SECURE REMOTE ACCESS

[RDSII64 4]

My emby server is working as it should. So long as I have the enough bars on my phone, I can hot spot my chrome book and watch my content when I have down time a work. My remote connection is on the default non secure port 8096.  What I want to do is have my devices at home use port 8096 and force remote connections to use port secure port 8920. So far I can't open a connection on secure port 8920 even though that port is forwarded along with 8096.  Any help will be greatly appreciated.

[Happy2Play 9358]

Have you verified both ports are open on a site like canyouseeme.org

[Luke 39668]

Have you setup an SSL certificate or reverse proxy?

[RDSII64 4]

Have you verified both ports are open on a site like canyouseeme.org

I just checked and canyouseeme.org can see port 8096 but not port 8920. I also checked to make sure both ports were correctly forwarded. They are both forwarded correctly.

Edited April 2, 2020 by RDSII64

[RDSII64 4]

Have you setup an SSL certificate or reverse proxy?

I don't know how to do that so I have not.

[RDSII64 4]

So now the question is, if a port is properly forwarded, why can't it be seen from the outside. Baring my ISP doing something, I am lost.

[RDSII64 4]

As a side note, when I forwarded my ports ( both 8096  and secure 8920) I chose both TCP and UDP.  

Could this be an issue with secure port 8920?

[Happy2Play 9358]

So now the question is, if a port is properly forwarded, why can't it be seen from the outside. Baring my ISP doing something, I am lost.

 

Have you verified the port is configured in the firewall like port 8096?

[Luke 39668]

As a side note, when I forwarded my ports ( both 8096  and secure 8920) I chose both TCP and UDP.  

Could this be an issue with secure port 8920?

 

You need to setup SSL before you can use port 8920. That means either supplying Emby with an SSL certificate, or putting a reverse proxy in front of Emby Server and having it handle SSL.

[RDSII64 4]

You need to setup SSL before you can use port 8920. That means either supplying Emby with an SSL certificate, or putting a reverse proxy in front of Emby Server and having it handle SSL.

I  never thought of that. Some studying this weekend should yield some results. 

[Happy2Play 9358]

Yes you need a ssl certificate also, but if port 8920 is not open it will won't work on that port.

[mastrmind11 722]

forwarding 8920 isn't going to magically make it secure.  give it a weekend of research and twaking and you'll get it going.  plenty of users here have SSL setup either via reverse proxy or direct cert in emby, so you've got a good place to ask for help.  gl

[RDSII64 4]

I HAVE ACHIEVED SUCCESS!!! 

After some reading and tinkering my emby server is now behind cloudflare and all remote connections must be secure. Getting an SSL cert took some reading and a good bit of re-do's but I got it working.

Next up is how to prevent connections from other countries. I don't know that I really need that, but now I have the tinkering bug. 

Edited April 6, 2020 by RDSII64

[Luke 39668]

Thanks for the feedback !