JohnsLibrary 9 Posted July 14, 2023 Posted July 14, 2023 I have noticed that whenever I connect to Emby server from outside my local net, Emby will simultaneously connet to servral other IP address's some of which are on Amazon, AmazonAWS, Google and Cloudfront. I'm an Emby Premier user and would prefer if I could turn off these remote connections rather than having to block them through my router firewall, or please explain why connecting to these IP addresses is necessary to use Emby. Thanks.
Luke 42080 Posted July 14, 2023 Posted July 14, 2023 Hi, Emby doesn’t communicate with any of those. Why exactly do you think this is happening?
JohnsLibrary 9 Posted July 14, 2023 Author Posted July 14, 2023 Hello, I have no idea of the "why it is happening", only what my router log sees when establishing a connection to Emby. I can clearly see that at the exact time I connect via my smartphone I can see several other IP address outbound at the same time. I have attached a screenshot of tcpview which shows emby connecting to ip 18.164.132.117. IP 172.56.222.77 is T-mobile, which is my smartphone.
Luke 42080 Posted July 14, 2023 Posted July 14, 2023 If you can provide the emby server log maybe we'll spot something. Maybe you installed a plugin that is doing that, but there is nothing built into the server that is using google, amazon or cloudfront services.
TMCsw 249 Posted July 14, 2023 Posted July 14, 2023 The entries that you are seeing are most likely triggered by the client that the emby client is running on (not the emby client app it’s self). Look at most any other app action and you will likely see similar. I run a Pi-hole/unbound dns server (attached to my(or any) router) to block such request and emby works just fine.
Gilgamesh_48 1240 Posted July 14, 2023 Posted July 14, 2023 The only times I have noticed any "weird" log entries similar to those is when I use Emby on my Fire TV and once my Shield TV almost overloaded my netw0rk with random external requests but that was a bug in the Shield's software that has since been fixed. I run mostly with the very minimal plugins so @TMCswis most likely correct and the issue is somehow plugin related. I would doubt very much if it turns out to be Emby that is the cause of the problem but it really could be a plugin.
JohnsLibrary 9 Posted July 15, 2023 Author Posted July 15, 2023 Yes, maybe these IP's are because of the plug-ins attached to Emby. I can use the firewall to only allow Emby out on port 8096. This works fine. However, I do notice that going to the plug-in catalog from the dashboard just sits there firing firewall alerts.
TMCsw 249 Posted July 15, 2023 Posted July 15, 2023 Actually it’s much simpler than that, I enlarged your attachment and saw and using db-ip.com that: Quote 172.56.222.0 - 172.56.222.255 is an IP address range owned by T-Mobile USA, Inc. and located in United States It was simply answering the phone..
seanbuff 1318 Posted July 15, 2023 Posted July 15, 2023 27 minutes ago, TMCsw said: It was simply answering the phone.. OP already indicated that 172.56.x.x was his T-Mobile smartphone and is aware of that one. 3 hours ago, JohnsLibrary said: IP 172.56.222.77 is T-mobile, which is my smartphone. They are referring to the 18.164.132.117 remote address which is an Amazon Cloudfront owned IP. Won't know more until logs are supplied.
darkassassin07 652 Posted July 15, 2023 Posted July 15, 2023 (edited) Whenever I load my web app, the browser pulls fonts from gstatic.com googles static file domain. (had to add it to the csp a while ago) Here's a screenshot from IPvFoo, listing all domains used on the page and the ip they mapped to at the time. Perhaps that explains the google connections? No idea about amazon/cloudfront. Edited July 15, 2023 by darkassassin07
Luke 42080 Posted July 15, 2023 Posted July 15, 2023 27 minutes ago, darkassassin07 said: Whenever I load my web app, the browser pulls fonts from gstatic.com googles static file domain. (had to add it to the csp a while ago) Here's a screenshot from IPvFoo, listing all domains used on the page and the ip they mapped to at the time. Perhaps that explains the google connections? No idea about amazon/cloudfront. There’s nothing in the built in web app pulling a font from gstatic. Could be plug-in or custom css related. If you're in the chrome browser though, it could also be the chromecast sender libraries.
JohnsLibrary 9 Posted July 16, 2023 Author Posted July 16, 2023 Thanks for all the replies. I'm still in the process of attempting to identify which plug-ins could be responsible. I'll be posting later if I find anything new to add to this.
JohnsLibrary 9 Posted July 16, 2023 Author Posted July 16, 2023 So, after removing all the plug-ins fro Emby, only one connection other than localhost remains, 18.164.132.117. An IP Whois on this IP states it's Amazon(cloudfront.net). I've blocked the IP from connecting and Emby seems to work normally. Can anyone list the server IP address's that Emby needs for Guide data, etc.?
JohnsLibrary 9 Posted July 16, 2023 Author Posted July 16, 2023 On 7/14/2023 at 9:59 PM, Luke said: There’s nothing in the built in web app pulling a font from gstatic. Could be plug-in or custom css related. If you're in the chrome browser though, it could also be the chromecast sender libraries. Seems it's connecting before opening the browser. And, for the last few weeks I've needed to login every time I select "Configure Emby" from the taskbar icon. Changing the setting to "Don't require login" on my user profile does'nt seem to change it and I'll have to login again if I close the browser window and reopen it.
ebr 16185 Posted July 16, 2023 Posted July 16, 2023 15 minutes ago, JohnsLibrary said: I'll have to login again if I close the browser window and reopen it. Are you clearing browsing data on exit?
JohnsLibrary 9 Posted July 16, 2023 Author Posted July 16, 2023 1 hour ago, JohnsLibrary said: So, after removing all the plug-ins fro Emby, only one connection other than localhost remains, 18.164.132.117. An IP Whois on this IP states it's Amazon(cloudfront.net). I've blocked the IP from connecting and Emby seems to work normally. Can anyone list the server IP address's that Emby needs for Guide data, etc.? UPDATE: It looks like my original statement about blocking IP 18.164.132.117 was false. I have found that if it's blocked, remote live tv gets broken and refuses to stream.
JohnsLibrary 9 Posted July 17, 2023 Author Posted July 17, 2023 From Silicon Dust HDHomeRun Prime with a cable card.
ebr 16185 Posted July 17, 2023 Posted July 17, 2023 15 hours ago, JohnsLibrary said: remote live tv gets broken and refuses to stream Exactly what happens? Log?
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now