Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Plex.tv behind PFSense

    Scheduled Pinned Locked Moved Firewalling
    19 Posts 11 Posters 15.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      yeah that can be an issue.. There was another thread here about that as well.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • J
        jwalhous
        last edited by

        I have 2 Plex servers on my network behind Pfsense, I'm just using UPnP and it works without any problems.
        No need to create any firewall/Nat rules.

        Cheers
        Jamie

        1 Reply Last reply Reply Quote 0
        • johnpozJ
          johnpoz LAYER 8 Global Moderator
          last edited by

          Yeah UPnP would open up the ports for you.. you can still run into an issue with unbound rebinding protection when public domain returns rfc1918 address space.

          An intelligent man is sometimes forced to be drunk to spend time with his fools
          If you get confused: Listen to the Music Play
          Please don't Chat/PM me for help, unless mod related
          SG-4860 24.11 | Lab VMs 2.8, 24.11

          1 Reply Last reply Reply Quote 0
          • F
            Fmslick
            last edited by

            thanks for the input guys i'll try what you have suggested and see if it works as soon as my arm gets better an will post back if anything works, I broke my arm roller skating so typing is a pain in the butt (thank God for talk to text in Google remote desktop lol)

            however I did find this interesting .. I have a few other servers running and I use an odd IP range as back-end management network and some times when i restart the Plex service it will pick up my management Network IP that is 64.64.0.x with a subnet mask of 255.255.0.0 an then when i log into the Plex portal or client ( whatever you wanna call it) it will then allow me to see it on my LAN but not WAN some of the time (however my g/f could see that my server was online just cannot stream anything without it being really choppy. i know why not WAN due to no ports open for that ip subnet + the back-end management IP address is not added to PFsense in any way at all and that makes me wonder how could anyone see my server is online at all if the IP address is not added to pfSense. but yet i can log into it via LAN side and it work when the Plex service is using my management IP address?!

            just some food for thought

            We all start same where

            1 Reply Last reply Reply Quote 0
            • johnpozJ
              johnpoz LAYER 8 Global Moderator
              last edited by

              "64.64.0.x"

              What???  So your wondering why your having problems when you just think its ok to run public IP space on your own network, that is not owned by you… Running a management network with a /16 as well even if that was rfc1918 is just freaking moronic to say it as polite as possible.

              So are you
              CIDR:          64.64.0.0/19
              NetName:        SERVINT
              OrgName:        ServInt
              OrgId:          SRVN
              Address:        12001 Sunrise Valley Drive
              Address:        Suite 350
              City:          Reston
              StateProv:      VA
              PostalCode:    20191
              Country:        US
              RegDate:        1997-04-07
              Updated:        2013-10-17

              They don't even own that whole 16, so your just using multiple companies networks..

              CIDR:          64.64.32.0/19
              OrgName:        Olympus Corporation of the Americas
              OrgId:          OLYMP-31
              Address:        3500 Corporate Parkway
              City:          Center Valley
              StateProv:      PA

              CIDR:          64.64.64.0/19
              NetName:        TEXAS-WESLEYAN-UNIVERSITY

              Just to go over the few that fall in that /16 you just thought it would be ok to use as your management network??  WTF..  Sometimes I am just at a complete loss what people are thinking, or in such a case just not thinking at all..

              And sounds like you have 2 different dhcp servers running over the same layer 2??  How does a restart of plex pickup a different IP on a different range?

              An intelligent man is sometimes forced to be drunk to spend time with his fools
              If you get confused: Listen to the Music Play
              Please don't Chat/PM me for help, unless mod related
              SG-4860 24.11 | Lab VMs 2.8, 24.11

              1 Reply Last reply Reply Quote 0
              • F
                Fmslick
                last edited by

                @johnpoz:

                "64.64.0.x"

                What???  So your wondering why your having problems when you just think its ok to run public IP space on your own network, that is not owned by you… Running a management network with a /16 as well even if that was rfc1918 is just freaking moronic to say it as polite as possible.

                So are you
                CIDR:          64.64.0.0/19
                NetName:        SERVINT
                OrgName:        ServInt
                OrgId:          SRVN
                Address:        12001 Sunrise Valley Drive
                Address:        Suite 350
                City:          Reston
                StateProv:      VA
                PostalCode:    20191
                Country:        US
                RegDate:        1997-04-07
                Updated:        2013-10-17

                They don't even own that whole 16, so your just using multiple companies networks..

                CIDR:          64.64.32.0/19
                OrgName:        Olympus Corporation of the Americas
                OrgId:          OLYMP-31
                Address:        3500 Corporate Parkway
                City:          Center Valley
                StateProv:      PA

                CIDR:          64.64.64.0/19
                NetName:        TEXAS-WESLEYAN-UNIVERSITY

                Just to go over the few that fall in that /16 you just thought it would be ok to use as your management network??  WTF..  Sometimes I am just at a complete loss what people are thinking, or in such a case just not thinking at all..

                And sounds like you have 2 different dhcp servers running over the same layer 2??  How does a restart of plex pickup a different IP on a different range?

                Someone is having a bad day and no need to take it out on others!

                No i do not think it is just ok to run a public IP space on my own network but for one i didn't know it was and i just made it up however your right i should have looked up the ip but just due to you know the things and others don't does not give you the right to be a asshat about it my good sir.

                Anyhow!

                no there is only the one DHCP server running pfSense default and default settings and i will be removing the other ip BUT I have had this issue on the LAN with Plex even before using a management Network.

