Plex through surfshark wireguard pfsense vpn
-
I can't access my plex server via my vpn that's running on pfsense, is there a way to single out one ip so it doesn't use the vpn?
Just for information i am a newbie to pfsense,
so any help would be greatly appreciated -
@jhmc93
OpenVPN road warrior? -
@jhmc93
OpenVPN road warrior?
Sorrry wireguard.
Ad a firewall rule to the wireguard vpn interface allowing access to Plex server - probably an IP. Or routing to the Plex server. -
@The-Party-of-Hell-No so I've done it wrong then? adding IP to my LAN and gateway set to WAN?.
-
@jhmc93
you added what IP to your LAN - I do not understand?Gateway? Not sure what you mean... again?
-
@The-Party-of-Hell-No never mind. Right I have surfshark setup with wireguard on pfsense.
issue 1: the ip with my plex on doesn't allow me to set any gateway but my surfshark one for internet access.
issue 2: i have tried using the WAN gateway in my firewall LAN rule but still no internet on my plex server
Issue 3: I tried creating a rule under surfshark or wireguard as i have two that it has created but still no look -
@jhmc93
These are my rules for my TrueNas server... at one time I was running three interfaces out my True Nas. server. Thus the duplicates with different IP's. -
@The-Party-of-Hell-No ^ edited
-
@The-Party-of-Hell-No if u need me to send my rules i can
-
@jhmc93
Okay, to access your Plex server, in my opinion, you cannot do it where the client is Surfshark.
Issue 1 - correct two gateways, WAN and surfshark. you want surfshark going out it's own gateway.
Issue 2 - you want to access the Plex server over the LAN? Is the Plex server in the LAN IP range?
Issue 3 - see below:
You want to create a WireguardVPN Server on your pfsense appliance which you can connect to over remote wireless access points to gain access to your Plex Server - I believe this is your plan.Sorry, I thought I understood your setup - should have asked more questions.
-
@The-Party-of-Hell-No plex is on my LAN side of pfsense, all my machines are hardwired to my pfsense server, there is two gateways the WAN gateways and the Surfshark gateway
-
@jhmc93
So you can access the Plex server from all devices on your LAN? -
@The-Party-of-Hell-No yes it's just the plex server wont connect to the outside world but I've read that plex doesn't work well with a VPN, but I want a VPN to be on pfsense but If I can have my plex media server ip bypass the VPN and not use it at all it would be great
-
@jhmc93
Did some research, so yes you are right - it appears Plex does it's own encryption. No need for VPN.
So to access the plex server you are going to have to port forward the Plex server through the pfsense firewall (WAN) - you do this so it is prepared for incoming connections since pfsense will only open ports for outgoing traffic. When you do this I think pfsense will automatically generate the rule in the LAN.Firewall > NAT > Port Foward
If you have a dynamic IP from your ISP you can either see about getting a static IP or use a service like No-IP which insures your requests are routed correctly.
I believe after reading about the encryption by the Plex server you probably don't want Plex encryption pushed through the SurfShark VPN. No reason to attempt to use the SurfShark VPN gateway.
where I found my info:
https://www.reddit.com/r/PleX/comments/hbn6tr/server_question_do_i_need_to_use_my_vpn_or_not/ -
@The-Party-of-Hell-No see I want to use surfshark for other services,
with the port forwarding do I need to port forward my isp router to the pfsense one? I only have one public IP currently, all i'm trying to do is make plex accessible for other users as well as myself, but I also want to use the VPN for my other services, I know I can't use it for plex now from research. But I'm trying to setup a route to my Plex media server to run without surfshark access, my other services id run on different LAN IP's.
When I tried plex before through another user it said insecure error, so if I could run 1 IP not on surfshark and leave my other IP's for surfshark that would be good. But if I can't do that then thats ok. -
@jhmc93
1 - ISP router? do you mean the ISP modem? I assume you have a cable modem which the pfsense box is attached. In this scenario the outward public IP should be the one assigned to your WAN by your ISP. that would be your target IP for others routing to your pfsense to be port forwarded to the PLEX server. I would think Plex has an app for putting on a device to access remote plex servers. -
You can just set a firewall rule on LAN for the Plex server as source that has the WAN_GW set specifically.
-
@stephenw10 I Have tried this but I ain't getting internet connection from it.
@The-Party-of-Hell-No , My ISP is a router and modem in one, so I have a Pfsense connected onto that for additional security, I ask this as I have port forwarded on the Pfsense side but not on my ISP side and still no luck. -
@stephenw10
So, there does not need to be a port forward so incoming requests can route through the WAN? -
@jhmc93
OK, so now we have more complexity. Yeah, I was going from the perspective of a modem without router. So yes somehow you are going to, I assume, create a port forward for your modem/router to the pfsense LAN IP of your Plex server. Again you want the Outward/public IP of the ISP modem/router to be the target. Don't know beyond that because I don't have any info on the ISP modem/router.
