Plex thinks remote users are local

Server Version#: 1.16.6.1592
Player Version#:

Remote access is working fine, however all remote users locations are shown as Local with the private IP address of my gateway and thus bitrate limits are not being enforced. I did have to configure a manual NAT, but the configuration is as standard as it can get, so I’m not quite certain where to look next. Any advice would be greatly appreciated.

Do you have a proxy or vpn ?

No. Just a firewall between the Plex server and the internet doing NAT.

Please make sure to have DEBUG logging on, VERBOSE off.
Recreate one such playback which causes it to show. (30 seconds or so)

Then please collect the logs (ZIP downloaded)

Also let me know if you have any settings in Settings - Server - Network - Show Advanced which are not default ?

Thank you!

Here are the logs - Archive.zip (84.0 KB)

The streams in question would be coming from 10.0.1.1.

Here are my Network settings.

May I have all of them please ?

  1. Contents of the Logs directory
    -or-
  2. Settings - Server - Troubleshooting - Download Logs.

There isn’t enough in what you sent.

Please recreate and capture again.

If your plex is seeing your remote connections with a source ip of a interface interface of your firewall, that has to be your firewall right? Are you sure you don’t have nested NAT routers with 2 layers of private ips? You do for some reason list two ip ranges. Also that is not the fomat I use to speciify my LAN networks, mine are in 10.0.0.0/24 format.

It certainly could be the firewall, I don’t know what it could be though as i just have a nat statement with a port forward from 32450 to 32400 and an ACL for 32450 to to the natted IP. I am continuing to look at it more from that angle.

The second subnet is for google Wifi. That doesn’t unfortunately support bridge mode so it is sitting behind my firewall. I had to put that there so internal wireless clients weren’t seen as remote but those are working just fine.

your remote folks connect properly right? (no relay required.) As I understand it, that means that your remote clients are then able to connect directly to your plex server.
Your router presents an external socket for plex, perhaps 24.250.128.233:32450 (guessing from the log) and then you have it NAT/forward directly via it’s internal interface (10.0.1.1) to the socket on your internal plex server (maybe 10.0.1.209:32400 ?)

When you see a remote person connecting, the dashboard lists 10.0.1.1 as their IP address, not their actual public Internat address that you should see?

It’s like your router is acting as a proxy not just NAT, port remap and forward.

Maybe something for the router support forum for what you use? I know I have gotten some great advice on the pfSense forum for my plex arrangement.

From plex perspective, you have specified the LAN networks to include the subnet that that interface is in, so on the surface at least it seems to be acting appropriately.

What firewall are you using?

I know for some firewalls if you enable masquerading for the port forward it will then show the source IP of the firewall or your public IP address to the computer on the LAN.

Fortigate.

Correct. They are playing as normal - with no relay - and yes. The dashboard shows 10.0.1.1 for remote users.

I will dig into it more from the firewall side. I did spin up a PFSense VM and it worked as I would expect it to.

I would probably make sure that the rule that you are using for the port forward doesn’t have NAT enabled. As the only traffic going through your firewall that needs to be NAT’d is your LAN to WAN traffic.

You are the best! That was it! Thanks!

This topic was automatically closed after 90 days. New replies are no longer allowed.