Remote access - Ports etc.

[Wondertje 10]

So, when it comes to networking I'm really out of the loop, like ridiculously so. I've tried to get remote access to work but I can't seem to fix it.

 

• Remote access is turned on, with the Remote access address showing up on dashboard
• I have set a static (internal) IP on my computer in order to make sure that the port forwarding stays consistent
• I've port forwarded port 8096 and 8920
• I've also forwarded the two ports through the firewall in Windows

 

I followed the guides here and here to set this up. When looking at CanYouSeeMe I get told that the service can't be seen: "Reason: Network is unreachable"

 

I don't know where to look next, could someone please help point me in the right direction?

[Justy 2]

Hi,

 

you've set service to FTP in your router.

Should be service http/https or add manual custom service for protocol TCP.

 

Hope it helps.

 

Edit: Same for windows firewall. protocol TCP!

Edited June 5, 2019 by Justy

[pgriffith 88]

Your settings are pretty much exactly as mine are, it should work fine, so something else must be getting in your way.

 

Some ISP's have a firewall in place that could be blocking ports, mine does (Internode in Australia), worth checking just in case, but probably unlikely.

[Q-Droid 989]

Hi,

 

you've set service to FTP in your router.

Should be service http/https or add manual custom service for protocol TCP.

 

Hope it helps.

 

Edit: Same for windows firewall. protocol TCP!

 

The router setup is correct, that's just the way it looks in the router. FTP is the default selection when adding new services and the configured ones are in the table below that.

[Q-Droid 989]

I followed the guides here and here to set this up. When looking at CanYouSeeMe I get told that the service can't be seen: "Reason: Network is unreachable"

 

I don't know where to look next, could someone please help point me in the right direction?

 

Do you have another PC or device on your LAN for testing? Check that you can get to those ports locally first, then move outward to the router and then internet. You should also be able to reach the internet URL for your Emby server from within the LAN once everything is working.

 

You probably don't want to open/forward the HTTP port (8096) from the internet.

[Wondertje 10]

Do you have another PC or device on your LAN for testing? Check that you can get to those ports locally first, then move outward to the router and then internet. You should also be able to reach the internet URL for your Emby server from within the LAN once everything is working.

 

You probably don't want to open/forward the HTTP port (8096) from the internet.

 

• When I use my phone on wifi I can reach the LAN access address, but not the WAN access address - but I assumed that was normal?
• When I turn off wifi and try on 4G neither of the two addresses work.

 

Is there some other step I can try if I want to identify if it's my ISP that has some kind of firewall? Sorry if I'm asking stupid questions, I really know nothing about networks and internet, lol.

[Q-Droid 989]

 

• When I use my phone on wifi I can reach the LAN access address, but not the WAN access address - but I assumed that was normal?
• When I turn off wifi and try on 4G neither of the two addresses work.

 

Is there some other step I can try if I want to identify if it's my ISP that has some kind of firewall? Sorry if I'm asking stupid questions, I really know nothing about networks and internet, lol.

 

 

Just to verify, your emby server LAN IP address is 192.168.1.2?

Your router's internet IP address matches what you see on CanYouSeeMe.org?

You are able to connect to emby from your phone while on wifi?

 

You can try a connection to the router internet IP address while on wifi. This would test that the router is forwarding the ports properly and that your emby server is accepting the connections. If this works then it could be a problem related to #2 above. Either double NAT, CGNAT or ISP blocking. I really doubt ISP would block this higher port range.

 

But if you can't connect to the internet IP then you might still have a Windows firewall issue.

Edited June 5, 2019 by Q-Droid

[BAlGaInTl 288]

But if you can't connect to the internet IP then you might still have a Windows firewall issue.

A quick way to test this is to temporarily turn off the Windows and any 3rd party firewalls.

[Justy 2]

Do you have another PC or device on your LAN for testing? Check that you can get to those ports locally first, then move outward to the router and then internet. You should also be able to reach the internet URL for your Emby server from within the LAN once everything is working.

