Remote Networks Option

[runtimesandbox 171]

Could we get a "Remote networks" option similar to the LAN networks field under Advanced settings?

I use a reverse proxy for remote connections to my emby server, i'd like to be able to specify the reverse proxies IP address to be considered as a "Remote network" so that users that have the "allow remote connections to this emby server" unticked cannot be used to login externally.

[Luke 42086]

But that's what the local network field is for. Anything outside of that is considered remote.

[runtimesandbox 171]

Yes i understand that, the problem is my reverse proxy is within my "local range". So if I put 192.168.1.1/24 in there it would mean that anything coming from the reverse proxy (remote access) is considered as local traffic

[mastrmind11 722]

Yes i understand that, the problem is my reverse proxy is within my "local range". So if I put 192.168.1.1/24 in there it would mean that anything coming from the reverse proxy (remote access) is considered as local traffic

There's a way to pass the external IP through the proxy.  I'm not at home right now so I can't look at my config, but my external connections display their external IPs.  @@pir8radio would know.

[pir8radio 1312]

Yea, your RP should be passing the remote address to emby, not presenting its own address...    the below lines should be in your config.. if you dont have these chances are your config has other issues,    can you post it so we can make sure your emby is being proxied correctly?

        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-for $proxy_add_x_forwarded_for;

Edited March 12, 2019 by pir8radio

[runtimesandbox 171]

Thanks all for the replies, turns out I had the IP pass through configured all along. My bad!

 

Have tested and it works as expected, my one request would be for this to show a different message in the activity log rather than just:

"user authenticated successfully" 

"user disconnected" 

 

which is what currently happens.Maybe something like "local account remote access attempted" or similar 

[Luke 42086]

Yea that's a good idea about the activity log. thanks.