How to implement fail2ban on Plex Media Server?

Plex Media Server Remote Access
1

I have searched but there are no clear guides on how to implement fail2ban for Plex Media Server. It is a vulnerability to have the port open, so:

  1. How do we configure to get logging going?
  2. What events would constitute a failure?

Thanks.

2

All authentication is against plex.tv and not against your server.
A similar technique to fail2ban has long since been implemented on plex.tv
If you want to improve the security of your account, activate 2FA.

1 Like
3

To add to Otto,

If you want ultimate security,

  1. Create a firewall rule which only allows the IP addresses of the Plex servers which service you. These can be found in your Plex logs after startup.

  2. Add the IP address or DDNS FQDN of the person you allow streaming .

4

Great to know, finally clear answers!! Reassuring as well.

Do the IP addresses of the Plex server change? Across reboots.
The people I share with unfortunately have dynamic IP addresses…

5

The people I share with have DDNS apps which run on their hosts or full FQDN (with cert) attached to the edge device (router).

Whenever they restart, as well as periodically throughout the day, their current IP address is updated.

The IP addresses of Plex servers do change but very infrequently. It’s only necessary to check them if you start experiencing failures in Remote Access turning :white_check_mark: .

6

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.