Remote Access Denied

[rocky_mtn 4]

So I have my server running in a docker container and I have 2 users that are able to remotely connect. One of which can still connect and lives 500 miles away. The other hasn't accessed my server in about a month and we tried this weekend numerous times to get it to connect and it just won't! They happen to be my literal, next door neighbors. I tried entering the Emby Connect info, the server info manually...you name it. Finally i started to think I wonder if their connection can even ping mine, so I ran traceroute from their WAN to my WAN and it timed out on the third hop. 1st was their modem, then the xfinity switch, then dead. Is this ICMP blocking going on by the ISP and nothing can be done with regards to sharing my server with them? I WAS able to access my server on my phone, on their WiFi but only after enabling a VPN on my phone. I'm just at a loss here as I can't understand how so many folks share their servers with other people and somehow I can't with my neighbors? Is it just because we happen to be neighbors and our traffic hits the same Xfinity switch when leaving our houses? I'm hoping I'm missing something. If you have any suggestions I would surely appreciate them. TIA

[Luke 42083]

 

 

Is this ICMP blocking going on by the ISP and nothing can be done with regards to sharing my server with them? I WAS able to access my server on my phone, on their WiFi but only after enabling a VPN on my phone.

 

If you had to install a VPN then i would say it's possible, yes. Are you using the default 8096 port? If you are, then try using a different public facing port in your router. Sometimes that will fool it.

[rocky_mtn 4]

Thanks @@Luke I will try that and see what happens. Any particular port you'd recommend? I try not to bug you guys often but this one has me bugged out! Side note, I was able to get on their WiFi and disable my VPN, and access the web UI I have exposed for my Blue Iris security camera...so that tells me it's pointing towards my Emby config. But...When I send the link to the neighbor to access my BI web UI they cannot access it...unless they turn WiFi off and use cellular data. This one has me stumped...It's almost like clients that have been "whitelisted" even though there aren't any, are able to access my network, but those that aren't, can't. This is mind boggling. Thanks again anyhow. I'll keep digging.

[Happy2Play 9783]

That does not make much since, as it should work for everyone or no one.  So you have nothing in "Remote IP address filter:" on Dashboard-Newtwork?

[rocky_mtn 4]

@@Happy2Play indeed, there are no IP’s whitelisted or blacklisted. For now I’m gonna try enabling ICMP in my Edgerouter to see if I can get their LAN to see my WAN with a ping and then consider changing the port number as a last resort. I might reverse proxy it to 443 if nothing else works. So weird how it worked a month ago and now it wont. And it works for my iPhone to Blue Iris but not Emby on their network, and neither will work on their phone or fire tv. I’m only putting this out here because it’s so strange to me. I don’t in any way think it’s an Emby problem to be perfectly honest. Just figured maybe someone has seen this voodoo before. Thanks again.

[rocky_mtn 4]

Another side note, I did move my Emby server from a Windows 10 instance to a docker container about a month ago, but again, my mother 500 miles away has no problems accessing it. The only thing that really has me hung up over all this is they are my neighbors, with the same ISP, and you can see via traceroute our 2nd hop is the same IP to a xfinity switch. My guess is they’re blocking this activity by design.

[Happy2Play 9783]

With some one on a different network being able to connect, it has to be something specific with xfinity network.

[oyvhov 0]

rocky_mtn did you find a solution for this? Did it work with a different port? I have the exact same problem with my neighbour.

[Luke 42083]

rocky_mtn did you find a solution for this? Did it work with a different port? I have the exact same problem with my neighbour.

 

@oyvjov, I would suggest checking out our Connection Troubleshooter. Please try the steps listed there and let us know which ones succeed, and which ones do not. Thanks !

[bkpickell 0]

I have the same issue except I know what the problem is, I am just unable to fix it. The Xfinity Gateway is blocking all incoming connections from my remote IP. It says it is a known malicious source.  How can my tablet on my cell connection be a known malicious source? But either way the Gateway won't let me unblock it.

[Luke 42083]

That's strange. Where did you see that? You could try using a different public facing port as well as setting up ssl.

[rocky_mtn 4]

I finally quit playing around with port forwarding and just put remote emby access behind my reverse proxy container. This way people who connect to it just go to emby.mydomain.com instead of having to type in or remember an IP address that also could potentially change since I don’t have a static IP.  I’ve put all my public facing services inside this reverse proxy container. I just think it’s a better mouse trap rather than having open ports for emby, security cameras, etc...

[Luke 42083]

Thanks for the feedback.

[ABNParatrooper 6]

On 12/18/2020 at 11:56 PM, bkpickell said:

I have the same issue except I know what the problem is, I am just unable to fix it. The Xfinity Gateway is blocking all incoming connections from my remote IP. It says it is a known malicious source.  How can my tablet on my cell connection be a known malicious source? But either way the Gateway won't let me unblock it.

I just switched to Xfinity and my remote access to my server no longer works either. When I try using the stupid Xfinity app to port forward the server it says it can't do it. Did you get yours to work?

[Carlo 4561]

If you need help with this send me a PM and we can do a remote support session and get you squared away.