Remote Connections Suddenly Not Working, server not responding

[Bhakti88 5]

I am stumped and need help.

I have been running the same settings for over a year with zero problems and suddently, starting last night, remote connections aren't working and the server is not responding (local connections work fine). This is confirmed by my remote users, DNS test site which says the server connection isn't working, and browser tests from within the wired network. I have checked all router, DNS service, and Emby settings and they are all 100% correct. I have turned off and rebooted the modem and routers, rebooted windows, reflashed the router firmware & deleted and reinput the port forwarding settings, rebooted Emby server multiple times, confirmed I am running latest Emby Server software, and no I never had any evidence of the recent "hack" issues. I even tried using a new DNS name as a test and it made no difference. I am not running a VPN during these tests. Software firewall still has EmbyServer authorized so no blocks there.

Can someone please suggest what I should try next? I am out of ideas at this point.

[ebr 16185]

11 minutes ago, Bhakti88 said:

DNS test site which says the server connection isn't working

Hi.  What site?  Are you saying canyouseeme.org is saying your port is not accessible?  If so, the issue is at the network/router layer most likely.

[GrimReaper 4742]

What does tracert return? 

https://emby.media/support/articles/Remote-Setup.html

 

[Bhakti88 5]

11 minutes ago, ebr said:

Hi.  What site?  Are you saying canyouseeme.org is saying your port is not accessible?  If so, the issue is at the network/router layer most likely.

Canyouseeme.org can see the port I have designated for the Emby server.

My statement that DNS check service was not working is false. I used a different site and it is working. I was using mxtoolbox.com, but the wrong tab/service. I changed to a different tab on that site and its working. I also just used https://dnschecker.org and i am showing all green.

[pwhodges 2012]

What address range do you use in your local network? 

Paul

[Bhakti88 5]

19 minutes ago, GrimReaper said:

What does tracert return? 

https://emby.media/support/articles/Remote-Setup.html

 

The tracert came back ok based on the link directions. I saw no 10,172, or 192 in anything but the first line(my router)...I saw 142s and 24s only.

[Bhakti88 5]

17 minutes ago, pwhodges said:

What address range do you use in your local network? 

Paul

I haven't designated a range, if I look in the router settings under LAN DHCP the range shown is 192.169.1.2 to 192.168.1.254. Manual assignment is turned off.

[Bhakti88 5]

When I click on the "Remote WAN Access" link from within the dashboard via my web browser it doesnt connect either. That is a wired connection. Not sure if I described that in the OP.

[rbjtech 5284]

40 minutes ago, Bhakti88 said:

Canyouseeme.org can see the port I have designated for the Emby server.

Check again with emby server shutdown - and expect it to not respond

Simply put - if the port is being replied to, then it''s listening - confirming the WAN, Port Forward, Firewall and LAN connections.

So if you have been messing with DNS - it's possible the WAN changes just need to proagate onto your remote users ISP/DNS servers .. ?

Edited May 25, 2023 by rbjtech

[rbjtech 5284]

2 minutes ago, Bhakti88 said:

When I click on the "Remote WAN Access" link from within the dashboard via my web browser it doesnt connect either. That is a wired connection. Not sure if I described that in the OP.

Yea unless your router has loopback, it won't - that is perfectly normal.

You  need to test with another PC via a VPN or mobile (3/4/5G) connection to be sure.

[Bhakti88 5]

In addition to the outside users, I did use my cell phone connected via cell tower only and I was also unable to get a response from the Emby Server as well.

That's the wonky thing, I didn't change any settings whatsoever when this all started. I only tested a different DNS domain name after everything else wasn't fixing the problem. I have reverted back to the original domain name as that's what everyone else has in their settings.

 

[rbjtech 5284]

So I assume this is a https connection ?

If not, then you can try a direct WAN IP instead - just to see if you get a connection.  if that works, then your issue may well be dns.

Happy to test a connection for you if you wanna ping me the fqdn via PM.

[Bhakti88 5]

The connections being used and tested are all http, not https. I have always only used the normal http. I have both types setup, but only share the normal http.

Would that make a difference in this case?

Edited May 25, 2023 by Bhakti88

[rbjtech 5284]

4 minutes ago, Bhakti88 said:

The connections being used and tested are all http, not https. I have always only used the normal http. Would that make a difference in this case?

No - but it just means you can connect using the WAN IP address only.  trying to do this if you used https would not work.

I'm just trying to eliminate DNS - ie making sure the DNS resolves to your ISP Public IP address - which I believe it does if you used the DNS name on 'canyouseeme.org' and it responsed that the port (8096/80?) was 'open' ..

Edited May 25, 2023 by rbjtech

[rbjtech 5284]

If you wanna ping me your fqdn via PM, I can check for you - but there is not a lot more anyone can do without this info as 'something' is listening - if you wanna ping it to ebr or luke then that's fine - just trying to help..

[Bhakti88 5]

9 minutes ago, rbjtech said:

No - but it just means you can connect using the WAN IP address only.  trying to do this if you used https would not work.

I'm just trying to eliminate DNS - ie making sure the DNS resolves to your ISP Public IP address - which I believe it does if you used the DNS name on 'canyouseeme.org' and it responsed that the port (8096/80?) was 'open' ..

Yes, when I go to canyouseeme.org and enter the normal http port I am using and the one external users are accessing it says "success" in green denoting it's not being blocked. I specified nonstandard ports in my setup to avoid any conflicts.

 

[rbjtech 5284]

So just a quick update - looks like ddns was not updating - so we fixed that and port is now 100% open (wasn't before).

OP is testing .. but I'm getting a 'Forbidden' on the splash screen/curl - so possibly related to connection https enforcement (needs to be disabled or preferred) .. will report back after the OP testing. 

[Bhakti88 5]

External user has confirmed on two devices that it is working. Thank you rbjtech for your help!!!

Who knew it would have been DDNS not updating, but at least it was something simple.

My server is setup to "preferred, but not required" for secured connection.

Is there an inherent benefit to use https vs http in my setup? All users I provide the fqdn directly.