 

You probably don't want to open/forward the HTTP port (8096) from the internet.

I agree. You should really consider to use a SSL certificate and go over port 8920.

[Wondertje 10]

Just to verify, your emby server LAN IP address is 192.168.1.2?

Your router's internet IP address matches what you see on CanYouSeeMe.org?

You are able to connect to emby from your phone while on wifi?

 

You can try a connection to the router internet IP address while on wifi. This would test that the router is forwarding the ports properly and that your emby server is accepting the connections. If this works then it could be a problem related to #2 above. Either double NAT, CGNAT or ISP blocking. I really doubt ISP would block this higher port range.

 

But if you can't connect to the internet IP then you might still have a Windows firewall issue.

 

1) That's the address I can see on the dashboard, yes.

 

2) I'm not sure what my "router's internet IP address" is - there are a lot of numbers everywhere. But the number I'm testing on CanYouSeeMe is the one I'm given from the Emby dashboard. When I log on to my router I also find different IP addresses under "Router information" and yet another IP address under "Internet Port". I just assumed I was to use the IP address that I found on Emby dashboard, which doesn't match either of those other two.

 

3) Yes, on wifi my phone can connect to the server just fine. I use it at home all the time.

 

I'm sorry, but could you tell me the steps to test this thing you're talking about? I'm not sure how to go about doing this. I really need the Explain Like I'm Five version of this, lol.

Edited June 5, 2019 by Wondertje

[Q-Droid 989]

1) That's the address I can see on the dashboard, yes.

 

2) I'm not sure what my "router's internet IP address" is - there are a lot of numbers everywhere. But the number I'm testing on CanYouSeeMe is the one I'm given from the Emby dashboard. When I log on to my router I also find different IP addresses under "Router information" and yet another IP address under "Internet Port". I just assumed I was to use the IP address that I found on Emby dashboard, which doesn't match either of those other two.

 

3) Yes, on wifi my phone can connect to the server just fine. I use it at home all the time.

 

I'm sorry, but could you tell me the steps to test this thing you're talking about? I'm not sure how to go about doing this. I really need the Explain Like I'm Five version of this, lol.

 

1) I think the IP for the external URL on the Emby dashboard is the one it detects if you don't enter a host.domain name. It should match CanYouSeeMe.

 

2) Your router's internet (WAN) IP address is the one under "Internet Port". If that IP does not match CanYouSeeMe and/or the Emby dashboard then you have a double NAT/CGNAT condition. "Router Information" is the LAN IP for the router.

 

Here's the ELIF: Your router has obtained a WAN IP address shown under "Internet Port" and if you click on the Connection Status button it should also be the first line on the pop-up - "IP Address". If that IP addr does not match the CanYouSeeMe or "What is my IP" address then your router is behind yet another router that is hiding it. The same way your PCs in your LAN have a private address and are hidden behind your router. This is where double NAT or CGNAT come in to play. 

 

It's possible that you have a combo modem/router or gateway from your ISP that is doing this. If so you might be able change the ISP router to bridged mode, the gateway to passthrough, or remove it entirely. It all depends on the type of ISP service and equipment you have and what their policy happens to be.

 

3) As it should be able to connect to either the Emby server LAN IP and the router's WAN IP.

 

The next step is to figure out if your router WAN IP is the same or different from CanYouSeeMe.

[Wondertje 10]

Alright, so here's what I've got (apart from the port forward above). I can confirm that the two addresses don't match.

 

Router info

 

 

whatsmyip.org

 

 

Emby

 

 

Now that you mention it, I do remember that PleX always used to tell me that I had some issue with "double NAT", but I never really understood what that was and just gave up.

