I moved and now I can't access my WAN emby server

[drpickles 3]

18 minutes ago, Lessaj said:

Yes the change may not apply right away, a recycle of the device(s) or at the very least an interface release/renew is a good idea. I think you should see your actual external IP on the MSI router afterwards. I think this method is the same thing as what my ISP gateway calls DMZ, I can only assign a single device to be in the DMZ which would work for my WAN interface on pfSense but I have a second interface that I also use so that would still need to have port fowarding rules and be double NAT. I don't think there' any measurable performance trade off to run it in router mode either way.

Okay I restarted both gateway and router and this is what I have now. Glad to know I'm not behind a CGNAT. Still don't have access to my WAN server but I'm one step closer.

[drpickles 3]

2 hours ago, Lessaj said:

Yes the change may not apply right away, a recycle of the device(s) or at the very least an interface release/renew is a good idea. I think you should see your actual external IP on the MSI router afterwards. I think this method is the same thing as what my ISP gateway calls DMZ, I can only assign a single device to be in the DMZ which would work for my WAN interface on pfSense but I have a second interface that I also use so that would still need to have port fowarding rules and be double NAT. I don't think there' any measurable performance trade off to run it in router mode either way.

Okay problem solved thanks to Lessaj!!! In case anyone else has this issue, after setting my gateway as a passthrough, I was still not able to access my WAN server. I went back into my router settings, removed all port forwarding and inbound filters. Then I made sure my UPnP was enabled. Finally I set the devices LAN IP as a DMZ. I'm not sure if this was the best way of doing everything but I finally have access back to my emby outside of my LAN. Thank you all for your input but thank you especially to Lessaj. You sent me down the right path.

[Q-Droid 993]

14 minutes ago, drpickles said:

Finally I set the devices LAN IP as a DMZ

You don't want to do this as it opens all ports for that LAN IP. All unsolicited requests from the internet will be forwarded to your Emby host.

Find docs or online guides for your router and setup forwarding for the Emby ports you want to allow. And disable UPnP as well.

 

 

Edited 1 hour ago by Q-Droid

[drpickles 3]

5 minutes ago, Q-Droid said:

You don't want to do this as it opens all ports for that LAN IP. All unsolicited requests from the internet will be forwarded to your Emby host.

 

Okay I removed the DMZ and port forwarded my emby devices LAN IP port 8096 on my router and it seems to be holding. So I guess that was the true fix.

[Lessaj 467]

29 minutes ago, Q-Droid said:

You don't want to do this as it opens all ports for that LAN IP. All unsolicited requests from the internet will be forwarded to your Emby host.

Find docs or online guides for your router and setup forwarding for the Emby ports you want to allow. And disable UPnP as well.

If setting the router as the DMZ, then the router is responsible for the firewall, so that should be okay, but wasn't clear to me which device exactly was set.

I wouldn't recommend leaving UPnP enabled either.