# I'm at a loss here

**URL:** https://forums.plex.tv/t/im-at-a-loss-here/456062
**Category:** Remote Access
**Tags:** server-windows
**Created:** [September 2, 2019, 7:33pm UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062 "2019-09-02T19:33:46Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 2, 2019, 7:33pm UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/1 "2019-09-02T19:33:46Z")

</div>

Server Version#:3.108.2  
Player Version#: Multiple

I have a Plex instance running on a Server 2012 R2 (VMWare ESXi) VM, This VM had been running without issues for almost 6 years now. In the past 6 months I’ve had nothing but remote access issues where Rokus (multiple different versions) IOS/Android apps, and even [plex.tv](http://plex.tv) cannot directly connect to the server (relayed still works).

If I directly connect to the DDNS hostname and log into the web server server via the manually forwarded port I can see that in the “Remote Access” section the dreaded message “Not available outside your network” message is displayed, yet without changing a single setting and just clicking “Retry” the message goes away and everything goes back to normal.

The server is behind a pfSense virtual firewall, the VM is on a subnet with direct L3 access to the firewall interface (the firewall has multiple subnets in it, plex has its own) which does NAT (single not double) to the WAN interface but I have UPnP disabled (hence the manually forwarded port).

I’ve tried looking for troubleshooting steps and all I’ve found is how to get NAT configured no real “check this” other than open a thread on the forums and post your logs.

So here I am, anyone have any suggestions on what to look at?

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 2, 2019, 8:50pm UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/2 "2019-09-02T20:50:44Z")

</div>

You need to account for DNS Rebind protection that is enabled by default in pfSense. Read this page and take note of the section at the end that discusses DNS Rebinding.

[https://support.plex.tv/articles/206225077-how-to-use-secure-server-connections/](https://support.plex.tv/articles/206225077-how-to-use-secure-server-connections/)

---

<div class="post-metadata">

### Author: ![kcasner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/kcasner/32/300261_2.png) [@kcasner](https://forums.plex.tv/u/kcasner)
#### Post date: [September 2, 2019, 11:50pm UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/3 "2019-09-02T23:50:09Z")

</div>

I’m running into the same issue, and DNS rebind checks along with http redirect checks are disabled.

After several hours of diagnosing, I temporarily went as far as setting up an inbound WAN rule from anything to anything directly to the plex server, and have disabled the windows firewall completely!

I tried getting this working a few months back, and its supposed to be simple…

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 2, 2019, 11:59pm UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/4 "2019-09-02T23:59:33Z")

</div>

@kcasner I would need more info to assist you. Have you checked the TCP port number that is port forwarded in your setup to make sure its available? You can do this at [www.canyouseeme.org](http://www.canyouseeme.org).

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 3, 2019, 12:06am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/5 "2019-09-03T00:06:08Z")

</div>

Yes, if the port was wrong I wouldn’t be able to login from the outside using the ddns address to fix the issue.

Let me know if you need anything else.

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 3, 2019, 12:07am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/6 "2019-09-03T00:07:11Z")

</div>

I just added the custom option listed in the article to my pfSense dns resolver. Since it’s pretty random I’ll keep an eye on it and see what happens after the change

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 3, 2019, 12:23am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/7 "2019-09-03T00:23:51Z")

</div>

Checking the port was not meant for you but rather @kcasner.

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 3, 2019, 12:25am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/8 "2019-09-03T00:25:36Z")

</div>

If you are using the pfSense DNS Resolver (Unbound) and DNS Rebind Protection is enabled (by default it is), that will be the root cause for your issue.

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 3, 2019, 1:10am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/9 "2019-09-03T01:10:52Z")

</div>

Adding the advanced option listed on the docs you linked didn’t do the trick, the issue is still there.

I’ve gone ahead and disabled the resolver. I’ll check back in after figuring out if that did the trick or not.

Thanks @Achilles

---

<div class="post-metadata">

### Author: ![kcasner](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/kcasner/32/300261_2.png) [@kcasner](https://forums.plex.tv/u/kcasner)
#### Post date: [September 3, 2019, 6:16am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/10 "2019-09-03T06:16:13Z")

</div>

@Achilles Thanks for the link, that led me down the right path to find a NAT reflection setting I had wrong, so my issue ended up being different.

All is well on my end.

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 3, 2019, 9:35am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/11 "2019-09-03T09:35:09Z")

</div>

So I checked the server this morning and the settings stated that it was unreachable from the outside again even though I have disabled the pfsense resolver so I guess that was not the issue.

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 3, 2019, 9:51am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/12 "2019-09-03T09:51:16Z")

</div>

@kcasner can you share the link you used for nat reflection? Maybe that’s the issue I have as well.

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 3, 2019, 2:11pm UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/13 "2019-09-03T14:11:21Z")

</div>

Are you running a VPN?

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 3, 2019, 8:54pm UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/14 "2019-09-03T20:54:51Z")

</div>

@Achilles The pfSense instance does run an OpenVPN server for external access to the inside LANs, plus I have site to site IPSEC VPNs to connect different sites of my lab together.

However, access to the Plex server is always done via the outside interface. None of the clients are local to the plex subnet nor do they have L3 routed access other than the WAN.

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 4, 2019, 1:49am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/15 "2019-09-04T01:49:28Z")

</div>

I also noticed something stra ge just now. The server has the message stating not available outside your network. Yet, there is 3 sessions actively streaming.

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 4, 2019, 1:53am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/16 "2019-09-04T01:53:22Z")

</div>

That could be due to some async issue between your PMS and [plex.tv](http://plex.tv) that @ChuckPa could better explain

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 4, 2019, 1:55am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/17 "2019-09-04T01:55:54Z")

</div>

> [@injector2](#):
>
> there is 3 sessions actively streaming.

Are they direct or relaying?

---

<div class="post-metadata">

### Author: ![injector2](https://avatars.discourse-cdn.com/v4/letter/i/3be4f8/32.png) [@injector2](https://forums.plex.tv/u/injector2)
#### Post date: [September 4, 2019, 2:09am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/18 "2019-09-04T02:09:04Z")

</div>

Yep, Nvm they’re indirect.

---

<div class="post-metadata">

### Author: ![javiergreen](https://avatars.discourse-cdn.com/v4/letter/j/9de0a6/32.png) [@javiergreen](https://forums.plex.tv/u/javiergreen)
#### Post date: [September 4, 2019, 2:27am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/19 "2019-09-04T02:27:49Z")

</div>

I feel your pain since last update no android devices of mine stream within constant buffering. No Google anything tablets smart phones fire sticks fire TV. All my android stopped working normal. All apple devices as firefox browser work fine. I feel there some deal with apple all the sudden

---

<div class="post-metadata">

### Author: ![Achilles](https://sea1.discourse-cdn.com/plex/user_avatar/forums.plex.tv/achilles/32/16864_2.png) [@Achilles](https://forums.plex.tv/u/Achilles)
#### Post date: [September 4, 2019, 2:41am UTC](https://forums.plex.tv/t/im-at-a-loss-here/456062/20 "2019-09-04T02:41:31Z")

</div>

Can you disable secure connections and see if you can direct play?

[Next page](https://forums.plex.tv/t/im-at-a-loss-here/456062.md?page=2)
