Emby connect requirement

[sross44 432]

I have my server set up via Cloudfare for https and remote connections. However lately someone from a random IP address in another country has been accessing my server. Is it possible to have all users be required to sign in via connect? I’ve got to figure out a way to stop the random access to the server. Or any other suggestions are welcome too. 

[GrimReaper 4762]

1 hour ago, sross44 said:

Is it possible to have all users be required to sign in via connect?

Nope, as Connect is optional, you can have also Connect login but cannot have only Connect login, any user is always able to login with User/Pass combo. 

1 hour ago, sross44 said:

someone from a random IP address in another country has been accessing my server

Sorry, not sure what do you mean by "someone", you cannot have unknowns accessing your server, it will always be one of the created Users, and it will be visible which one in the Activity log and Devices list (when authenticated). Maybe one of your users is using VPN, routing traffic through another country? 

Edited July 4, 2022 by GrimReaper

[sross44 432]

10 minutes ago, GrimReaper said:

Sorry, not sure what do you mean by "someone", you cannot have unknowns accessing your server, it will always be one of the created Users, and it will be visible which one in the Activity log and Devices list (when authenticated). Maybe one of your users is using VPN, routing traffic through another country? 

It says one of my users is authenticated and is accessing it from an IP address that is different than the actual user when they log in. I know they're not using a VPN because it's my inlaws account and I set it up so they're not using a VPN at all. Any suggestions on what to do with that? 

[GrimReaper 4762]

8 minutes ago, sross44 said:

Any suggestions on what to do with that? 

Change password for that account. You can also block the device that's been logging in from different IP, although once password changed they shouldn't be able to anyway. 

[sross44 432]

Just now, GrimReaper said:

Change password for that account. You can also block the device that's been logging in from different IP, although once password changed they shouldn't be able to anyway. 

Dumb question, but how do I block the IP address/device?

[GrimReaper 4762]

14 minutes ago, sross44 said:

Dumb question, but how do I block the IP address/device?

For any particular user, go to User settings, Access tab, scroll all the way down, untick "All" under Device access. Granted, depending on the number of users/devices on your server, that management screen leaves a lot to be desired for and is in need of a revamp. But if you assign Display name in Settings>Devices beforehand, it'll be easier to locate it.