 

On the physical aspect of things, my router (which is a general one, not ISP specific) is plugged straight into the wall where I have my Ethernet outlet. When I used cable it went straight from the outlet, to the computer. Now that I've got my router I have a cable from the outlet, to the router and then another cable from the router to the computer (if I use it) and also of course Wifi setup, which is what I usually use. I do live in an apartment complex, so I'm not sure how the jack in my wall is actually connected to the rest of the system - there might be another modem/router/firewall/whatever that I don't have access to. Could it be possible that there's nothing I can do about it?

Edited June 6, 2019 by Wondertje

[Guest asrequested]

Do you have an ISP modem and a routher that you bought, separately? What internet hardware do you have and how is it connected?

[Q-Droid 989]

Now that you mention it, I do remember that PleX always used to tell me that I had some issue with "double NAT", but I never really understood what that was and just gave up.

 

On the physical aspect of things, my router (which is a general one, not ISP specific) is plugged straight into the wall where I have my Ethernet outlet. When I used cable it went straight from the outlet, to the computer. Now that I've got my router I have a cable from the outlet, to the router and then another cable from the router to the computer (if I use it) and also of course Wifi setup, which is what I usually use. I do live in an apartment complex, so I'm not sure how the jack in my wall is actually connected to the rest of the system - there might be another modem/router/firewall/whatever that I don't have access to. Could it be possible that there's nothing I can do about it?

 

Yeah, basically your router is connecting to private network behind 155.4.131.191 and therefore not visible to the internet. As a tenant in an apartment complex it's possible your landlord or the ISP manage the network and you have fewer options. Double NAT is usually easy to fix if you have access to the equipment. But your case is more like CGNAT (Carrier Grade NAT) where the provider is controlling this and not likely to make an exception for you. You could find out from your landlord who manages the network.

 

There's something called ngrok that is supposed to work around CGNAT but I've never used it. It has free options though I don't know how well it would work for streaming.

Edited June 6, 2019 by Q-Droid

[Wondertje 10]

Do you have an ISP modem and a routher that you bought, separately? What internet hardware do you have and how is it connected?

 

No, my hardware looks as follows:

 

Ethernet outlet in wall --> Cable --> Router (not ISP modem nor ISP specific) --> Cable --> Computer

 

Alternatively

 

Ethernet outlet in wall --> Cable --> Router (not ISP modem nor ISP specific) --> Wifi --> Computer

 

Yeah, basically your router is connecting to private network behind 155.4.131.191 and therefore not visible to the internet. As a tenant in an apartment complex it's possible your landlord or the ISP manage the network and you have fewer options. Double NAT is usually easy to fix if you have access to the equipment. But your case is more like CGNAT (Carrier Grade NAT) where the provider is controlling this and not likely to make an exception for you. You could find out from your landlord who manages the network.

 

There's something called ngrok that is supposed to work around CGNAT but I've never used it. It has free options though I don't know how well it would work for streaming.

 

I did order the internet myself form my ISP. I was given a choice from a list of ISPs when I moved in. I'll probably contact them and ask if there's anything they can do then and see if it can be resolved. I'll look into ngrok too and see if it could help me. Thank you so much for all your help, it's greatly appreciated!

[Wondertje 10]

GOOD NEWS!

 

It turns out my ISP offers public IP address for free, so all I had to do was click three buttons on their website and then it was sorted. It now appears to work just fine. Thank you all for your patience in trying to help me with this, I'm ever so grateful!

[Q-Droid 989]

GOOD NEWS!

 

It turns out my ISP offers public IP address for free, so all I had to do was click three buttons on their website and then it was sorted. It now appears to work just fine. Thank you all for your patience in trying to help me with this, I'm ever so grateful!

Wow. That's unusual and nice of them to offer this.

[Wondertje 10]

Wow. That's unusual and nice of them to offer this.

 

Yeah, they're a rather unusual ISP. They value privacy and security a lot, so they also provide a very affordable VPN for their customers. They also save logs only for the minimum by law required time and then get rid of everything. They never hand out anything to the authorities that isn't needed by law, etc. Anyone in Sweden who values this kind of privacy and protection should use them if available. The free public IP was extra nice, definitely.