I have a doubt about the remote configuration of plex, I have had to open the port 32400 in my router and allow it in my firewall of my Ubuntu Server, the problem is that anyone can access ‘myip:port’ and access my instance of PlexTv from anywhere, I have this so that my friends and family can access it, since I consume the content at home.
Is this really safe or could there be problems exposing my IP and port?
Is there any way to allow only the IP address of Plex to my server so that only Plex can access ‘myip:port’? Or would this block access to everyone? Those who have access to my plex access via Plex.tv
Depending on the amount of effort you want apply, there are multiple ways:
In order:
Do not use 32400 as the external port. It is too well known.
– Manually port forward something very odd, e.g. 14145 (sqrt(2) as integers, etc
Odd ports are less likely to be found by traditional scanning. (range 10000->65536) which is also unlikely to conflict with other apps.
If your modem/router allows you to create inbound rules,
Create a rule which contains those source IPs / IP-ranges which you will allow
(the tighter the ranges the better). With this type rule, even if someone knows your IP and port but is outside that range, they won’t get a reply.
The better version of #2 is to have everyone setup an automatic DDNS updater. Then, in your firewall, you allow their DDNS FQDN. Now you have absolute control. This is what I do with my router/firewall
That is not a problem per se.
All they get is the program code for the Plex web app. Which they can also get faster on https://app.plex.tv
But nothing about you or your media. For that they’d need to be logged in to plex.tv and you would’ve needed to explicitly granted their username access rights beforehand.
