Can't get Plex to work when VPN is on

[raptureveteran 0]

Yes, I have read the other threads from 2016 or earlier on this topic but I'm still having no success.

 

This is the process I've followed:

 

Configured port forwarding on this website, 4242 we'll say. Local port 32400. Saved. Connect to VPN. 

 

In Plex I have the "Manually Specify Public Port" set to 4242 and I hit apply/retry and it fails. 

 

I'm using DDWRT as my router firmware, I went to "administration>commands" and ran the command I saw someone say you need to run

 

iptables -t nat -I PREROUTING -i tun1 -p tcp --dport 32400 -j DNAT --to-destination 192.168.1.145

 

 

192.168.1.145 is the private IP of the box running Plex.

 

 

 

I have no idea whats going on here.

[go558a83nk 352]

Looks like you don't have all the iptables that you need.

 

See https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/?hl=%2Bdd-wrt+%2Btomato+%2Bport+%2Bforward

[raptureveteran 0]

so newb question

Looks like you don't have all the iptables that you need.

 

See https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/?hl=%2Bdd-wrt+%2Btomato+%2Bport+%2Bforward

 

port is 32400 for plex and the destip is the box thats running plex? And also in the example you linked to it says tun1 but my ifconfig says "tun0" so edit that to tun0?

Edited ... by raptureveteran

[go558a83nk 352]

 

Looks like you don't have all the iptables that you need.

 

See https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/?hl=%2Bdd-wrt+%2Btomato+%2Bport+%2Bforward

so newb question

 

port is 32400 for plex and the destip is the box thats running plex?

 

yes, use 32400 because Air has already remapped it from 4242 to 32400.  and yes, the destination IP is your machine running plex.

[raptureveteran 0]

 

 

so newb question

Looks like you don't have all the iptables that you need.

 

See https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/?hl=%2Bdd-wrt+%2Btomato+%2Bport+%2Bforward

 

port is 32400 for plex and the destip is the box thats running plex?

yes, use 32400 because Air has already remapped it from 4242 to 32400.  and yes, the destination IP is your machine running plex.

yea i still cant get it to work.

 

iptables -I FORWARD -i tun0 -p udp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -I FORWARD -i tun0 -p tcp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -t nat -I PREROUTING -i tun0 -p tcp --dport 32400 -j DNAT --to-destination 192.168.1.145

iptables -t nat -I PREROUTING -i tun0 -p udp --dport 32400 -j DNAT --to-destination 192.168.1.145

 

rules I used in ddwrt. did "run commands" and "save firewall" and plex is still saying i have no remote access

[go558a83nk 352]

 

 

 

so newb question

Looks like you don't have all the iptables that you need.

 

See https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/?hl=%2Bdd-wrt+%2Btomato+%2Bport+%2Bforward

 

port is 32400 for plex and the destip is the box thats running plex?

yes, use 32400 because Air has already remapped it from 4242 to 32400.  and yes, the destination IP is your machine running plex.

yea i still cant get it to work.

 

iptables -I FORWARD -i tun0 -p udp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -I FORWARD -i tun0 -p tcp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -t nat -I PREROUTING -i tun0 -p tcp --dport 32400 -j DNAT --to-destination 192.168.1.145

iptables -t nat -I PREROUTING -i tun0 -p udp --dport 32400 -j DNAT --to-destination 192.168.1.145

 

rules I used in ddwrt. did "run commands" and "save firewall" and plex is still saying i have no remote access

 

you may have to SSH to the router and paste the commands via the command line.

 

Also, are you sure it's TUN0 ?

[raptureveteran 0]

 

 

 

 

so newb question

Looks like you don't have all the iptables that you need.

 

See https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/?hl=%2Bdd-wrt+%2Btomato+%2Bport+%2Bforward

 

port is 32400 for plex and the destip is the box thats running plex?

yes, use 32400 because Air has already remapped it from 4242 to 32400.  and yes, the destination IP is your machine running plex.

yea i still cant get it to work.

 

iptables -I FORWARD -i tun0 -p udp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -I FORWARD -i tun0 -p tcp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -t nat -I PREROUTING -i tun0 -p tcp --dport 32400 -j DNAT --to-destination 192.168.1.145

iptables -t nat -I PREROUTING -i tun0 -p udp --dport 32400 -j DNAT --to-destination 192.168.1.145

 

rules I used in ddwrt. did "run commands" and "save firewall" and plex is still saying i have no remote access

 

you may have to SSH to the router and paste the commands via the command line.

 

Also, are you sure it's TUN0 ?

 

Yes.

 

#ifconfig

 

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  

          inet addr:10.4.97.18  P-t-P:10.4.97.18  Mask:255.255.0.0

 

I'll go ahead and SSH in and see if I have any success

[raptureveteran 0]

 

 

 

 

so newb question

Looks like you don't have all the iptables that you need.

 

See https://airvpn.org/topic/9270-how-to-forward-ports-in-dd-wrt-tomato-with-iptables/?hl=%2Bdd-wrt+%2Btomato+%2Bport+%2Bforward

 

port is 32400 for plex and the destip is the box thats running plex?

yes, use 32400 because Air has already remapped it from 4242 to 32400.  and yes, the destination IP is your machine running plex.

yea i still cant get it to work.

 

iptables -I FORWARD -i tun0 -p udp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -I FORWARD -i tun0 -p tcp -d 192.168.1.145 --dport 32400 -j ACCEPT

iptables -t nat -I PREROUTING -i tun0 -p tcp --dport 32400 -j DNAT --to-destination 192.168.1.145

iptables -t nat -I PREROUTING -i tun0 -p udp --dport 32400 -j DNAT --to-destination 192.168.1.145

 

rules I used in ddwrt. did "run commands" and "save firewall" and plex is still saying i have no remote access

 

you may have to SSH to the router and paste the commands via the command line.

