Server Version#: 1.20.2.3343
Player Version#: 4.34.4
Hey I am getting this Error:
“NetworkServiceBrowser: Error sending out discover packet from 192.168.0.38 to 239.255.255.250: Operation not permitted”
every ten seconds
I am running the plex media server on a Raspberry pi 4 with 4gb ram on raspbian lite.
I disabled IPv6, DLNA, Remote Acces and GDM.
Does anyone has the same problem or knows how to fix it?
Plex uses SSDP (Simple Service Discovery Protocol) for discovery of certain services on your local network; some of these can be disabled (GDM, DLNA, etc…) and some cannot (network tuners). So Plex will always send multicast SSDP queries on your network.
Do you have any firewall rules configured, via iptables maybe? That would almost certainly cause operation not permitted errors. If so, you may need to add a rule to allow traffic to UDP port 1900 to 239.255.255.250.
Thanks for your reply,
To be honest I don’t really understand IpTables.
Do you mind telling me how to change it ? I don’t know if it changes anything that a vpn client and pihole are running on the same pie.
I don’t think a VPN client or pi-hole should interfere with local traffic but it may be worth a test to disable the VPN client to see if it has an impact.
As for iptables, you can list your current rules using sudo iptables -L from the terminal. Depending on the existing rules, you may be able to explicitly allow SSDP by using something like:
sudo iptables -A OUTPUT -d 239.255.255.250 -p udp --dport 1900 -j ACCEPT
While we’re at it, are you running anything in Docker on this system?
I tried turning of other services and add the iptable rule but still the same
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 91.132.136.83 anywhere
ACCEPT all -- 91.132.136.83 anywhere
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT all -- 10.6.0.0/24 anywhere
ACCEPT all -- 255.255.255.0/24 anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 10.8.0.0/24 anywhere
ACCEPT all -- 10.6.0.0/24 anywhere
ACCEPT all -- 255.255.255.0/24 anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 10.8.0.0/24 anywhere
DROP all -- anywhere anywhere
DROP all -- anywhere anywhere
f2b-sshd tcp -- anywhere anywhere multiport dports s sh
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT all -- 10.6.0.0/24 anywhere
ACCEPT all -- 255.255.255.0/24 anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 10.8.0.0/24 anywhere
ACCEPT all -- 10.6.0.0/24 anywhere
ACCEPT all -- 255.255.255.0/24 anywhere
ACCEPT all -- 192.168.0.0/24 anywhere
ACCEPT all -- 10.8.0.0/24 anywhere
ACCEPT udp -- anywhere anywhere udp dpt:51820 /* wireguard-input-rule */
f2b-sshd tcp -- anywhere anywhere multiport dports ssh
Chain FORWARD (policy ACCEPT)
target prot opt source destination
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere 91.132.136.83
ACCEPT all -- anywhere 91.132.136.83
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT all -- anywhere 10.6.0.0/24
ACCEPT all -- anywhere 255.255.255.0/24
ACCEPT all -- anywhere 192.168.0.0/24
ACCEPT all -- anywhere 10.8.0.0/24
ACCEPT all -- anywhere 10.6.0.0/24
ACCEPT all -- anywhere 255.255.255.0/24
ACCEPT all -- anywhere 192.168.0.0/24
ACCEPT all -- anywhere 10.8.0.0/24
DROP all -- anywhere anywhere
DROP all -- anywhere anywhere
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT udp -- anywhere anywhere udp dpt:51820
ACCEPT udp -- anywhere anywhere udp spt:51820
ACCEPT udp -- anywhere anywhere udp dpt:22
ACCEPT udp -- anywhere anywhere udp spt:22
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:51820
ACCEPT tcp -- anywhere anywhere tcp spt:51820
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp spt:ssh
ACCEPT all -- anywhere 10.6.0.0/24
ACCEPT all -- anywhere 255.255.255.0/24
ACCEPT all -- anywhere 192.168.0.0/24
ACCEPT all -- anywhere 10.8.0.0/24
ACCEPT all -- anywhere 10.6.0.0/24
ACCEPT all -- anywhere 255.255.255.0/24
ACCEPT all -- anywhere 192.168.0.0/24
ACCEPT all -- anywhere 10.8.0.0/24
Chain f2b-sshd (2 references)
target prot opt source destination
REJECT all -- 192.168.0.178 anywhere reject-with icmp-port-unreachable
REJECT all -- 192.168.0.178 anywhere reject-with icmp-port-unreachable
RETURN all -- anywhere anywhere
RETURN all -- anywhere anywhere
here are my iptables maybe they can help you i don’t know.
Chain f2b-sshd (2 references)
target prot opt source destination
REJECT all -- 192.168.0.178 anywhere reject-with icmp-port-unreachable
REJECT all -- 192.168.0.178 anywhere reject-with icmp-port-unreachable
RETURN all -- anywhere anywhere
RETURN all -- anywhere anywhere
these 4 lines at the bottom are maybe important?
And no, no docker running.
Sorry, I missed the notification that you’d replied.
I think it’s likely these rules, in the middle of our iptables OUTPUT chain, which are blocking multicast SSDP traffic from being sent. These rules state that iptables should drop traffic from any source, to any destination, and of any protocol. There are rules above it to allow certain types of traffic to pass. All the rules below these two are “covered up” by them.
I’d suggest inserting a rule at the top of the output chain to explicitly allow SSDP multicast. Try this:
sudo iptables -I OUTPUT 1 -d 239.255.255.250 -p udp --dport 1900 -j ACCEPT
The “-I OUTPUT 1” specifies that the rule should be inserted into the first position in the chain OUTPUT. The rest of the rule states that traffic from anywhere to 239.255.255.250 on UDP port 1900 should be allowed. That is the IP address and port used for multicast SSDP.
If that doesn’t work, please provide the output of the following command:
sudo iptables -t filter -L --line-numbers -n
This will list all of your rules, this time with line numbers.
thanks for your answer i tested it and it somehow seems to work a little ? It is weird because after I put your Iptable in the error is gone until I reboot.
There are steps you have to take to make iptables rules persistent; a quick web search for “persistent iptables” should get you what you need.
thanks a lot mate I couldn’t figure out how the persistent iptables work because after reboot it always was gone again but just put it into a .sh script into cron @reboot
This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.
