Posted September 7, 2019 If I could, I also used VPN, but since EMBY blocks SERVER when I use a VPN and is no longer accessible via the internet (I use a screenless server), the only solution for me is to use PROXY. Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 7, 2019 Share Posted September 7, 2019 Did you talk to your VPN tech support? Link to comment Share on other sites More sharing options...
videopalace 26 Posted September 7, 2019 Author Share Posted September 7, 2019 what a VPN cannot work on is on port 443 and that is exactly what I want. Link to comment Share on other sites More sharing options...
moviefan 184 Posted September 8, 2019 Share Posted September 8, 2019 So was the one that I used. It still cost me $10 a song when they found me. That is interesting. Although SOCKS doesnt necessarily mean encryption. Were you using an SSH tunnel? Link to comment Share on other sites More sharing options...
Guest asrequested Posted September 8, 2019 Share Posted September 8, 2019 That is interesting. Although SOCKS doesnt necessarily mean encryption. Were you using an SSH tunnel? No, just a Torguard proxy. That was a few years ago. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now