Cannot connect off the network

[Dont1982 8]

I have been able to connect to my emby server while off the network up until this update.  I have disabled all firewalls, antivirus and any other items that I could think of that would be stopping this.  Port forwarding is set up, router firewall turned off, no VPN in use.  This is a windows machine. I have attached the log but I did not see anything on it.  Any help would be greatly appreciated. I have tried to connect to my server through a firestick, and my iPhone.  Both worked before and now doesn't. Tried the wiki on checking the ip and port, and it says that it cant see it.  I cannot connect through a browser window either.  

embyserver.txt

[pwhodges 2012]

3 hours ago, Dont1982 said:

Tried the wiki on checking the ip and port, and it says that it cant see it.

Then this is what you need to investigate.

Has your external IP changed? - Check in the router, or on the Emby dashboard.

Has your ISP enabled cgNAT (which will block external access? - Check by doing the tests at the end of this article.  If you have cgNAT, the options are to set up a tunnel using Tailscale, Zerotier, a VPN, or whatever - or to persuade your ISP to let you have a real IP address again.

Paul

[rbjtech 5284]

If you are manually port forwarding - then remove the PortMapper plugin.   If you arn't doing it manually - the PortMapper is saying the map already exists - which may be wrong - so worth also rebooting your router.

Check the port forward, as you are also doing Port Translation - ie you are using an internal Port 8099 for http and 8096 externally ?   Https (8920) seems to be 8920:8920 (ie no PAT).

Edited November 25, 2023 by rbjtech

[Dont1982 8]

On 11/24/2023 at 1:03 PM, pwhodges said:

Then this is what you need to investigate.

Has your external IP changed? - Check in the router, or on the Emby dashboard.

Has your ISP enabled cgNAT (which will block external access? - Check by doing the tests at the end of this article.  If you have cgNAT, the options are to set up a tunnel using Tailscale, Zerotier, a VPN, or whatever - or to persuade your ISP to let you have a real IP address again.

Paul

no the ip has not changed to my knowledge. i did what the wiki said and ran the scan.  None of the numbers that it stated when running the cmd showed up.  I try the can youseemee.org and it never showed up.  I use the UNPNP on my router for the port forwarding. 

10 hours ago, rbjtech said:

If you are manually port forwarding - then remove the PortMapper plugin.   If you arn't doing it manually - the PortMapper is saying the map already exists - which may be wrong - so worth also rebooting your router.

Check the port forward, as you are also doing Port Translation - ie you are using an internal Port 8099 for http and 8096 externally ?   Https (8920) seems to be 8920:8920 (ie no PAT).

I just did the manual port forward for testing. It is off now.  I have it set up for 8920 on external which is default if i recall.

[pwhodges 2012]

Can you still connect locally? - you don't mention it.  If not, then check whether your server machine has had its network set to "Public" - it should be Private, but I suspect that Windows Update can sometimes change it (especially updating from Windows 10 to 11).

Paul

[Dont1982 8]

48 minutes ago, pwhodges said:

Can you still connect locally? - you don't mention it.  If not, then check whether your server machine has had its network set to "Public" - it should be Private, but I suspect that Windows Update can sometimes change it (especially updating from Windows 10 to 11).

Paul

Yes I can connect locally, the machine is set to private network. This was the first thing I checked. Restarted router multiple times. I don’t get why all of a sudden it stopped working. 

[rbjtech 5284]

On 24/11/2023 at 18:03, pwhodges said:

Has your ISP enabled cgNAT (which will block external access? - Check by doing the tests at the end of this article.  If you have cgNAT, the options are to set up a tunnel using Tailscale, Zerotier, a VPN, or whatever - or to persuade your ISP to let you have a real IP address again.

 

[Dont1982 8]

7 hours ago, rbjtech said:

 

Yes I ran the cmd prompt and it did not return and of the numbers listed. But when I go to canyouseeme.org I cannot see the port but I can only go that site and check the port from the computer that the server is loaded on which is on my local network.  I have tried going to the website from my phone and it will not let me change the up address. 

[Luke 42081]

Quote

no the ip has not changed to my knowledge.

You should find out as this is a pretty important detail.

Quote

I have it set up for 8920 on external which is default if i recall.

And 8096 if you haven't setup SSL on your Emby Server.

[Dont1982 8]

47 minutes ago, Luke said:

You should find out as this is a pretty important detail.

And 8096 if you haven't setup SSL on your Emby Server.

Ok let me rephrase. Ip has not changed. Do not remember setting up ssl. My Emby app is signed in through Emby connect and it has always automatically connected. Is there a how to on how to set up a tunnel? I will try this and see what happens. 

[Dont1982 8]

so after some googling. I use Verizon home for my internet ( it was free for a year lol) and they do use the cgNAT.  So I am now looking at how to setup a tunnel so I can get around that.  I turned on my vpn on the machine that houses the server but it did not work.  I am looking at tailscale, any tips and info on how to set it up and which plan I would need?  Thank you all for the help I truly appreciate it.

[Luke 42081]

@MagicDoubleMand  @mohoelxmay have some TailScale tips.

[MagicDoubleM 121]

17 hours ago, Dont1982 said:

 I am looking at tailscale, any tips and info on how to set it up and which plan I would need?  Thank you all for the help I truly appreciate it.

The free plan is enough. It's quite simple to use.

Make an account, install the software on each client, connect them using the account credentials you just made.

Then make sure to disable key expiry for each machine, as this gives you static tailscape-ips. Now you already can connect via your tailscale-ips or the hostnames tailscale generates, you can modify the machine-name and generate semi-random host-names if you don't like the pre-defined.

There is no need to open ports on your router, but you might have to allow emby to listen on your server's tailscale ip and whitelist client's tailscale-ips.

It's possible to give other users access, but that's the next level. There are two ways for that. If you want it easier, then make sure you register your account with your own domain (you need to give other users an email-account there). Registering through a gmail-account blocks this route. You can still give other users, with their own tailscale-accounts, access to emby, It's just different, slightly more complicated, but also probably more secure, and it doesn't make you hit tailscale's limits so quickly. But as I said, next level.

Edited November 27, 2023 by MagicDoubleM

[Dont1982 8]

you to all that helped. Tailscale worked. I can now access my server on my phone off of my network.  Will put it on my firestick that i take on trips.  Thank you again