Disable remote access

[PlexSucks 0]

Hi, as you can probably tell from my username, I came to Emby because my existing solution has become a bug ridden pox filled nightmare.

 

I've just installed and then uninstalled Emby. By default it enables remote access via upnp. I switched off the port mapping in settings but I could still access my server from the internet (using a mobile phone with wifi off to test).

 

I don't want remote access at all and I was annoyed to see it was enabled by default. I found an old forum post about disabling it, which is what pointed me to the upnp setting, but it just doesn't seem to work.

 

I would have prefered the installer to have explicitly asked if I wanted my server to be accessible from the internet.

 

Thanks

 

[legallink 187]

So, as far as I am aware, the only way (once UPNP is turrned off) that remote access would work is if you were forwarding ports from your router to the server and/or using  Emby Connect.  Make sure no ports are forwarded from your router (which may still be there from a previous plex install), and ensure you aren't using Emby Connect in any way with any of the User accounts.

[pir8radio 1312]

This is not really what you were asking, but if you don't use UPnP I would disable it on your router...   Its just bad practice to let any piece of software on your network open whatever ports it wants..  Kind of defeats the purpose of a firewall/router..  If a bad piece of software gets installed it could open the door for bad guys to get in all on its own..  

 

But like legallink said, disabling UPnP in the dashboard of emby "should" stop telling your router to open said ports... 

I guess its possible something is caching that info, you could change the ports in emby and test from the net again..  See if the router has remembered those ports for some reason.

[Luke 42083]

Hi, welcome. Yea we don't have an explicit setting for this but enough people have asked that it's a possibility for the future.

[dcook 299]

Can you advise where the disable UPNP setting is in Emby?

 

I read a post from last year that it was under Settings -> Advanced -> HTTP Server section, however on my version under Advanced I have no HTTP section?

[Koleckai Silvestri 1154]

Can you advise where the disable UPNP setting is in Emby?

 

I read a post from last year that it was under Settings -> Advanced -> HTTP Server section, however on my version under Advanced I have no HTTP section?

 

In the current release version go to Expert -> Advanced on the left-hand menu. It should be the last option in the list.

[dcook 299]

Thanks, seems there is an Advanced button in many different places that do different things, I wish all the settings were just under the Settings page.

[PlexSucks 0]

Hello, thank you for so many responses, it's great to see this amount of activity

 

Someone possibly hit the nail on the head, I was using "Emby Connect". So does "Emby connect" allow remote access regardless of the port forwarding? That's technically viable if the account tells the server to initiate the connection to the client I guess..

 

The other possibility is that the UPNP setting wasn't disabled actively when I unticked the box. It wasn't made clear what, if anything would happen. I don't even know why I still have UPNP enabled. As Pir8radio said it's not sensible to let app's run around opening ports.

 

Luke: Thanks for acknowleding the issue. I imagine you all walk a fine line between making it simple to use and making it secure. My two requests would be a) make it an explicit step in the install, and make it explicit in the UI what is happening when you turn it on and just as importantly off. It's important that off means off too.

 

Thank you

Edited August 4, 2016 by PlexSucks

[anderbytes 141]

Hmm... Just like when Emby detect source network to do stuff (internal connection and pin password... ), there could be a way to allow only internal, yeah.