How to disable Remote access?

[Kelmino 17]

I'd like to disable remote web access from outside my network.

 

Currently if anyone puts in my IP address /mediabrowser they will be able to access all my stuff.  I'd rather not have to put passwords up for all of the user accounts.

 

Is this possible without messing around with my firewall?

 

Thanks

[Koleckai Silvestri 1154]

If you're on the Latest DEV builds:

 

You would need to disable upnp in the dashboard under Advanced -> HTTP Server.

Then restart the server.

If the ports are still open, you will need to removed the forwarded ports from within your routers interface.

 

Otherwise, you need to close the ports on your router.

Edited March 2, 2014 by Wayne Luke

[ebr 16178]

I don't think that capability is in the release...

 

If you opened the ports on your router and forwarded them to the server, then you just need to disable that on the router.  If you didn't do that, then your server should not be accessible outside your network.

[Kelmino 17]

Yeah, I disabled the uPnP and that didn't do anything.  I didn't specifically go and open any ports on my router, so I'll have to look into it and see where I need to disable ports.  It wasn't obviously easy when I was looking  

 

 

Are you going to implement the option to disable remote access to it?  as of right now it's a huge security risk, I didn't even notice it until today.

[ebr 16178]

Yeah, I agree.  We shouldn't be silently punching holes in your router.  Are you on a dev server or is this in the latest Release build?

[Kelmino 17]

Dev release Version 3.0.5173.31644

[ebr 16178]

Okay, well that's just a hazard of running dev releases then.

[Danee 57]

I'm running Beta, Version 3.0.5171.19958 and for me upnp was also enabled, on my router upnp is disabled so no harm done, but it is also a hazard for running Beta versions I guess.

[UnderMiner 11]

Hello,

I am using Media Browser Server Version 3.0.5171.19958.  By Default, the Server opens the router ports.  If I disable UPnP and shutdown the Server the ports close.

Restarting the Server, even with UPnP of the HTTP Server disabled, the ports are once again opened to the WAN by Media Browser Server.

After shutting down the Media Browser Server, the ports close as expected.

Let me know if there are any other troubleshooting steps to control unwanted WAN access.  Please consider disabling the HTTP Server (over WAN) by default.

Thanks for your help.

[Happy2Play 9780]

I am using Media Browser Server Version 3.0.5171.19958 and unchecking UPnP in the Dashboard worked for me.  Advanced -> HTTP Server

[Koleckai Silvestri 1154]

Hello,

I am using Media Browser Server Version 3.0.5171.19958.  By Default, the Server opens the router ports.  If I disable UPnP and shutdown the Server the ports close.

Restarting the Server, even with UPnP of the HTTP Server disabled, the ports are once again opened to the WAN by Media Browser Server.

After shutting down the Media Browser Server, the ports close as expected.

Let me know if there are any other troubleshooting steps to control unwanted WAN access.  Please consider disabling the HTTP Server (over WAN) by default.

Thanks for your help.

 

Make sure you save the setting. Just unchecking it doesn't save it.

[UnderMiner 11]

Hello,

I did save the setting after unchecking and the setting remains unchecked even after restarting the Server and after rebooting the PC.

The two ports open to the WAN whenever Media Browser Server is running.

[UnderMiner 11]

Hello,

I've used MediaBrowser v2.x for years and installed MediaBrowser 3 for a few months and it is excellent with many useful features.

 

I would like to use the Server daily and would appreciate any advice for additional troubleshooting steps to prevent MediaBrowser from opening WAN ports.  I prefer not to disable the router's UPnP capability because everything seems to operate correctly other than MediaBrowser opening ports for external access.  This is a great feature of MediaBrowser but I will not use WAN access at this time.

 

My system is Win 7 32-bit that is a recent clean install with very few applications.

Thanks for any advice you can provide.

[Luke 42078]

Hello,

I've used MediaBrowser v2.x for years and installed MediaBrowser 3 for a few months and it is excellent with many useful features.

 

I would like to use the Server daily and would appreciate any advice for additional troubleshooting steps to prevent MediaBrowser from opening WAN ports.  I prefer not to disable the router's UPnP capability because everything seems to operate correctly other than MediaBrowser opening ports for external access.  This is a great feature of MediaBrowser but I will not use WAN access at this time.

 

My system is Win 7 32-bit that is a recent clean install with very few applications.

Thanks for any advice you can provide.

 

you will have to disable upnp in the server configuration and then possibly close the ports that were opened in your router configuration. future releases will undo it within the server.

[UnderMiner 11]

Thanks Luke.  I disabled upnp in the server settings and the good news is that the setting is saved correctly.  The router also responds correctly because whenever I close the MediaBrowser Server, the router ports also immediately close.

 

However, whenever MediaBrowser Server starts, the ports on the router open once again, even thought the upnp is disabled in the MEdiaBrowser Server.  The behavior is consistent and repeatable but probably not intended.

Let me know if you require any screen shots or other information.

Thanks.

[Luke 42078]

it is always checking the configuration value so i don't believe there's a bug there. i tested it myself. how are you verifying the router ports are closed when MBS shuts down?

[UnderMiner 11]

I am using ShieldsUp! at www.grc.com to test the port status.

[Luke 42078]

ok. well in any case, if you don't see any of the upnp logging messages with the config setting off, then there is nothing touching upnp. if you do see the messages, then it's not honoring the config value and it will be fixed for the next server release.

[UnderMiner 11]

I found the following in the log file:

"EnableHttpLevelLogging":true,"EnableUPnP":false,"HttpServerPortNumber":8096,"LegacyWebSocketPortNumber":8945,"EnableInternetProviders":true,

Thanks for your time and your great work.

[mini__me 28]

Had to power cycle my router last night as UPNP was broken on it not allowing me to Xbox Live, despite numerous attempts to enable/disable UPNP thought the GUI and restarting the MB service UPNP would not open the ports on my router. Will grab some log later to upload.