Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Access Jellyfin server on different subnet

    Scheduled Pinned Locked Moved General pfSense Questions
    39 Posts 5 Posters 9.9k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator @swust
      last edited by

      @swust said in Access Jellyfin server on different subnet:

      sometimes I need to turn the VPN off because some local sites doesn't work

      Better way would rule above the vpn rule to allow those sites, or rule above that has specific device not use the vpn etc..

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      S 1 Reply Last reply Reply Quote 0
      • NogBadTheBadN
        NogBadTheBad @darcey
        last edited by NogBadTheBad

        @darcey said in Access Jellyfin server on different subnet:

        @swust
        Thanks. I'd like a compact media player that doesn't rely soley on SSDP (like the smart tv does). That would make IoT/server separation cleaner IMO.

        If you're an Apple type, I'd recommend an Apple TV with the Infuse app.

        https://firecore.com/infuse

        Andy

        1 x Netgate SG-4860 - 3 x Linksys LGS308P - 1 x Aruba InstantOn AP22

        D 1 Reply Last reply Reply Quote 0
        • D
          darcey @NogBadTheBad
          last edited by darcey

          @nogbadthebad Thanks for the suggestion. It's a bit more than my needs justify right now.
          I'm looking for a basic (cheap compact) consumer playback device that can:

          • Access a DNLA media server from a typed URL. No reliance on autodiscover.
          • Support media navigation from a tv remote (via CEC passthrough).
          • Amazon prime video support a bonus.

          I guess this is something like Kodi on a raspberry pi, but I wonder if firetv stick will manage it.

          Currently I spin up minidlna containers on network where needed and mount the media library RO in the container. But the OPs setup made me curious.

          S 1 Reply Last reply Reply Quote 0
          • S
            swust @darcey
            last edited by

            @darcey

            I guess this is something like Kodi on a raspberry pi, but I wonder if firetv stick will manage it.

            i've been using Cube and FireTV with Kodi via SMB shares for years and it's been very good. only recently discovered Jellyfin, which is nicer since my library is centralized, and the trakt.tv addon is great to managed watched status. Media navigation with TV remote worked flawlessly on my Samsung TV, though to exit Kodi, gotta go through the kodi menu rather than just using the back button on the TV remote.

            1 Reply Last reply Reply Quote 0
            • S
              swust @johnpoz
              last edited by

              @johnpoz said in Access Jellyfin server on different subnet:

              @swust said in Access Jellyfin server on different subnet:

              sometimes I need to turn the VPN off because some local sites doesn't work

              Better way would rule above the vpn rule to allow those sites, or rule above that has specific device not use the vpn etc..

              thought about that but those sites are few and random, so i thought it's easier to just kill the VPN temporarily if i need to access to sites which is very infrequent.

              johnpozJ 1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator @swust
                last edited by

                @swust even if infrequent, once you create the rule for those things you don't want to use the vpn for.. Its a one time thing, and then you don't have to worry about disable vpn any time you need to access those. That is what I would do - but hey you do you.. Either way works.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                S 1 Reply Last reply Reply Quote 1
                • S
                  swust @johnpoz
                  last edited by

                  @johnpoz said in Access Jellyfin server on different subnet:

                  @swust even if infrequent, once you create the rule for those things you don't want to use the vpn for.. Its a one time thing, and then you don't have to worry about disable vpn any time you need to access those. That is what I would do - but hey you do you.. Either way works.

                  good suggestions. i've been tinkering, and this gives me the idea to NOT route my netflix via VPN which screwed up the geo-location available content . is it possible to also exclude specific website or domain or application in pfsense firewall rules? i can't find any reference for this.

                  johnpozJ 1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    You can only policy route by IP addresses or aliases containing multiple IP addresses.

                    So mostly it depends if you can create a list of the destination you want to allow. There are some ways you can attempt to do that, the easiest is to use pfBlocker to create and update an alias for, for example, Netflix using their AS number:

                    Screenshot from 2022-04-14 18-04-06.png

                    It's not perfect though, you will find some traffic is incorrectly routed.

                    Steve

                    1 Reply Last reply Reply Quote 1
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator @swust
                      last edited by

                      @swust said in Access Jellyfin server on different subnet:

                      NOT route my netflix via VPN which screwed up the geo-location available content

                      Well that is normally easier done vs source IP, ie your firestick or roku or amazonTV, just set its IP to policy route.

                      Policy route via CDNs where IPs change all the time could be problematic - the AS alias with pfblocker could allow you to route all IPs for a company out the way you want..

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      S 1 Reply Last reply Reply Quote 1
                      • S
                        swust @johnpoz
                        last edited by

                        @johnpoz @stephenw10

                        I see. pfBlocker is on my list to learn next. Will start looking into it and explore. Will come back to you guys and the forum if there're questions in the future ๐Ÿ˜

                        thanks for the input ๐Ÿ‘

                        1 Reply Last reply Reply Quote 1
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.