I disabled DNS Rebinding in PFsense, downloading all my bond movies for a trip. Thanks to those who contributed to this thread.
Now I just need to remember to turn it on. I tried to add the following to unbound, but that didn’t seem to work
shouldn’t the domain be plex.direct (not plex.home)?
Maybe, but I don’t think so. I use the TLD “home” in my private network. I assumed it that I should use the hostname that my network knows it by, but maybe I’m wrong.
% dig plex.home
; <<>> DiG 9.10.6 <<>> plex.home
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17024
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;plex.home. IN A
;; ANSWER SECTION:
plex.home. 3600 IN A 192.168.1.40
;; Query time: 75 msec
;; SERVER: 192.168.1.5#53(192.168.1.5)
;; WHEN: Sat Nov 13 12:22:12 CST 2021
;; MSG SIZE rcvd: 54
That might be the domain used locally in your network – however that’s not the domain requiring an exception from DNS rebind protection.
Thanks @tom80H! Clearly I didn’t understand the rebinding issue. I’ve updated this config on PFsense and this does indeed work.
I guess that makes more sense, re-binding is changing the IP for the same record. Thanks again for questioning this AND providing the guidance.
% dig plex.direct
; <<>> DiG 9.10.6 <<>> plex.direct
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 48980
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;plex.direct. IN A
;; ANSWER SECTION:
plex.direct. 86400 IN A 52.19.5.174
;; Query time: 575 msec
;; SERVER: 192.168.1.5#53(192.168.1.5)
;; WHEN: Sat Nov 13 13:37:00 CST 2021
;; MSG SIZE rcvd: 56
THANK YOU THANK THANK YOU THANK YOU. This SOLVED the issue as i am also pihole with unbound
sorry if already asked, how do I do this? Have got a BT router
Don’t know what a BT router is, but just browse around its settings and see if there is something called DNS Rebinding Protection and if so, turn it off.
Alternatively, if there is no such setting, your ISP may be doing that themselves through their DNS. Your router is configured to use their DNS server. Change this to use something else like Google’s. You can Google search for their DNS IP address to use.
1 Like
Will Plex fix its software for people who are not able to implement such workaround?
2 Likes
IIRC there’s been a post in this thread stating that it’s on Plex’ agenda – though as usual no ETA.
3 Likes
This resolved my issue as well, running 2x Piholes with Unbound DNS. This thread needs to be pinned for sure, as this has been an issue for awhile now, and finding this using google-fu is not as easy because its not clear what the problem is.
While enabling reflection may be considered by some to be “less secure,” I thought I’d share how I fixed this issue, running OPNsense 21.7.5 and Unbound DNS:
- Navigate to Services → Unbound DNS → Overrides
- In the Host Overrides section, create a new entry
- Host: * (wildcard)
- Domain: plex.direct
- Type: A or AAAA (default/leave as is)
- IP: <internal ip address of your Plex machine>
- Description: as you see fit
- Create aliases if you like; I created none
This override will intercept any internal traffic requesting *.plex.direct (which Plex apparently uses to “locate” your server), and send it directly to your local Plex server.
Hope this helps some out who don’t want to “cripple” their routers with full-blown reflection XD
Cheers!
1 Like
There isn’t sadly.
Will try with Google’s DNS when I get chance.
@anon18523487 Any update on when the fix will be released ? I too have a BT router, but dont use this for internal DNS, I have a NAS device. I already use 1.1.1.1 but also have internal DNS to locate various devices so must retain 1 internal DNS server. I also wonder how this slipped through QA - and hope that future testing will be enhanced based upon the feedback of this thread.
2 Likes
No update, but it is on our todo list to get resolved. It’s a high priority so hopefully soon.
4 Likes
Hi, I also have same issue, and i provide the logs from client plex for ios:
PlexDebugInfo-wranglerPENG-7.26-1746 (2021-11-30 20.07.11 +0800).zip (1.9 MB)
[IDLE] * http_download - /player/proxy/poll?deviceClass=pc&protocolVersion=3&protocolCapabilities=timeline%2Cplayback%2Cnavigation%2Cmirror%2Cplayqueues&timeout=1&X-Plex-Product=Plex%20for%20Windows&X-Plex-Version=1.38.0.2734-ec4489fe&X-Plex-Client-Identifier=vxgynbr3kydqw19ns3p2ia7l&X-Plex-Platform=windows&X-Plex-Platform-Version=10.0.22000&X-Plex-Sync-Version=2&X-Plex-Features=external-media%2Cindirect-media&X-Plex-Model=standalone&X-Plex-Device-Name=PZY-Desktop&X-Plex-Device-Screen-Resolution=1920x1009%2C1920x1080&X-Plex-Client-Profile-Name=Plex%20Desktop&X-Plex-Token=xxxxxxxxxxxxxxxxxxxx&X-Plex-Language=zh - 1 active item(s)
Content-Length is -1 (of total: -1).
maybe caused by content-length is -1 ?
@pzhaoyang Firstly, turn off verbose logging in your iOS app. This isn’t needed.
It appears that Downloads is stuck trying to download a subtitle file associated with that movie. I have seen an error where if PMS thins there is a subtitle file, but the file doesn’t actually exist, it causes an error when using Downloads. Try refreshing the movie which should then remove any non-existent subtitles. Then try downloading again.
According to your guide, i have refesh my all library, and all media i just recreated, so almost of meida there has no subtitiles, but the result is still fail. so i will uploade a new logs.
if i use mobile network it’s prompt 400 error. but i already allowed cellar network.
all logs i will upload:
PlexDebugInfo-wranglerPENG-7.25-1615 (2021-12-01 19.50.52 +0800).zip (2.1 MB)
PlexDebugInfo-wranglerPENG-7.25-1615 (2021-12-01 08.44.06 +0800).zip (2.0 MB)
i also upload server side logs and DB:
Plex Media Server Databases_2021-12-01_20-22-27.zip (5.8 MB)
Ah I see it. You have a DNS rebinding issue. This will prevent using Downloads from your local network. You need to fix that yourself for now or wait for the fix to get to the App, not sure when that will be. The team is working on it.
I can’t tell when you tried using Downloads on cellular. Do you remember when it was? If not, please try again and get me new logs from both iOS and server right afterwards so I don’t have to go searching for the info in the logs.