 

Also, are you sure it's TUN0 ?

 

so I SSHed into the router and ran those 4 commands, not sure if they registered. I'm pretty new to iptables but nothing in this list sticks out to me as what those commands are doing. maybe you can see different? I edited out the full hostname of my ISP. For knowledge sake, 192.168.1.145 is the private IP of the linux box running Plex.

 

Chain FORWARD (policy ACCEPT) 

target prot opt source destination 

ACCEPT tcp -- 0.0.0.0/0 192.168.1.145 tcp dpt:32400 

ACCEPT udp -- 0.0.0.0/0 192.168.1.145 udp dpt:32400 

ACCEPT tcp -- 0.0.0.0/0 192.168.1.145 tcp dpt:32400 

ACCEPT udp -- 0.0.0.0/0 192.168.1.145 udp dpt:32400 

ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 

ACCEPT 47 -- 192.168.1.0/24 0.0.0.0/0 

ACCEPT tcp -- 192.168.1.0/24 0.0.0.0/0 tcp dpt:1723 

lan2wan 0 -- 0.0.0.0/0 0.0.0.0/0 

ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 

ACCEPT tcp -- 0.0.0.0/0 192.168.1.134 tcp dpt:32400 

ACCEPT udp -- 0.0.0.0/0 192.168.1.134 udp dpt:32400 

ACCEPT tcp -- 0.0.0.0/0 192.168.1.117 tcp dpt:32400 

ACCEPT udp -- 0.0.0.0/0 192.168.1.117 udp dpt:32400 

ACCEPT tcp -- 0.0.0.0/0 192.168.1.145 tcp dpt:32400 

ACCEPT udp -- 0.0.0.0/0 192.168.1.145 udp dpt:32400 

TRIGGER 0 -- 0.0.0.0/0 0.0.0.0/0 TRIGGER type:in match:0 relate:0 

trigger_out 0 -- 0.0.0.0/0 0.0.0.0/0 

ACCEPT 0 -- 0.0.0.0/0 0.0.0.0/0 state NEW 

DROP 0 -- 0.0.0.0/0 0.0.0.0/0 

 

 

 

Chain PREROUTING (policy ACCEPT) 

target prot opt source destination 

DNAT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:32400 to:192.168.1.145 

DNAT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:32400 to:192.168.1.145 

DNAT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:32400 to:192.168.1.145 

DNAT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:32400 to:192.168.1.145 

DNAT tcp -- 0.0.0.0/0 ISPpublicIP tcp dpt:8080 to:192.168.1.1:443 

DNAT tcp -- 0.0.0.0/0 ISPpublicIP tcp dpt:666 to:192.168.1.1:666 

DNAT icmp -- 0.0.0.0/0 ISPpublicIP to:192.168.1.1 

DNAT tcp -- 0.0.0.0/0 ISPpublicIP tcp dpt:32400 to:192.168.1.134:32400 

DNAT udp -- 0.0.0.0/0 ISPpublicIP udp dpt:32400 to:192.168.1.134:32400 

DNAT tcp -- 0.0.0.0/0 ISPpublicIP tcp dpt:32400 to:192.168.1.117:32400 

DNAT udp -- 0.0.0.0/0 ISPpublicIP udp dpt:32400 to:192.168.1.117:32400 

DNAT tcp -- 0.0.0.0/0 ISPpublicIP tcp dpt:32400 to:192.168.1.145:32400 

DNAT udp -- 0.0.0.0/0 ISPpublicIP udp dpt:32400 to:192.168.1.145:32400 

TRIGGER 0 -- 0.0.0.0/0 ISPpublicIP TRIGGER type:dnat match:0 relate:0

[go558a83nk 352]

does dd-wrt have a web GUI page showing forwarded ports?  in Asus I could look on the forwarded port page in the GUI and see the iptables I entered were registered.

[raptureveteran 0]

does dd-wrt have a web GUI page showing forwarded ports?  in Asus I could look on the forwarded port page in the GUI and see the iptables I entered were registered.

yes but it only shows what I put in previously. nothing updated. i asked this question on the ddwrt forums to see if i could get any help there.

[raptureveteran 0]

suddenly Plex is saying that I have access remotely. I did add the following to the gui port forwarding:

 

Application -- Protocol -- Source Net -- Port From -- IP Address -- Port To -- Enable

 

plex -- both -- empty -- 4148 (airvpn port) -- 10.4.97.18 (tun0 ip) -- 32400 -- check

 

save then apply settings. reloaded plex and I got "Fully accessible outside your network". 

 

Not really sure if its the GUI changes I made or if its the iptables commands via SSH and just reloading Plex did the trick. Guess I'll consider this a success until it dies again and I come back here lol

[go558a83nk 352]

well you haven't actually said....since putting in the 4 iptables lines remote access isn't working?  have you checked the port forwarding page on this web site to see if Air can reach your plex server?  you may just need to restart plex remote access for it to register it working.

[raptureveteran 0]

well you haven't actually said....since putting in the 4 iptables lines remote access isn't working?  have you checked the port forwarding page on this web site to see if Air can reach your plex server?  you may just need to restart plex remote access for it to register it working.

1) Look above

2) To answer your question, sorry, but yes originally it was saying remote access wasnt working. And yes I did have success with the check function on the port forward page. I think this might have been a Plex issue because I was hitting "retry" constantly and it failed. But the minuted I closed the tab and went back to it...suddenly it works fine. I'm interested to see what happens if I have to change locations which will change my IP. But currently the location I selected is fast enough for me to keep it.