Why is my Emby server dashboard is accessible externally for anonymous?

[matask 0]

OK, I don't get something. My Emby server is accessible over the internet from my external IP. The main home.html and dashboard.html are accessible with no account. The anonymous can come and edit/delete server settings, this is ridiculous.

 

 

I don't think this is working right. There is literally zero privacy and security.

 

How do I fix that? Or how do I disable external access completely and make it internal only?

 

update: I can literally access it as anonymous via Tor Browser and SSH `curl -l` from remote server also loads it. I tried stable and beta versions on Windows 10 x64.

 

update2: I unticked Enable automatic port mapping and Enable DLNA server and restarted.

 

update3: In my router settings uPNP is toggled OFF but there are 2 Emby rules added already and there is no option to delete it.

Edited November 26, 2017 by matask

[ebr 16184]

Hi.  Did you setup a password for your admin account when you created it?

[Happy2Play 9780]

OK, I don't get something. My Emby server is accessible over the internet from my external IP. The main home.html and dashboard.html are accessible with no account. The anonymous can come and edit/delete server settings, this is ridiculous.

 

 

I don't think this is working right. There is literally zero privacy and security.

 

How do I fix that? Or how do I disable external access completely and make it internal only?

 

update: I can literally access it as anonymous via Tor Browser and SSH `curl -l` from remote server also loads it. I tried stable and beta versions on Windows 10 x64.

 

update2: I unticked Enable automatic port mapping and Enable DLNA server and restarted.

 

update3: In my router settings uPNP is toggled OFF but there are 2 Emby rules added already and there is no option to delete it.

 

Have you restarted your router and system you have Emby installed on?

Edited November 27, 2017 by Happy2Play