Firewall blocking Emby external connection - should I allow?

[easperhe 4]

Hi,

 

I'm new to emby and maybe this is a dumb question. Emby is trying to make some external IP connection but my McAfee firewall is blocking. Should I allow this? Why is emby doing this?

[Happy2Play 9781]

Have you had a look at the connectivity wiki?

[easperhe 4]

Have you had a look at the connectivity wiki?

 

Yes, both internal and external Emby connections are working. I'll try to get the blocked IP address next time. But it was nothing I recognized. 

[Gilgamesh_48 1240]

If you want others to access your server from outside you network then yo need to allow Emby through your firewall. However if you do as I do and do not allow external connections then you can keep that firewall intact and you should even turn off all remote access in Emby's settings.

 

I do not like/trust anyone well enough to allow them into my network. I will help people set up their own server but I will not let anyone into mine.

[Happy2Play 9781]

 

Emby is trying to make some external IP connection but my McAfee firewall is blocking

 

What are you seeing?  Possibly Premiere validation or application/plugin updates checks.

Edited April 20, 2020 by Happy2Play

[easperhe 4]

What are you seeing?  Possibly Premiere validation or application/plugin updates checks.

 

I'm just seeing a popup dialog box from McAfee saying that it block an external request from Emby. The things you say sound valid. I just wanted to make sure it was some legit Emby thing and not someone that has gotten into my machine.

[Luke 42079]

I'm just seeing a popup dialog box from McAfee saying that it block an external request from Emby. The things you say sound valid. I just wanted to make sure it was some legit Emby thing and not someone that has gotten into my machine.

Does it offer any specifics of what it blocked?

[easperhe 4]

Does it offer any specifics of what it blocked?

 

Next time I'll do a screen capture. but my memory is that it blocked  emby from an external connection (or something like that) and gave an IP address that I'm not familiar with. 

[rbjtech 5284]

I'm just seeing a popup dialog box from McAfee saying that it block an external request from Emby. The things you say sound valid. I just wanted to make sure it was some legit Emby thing and not someone that has gotten into my machine.

 

The 'from' bit is an important distinction here.  If Emby is initiating a request outgoing FROM your network - then it is very likely an HTTPS 'call home' request and more than likely, your f/w will allow that (unless you block all user web traffic..).  If it is an INCOMING request (from outside your network), then the f/w is likely doing exactly as it should.

 

However, unless you are locking external access to specific addresses (ok if fixed IP's, unworkable otherwise) then your f/w rule should be allowing all IP's (*) and the rules be based on PORTS (8096 (http), ideally only 8920(https)).

 

(*) You may be able to geo-lock regions by IP, but this will only stop casual nuisance hits, as VPN's easily get around this restriction.

[ebr 16184]

Hi.  The server will make lots of outbound requests in order to retrieve metadata, check for and install updates, etc.