Flx 76 Posted ... Hello,Server Side(the computer where EMBY software is installed) Name it embymyairvpnserver as an example. You can pick any name you want, for your EMBY server if available. After you config this in Port Forwarding in your account/profile @ airvpn.org. -------------------------- localport: 8096 forwarded port: 34567(e.g.) or pick your own. -------------------------- Server Side Comodo FW Rule(image example) Updated. Use it for embyserver.exe and embytray.exe. emby.server.allowed.address in Network Zones-->contains all your clients IPs which you define as range(184.75.0.0-184.75.255.255) or single address. Server Side -- AirVPN server you connect to make sure it is close to your location(latency/speed*) *Upload speed is what matters here. EMBY Server Side --- Rotating Servers Option 1.(Use Option2 if you don't want/wish/have to task kill and re-start EMBY). EMBY.rotate.openvpn.servers.at.time.specified.bat.zip ----------------------------------------------------------------------------------------- 1. CHANGE THE NAME OF YOUR TAP/VPN ADAPTER(S). 2. 3600 SECONDS IS JUST AN EXAMPLE FOR THE COUNTDOWN....MAKE IT 10000/15000/20000 SECONDS. 3. embytray.exe and embyserver.exe process will be killed/terminated. 4 embytray.exe and embyserver.exe process will be re-started. 5. It will then use the new IP/server IP. 6. No fancy interface/UI.....things are kept simple(command line) ----------------------------------------------------------------------------------------- Option 2. https://airvpn.org/topic/17440-guide-fix-for-tap-adapter-in-windows/page-3?do=findComment&comment=83234 Client Side(computer or device where you connect from) Use your Iphone/Tablet open a browser and key in embymyairvpnserver.airdns.org:34567 Comodo Rule Use this for client computers-->https://airvpn.org/topic/29189-block-all-interfaces-except-tapvpn/ Log-in and happy streaming. Client Side -- Use your ISP IP(any IP). IF IT IS NOT IN THE LIST OF emby.server.allowed.address IT WILL NOT CONNECT. *Download speed is what matters on the Client Side.. P.S. I would recommend that both computers/devices(Server/Client) are connected to different AirVPN servers. NOTE: This is only for http NOT https. Regards, Flx Quote Hide Flx's signature Hide all signatures Guide - EMBY Block ALL interfaces except tap/vpn Windows OS - Configuring your operating system Windows OS - Multi Session/Tunnel Share this post Link to post
Flx 76 Posted ... On 1/24/2019 at 6:13 PM, Flx said: Server Side Comodo FW Rule Details/Reason: For (TCP-IN) a few unwanted connections made to embyserver.exe. (Now blocked) Some of the Blocked TCP-IN in the above "example/image". No explaining on how they do their "EMBY Remote Access." Or what servers they use. Quote Hide Flx's signature Hide all signatures Guide - EMBY Block ALL interfaces except tap/vpn Windows OS - Configuring your operating system Windows OS - Multi Session/Tunnel Share this post Link to post
flat4 79 Posted ... thank you for the guide 1 Flx reacted to this Quote Hide flat4's signature Hide all signatures pFsense it works Share this post Link to post
Flx 76 Posted ... Server-side Emby FW rule(s) for embyserver.exe Depending on case-by-case Change/Modify it any way you want. (e.g. destination ports etc.)embytray.exe is now localized. Quote Hide Flx's signature Hide all signatures Guide - EMBY Block ALL interfaces except tap/vpn Windows OS - Configuring your operating system Windows OS - Multi Session/Tunnel Share this post Link to post
Flx 76 Posted ... Quote Hide Flx's signature Hide all signatures Guide - EMBY Block ALL interfaces except tap/vpn Windows OS - Configuring your operating system Windows OS - Multi Session/Tunnel Share this post Link to post
Flx 76 Posted ... With the above rule(Network/Local Access is allowed as well as Air DDNS). Use your EMBY app from your smart hub TV (e.g. Samsung TV) to connect to your EMBY server(IP 192.168.2.88). Enjoy your movies(etc) from your kitchen/living room/bedroom TV.Benefit of this: Faster connection/playback than when over-the-web from a friends house. Regards, Flx Quote Hide Flx's signature Hide all signatures Guide - EMBY Block ALL interfaces except tap/vpn Windows OS - Configuring your operating system Windows OS - Multi Session/Tunnel Share this post Link to post
Flx 76 Posted ... In EMBY->Settings->Network-> Remote IP address filter: Whitelist the IPs which are allowed to access the server(friends/family IPs 104.55.12.55, 88.95.54.65) If you don't wish/want to allow access over local network don't add 192.168.x.0/24 to the Remote IP address filter. (Server-side)Back in/to Comodo->Application Rules->set embyserver.exe as "Allowed Application". Happy Streaming, Flx Quote Hide Flx's signature Hide all signatures Guide - EMBY Block ALL interfaces except tap/vpn Windows OS - Configuring your operating system Windows OS - Multi Session/Tunnel Share this post Link to post
Flx 76 Posted ... Friends/Family that are on Dynamic IP. If their dear ISPs change their IPs they will get the "Forbidden" page when they try to connect to your EMBY server. Therefore define them as (IP/netmask aka CIDR). Easiest way Go to utrace.de and there you can find the CIDR. Grab it from there and paste it in EMBY->Settings->Network-> Remote IP address filter: Now it will work, Flx Quote Hide Flx's signature Hide all signatures Guide - EMBY Block ALL interfaces except tap/vpn Windows OS - Configuring your operating system Windows OS - Multi Session/Tunnel Share this post Link to post