                We all start same where

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  "didn't know it was"

                  Huh?  What did you think it was since it clearly is not in rfc1918 space..  And why would you use a /16… Did you think you might have 65K devices to be managed?

                  What exactly do you mean it "picks up" another IP??  You mean the name resolves to that?  Why are boxes multi homed?  Back end management, for why exactly??  What purpose does this serve - especially in a home setup?  Why would you just not manage it via its IP be it ipv4 or ipv6?

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • J
                    JasonJoel
                    last edited by

                    I don't think he was being an 'ass hat' at all… What you are doing is so fundamentally wrong that it needed some very clear language. His point is that if you didn't recognize that wasn't an OK IP range to use in the first place, then you are lacking the most fundamental knowledge you need to set this up at all... And that is OK in and of itself, everyone has to start somewhere in learning.

                    Maybe you should start over completely and just say what you are trying to accomplish (maybe with a picture) and get the design correct up front instead of trying to figure out how to fix your completely broken design. Not trying to be a jerk, but that is how I would approach it.

                    1 Reply Last reply Reply Quote 0
                    • F
                      Fmslick
                      last edited by

                      @johnpoz:

                      "didn't know it was"

                      Huh?  What did you think it was since it clearly is not in rfc1918 space..  And why would you use a /16… Did you think you might have 65K devices to be managed?

                      What exactly do you mean it "picks up" another IP??  You mean the name resolves to that?  Why are boxes multi homed?  Back end management, for why exactly??  What purpose does this serve - especially in a home setup?  Why would you just not manage it via its IP be it ipv4 or ipv6?

                      Why you want to know a lot.xD

                      Q: What did you think it was since it clearly is not in rfc1918 space.. And why would you use a /16… Did you think you might have 65K devices to be managed?
                      A: I didn't think nothing of it, still new to networking. nope

                      Q: What exactly do you mean it "picks up" another IP??
                      A: Plex is running on my file server or NAS that has windows server 2012 R2 with 2x NIC's set with link aggregation as well with static IP's of 192.168.1.x /24 and the other was the 64.64 one and when I would restart the service for Plex it would auto pick up the 64.64. IP and not the 192.168. IP and from what I have fund is that you can't set what IP Plex will take.

                      Q:  You mean the name resolves to that?
                      A: NO

                      Q: Why are boxes multi homed?
                      A: what do you mean?

                      Q: Back end management, for why exactly??  What purpose does this serve - especially in a home setup?  Why would you just not manage it via its IP be it ipv4 or ipv6?
                      A: I have a 42u rack with about 5 server's on it for testing and learning purposes and I wanted a way without another physical Network to manage them, I don't know IPv6 yet.

                      I removed the 64.64.0.x IP so forget all about that thanks.

                      Q: How can I get plex to work on my LAN side, when I login to Plex on my phone not on home/LAN wifi (Using phone/wifi hotspot with laptop to connection to outside world outside of my home network) I can login and see my Plex server, HOWEVER when I try to login on my desktop or anything on my LAN side all I get is an error saying my server can't be found .

                      NOTE:
                      I am starting over completely

                      We all start same where

                      1 Reply Last reply Reply Quote 0
                      • FurryFennecF
                        FurryFennec
                        last edited by

                        @Fmslick:

                        Q: What exactly do you mean it "picks up" another IP??
                        A: Plex is running on my file server or NAS that has windows server 2012 R2 with 2x NIC's set with link aggregation as well with static IP's of 192.168.1.x /24 and the other was the 64.64 one and when I would restart the service for Plex it would auto pick up the 64.64. IP and not the 192.168. IP and from what I have fund is that you can't set what IP Plex will take.

                        Q: Why are boxes multi homed?
                        A: what do you mean?

                        Q: How can I get plex to work on my LAN side, when I login to Plex on my phone not on home/LAN wifi (Using phone/wifi hotspot with laptop to connection to outside world outside of my home network) I can login and see my Plex server, HOWEVER when I try to login on my desktop or anything on my LAN side all I get is an error saying my server can't be found .

                        Hey Fmslick, looking at the two Q's from johnpoz, it seems to me you answered the 2nd with the 1st. You state that the NICs on your home server/NAS are link aggregated. Does/did your Windows server have one virtual interface representing that link aggregation? Traditionally link aggregation is done with separate interfaces going to separate switches and complicates routing and such. It can be done with VLANs but there is no mention of that in any of your communication. Check out https://en.wikipedia.org/wiki/Multihoming

                        In any event, getting rid of that management network will make your life, and the setup, easier. Please check out https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections, esp the following section to help out with Plex on the local LAN:

                        Modem/Router Settings

                        We can't provide information for all possibilities, but using 'dnsmasq' with DD-WRT or running pfSense are possible situations where you might run into this.
                        To allow secure connections if you are using 'dnsmasq' with DNS Rebinding Protection enabled, you will need to add the following to your advanced settings box:
                        rebind-domain-ok=/plex.direct/
                        Similarly, if you happen to be using pfSense or a similar router OS, you may instead be using 'DNS Resolver (Unbound)'. If this is the case a similar advanced setting will need to be added:
                        server:
                        private-domain: "plex.direct"
                        You may need to consult your router documentation or other information for more details about DNS rebinding.

                        1 Reply Last reply Reply Quote 0
                        • C
                          CyberHellboy
                          last edited by

                          Have a look at this post over in the Plex forums.

                          https://forums.plex.tv/discussion/69526/pfsense-port-forwarding-issues

                          This worked in my case.

                          1 Reply Last reply Reply Quote 0
                          • First post
                            Last post
                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.