Preferences.xml remote security

General Discussions
1

hi , Does `disableRemoteSecurity=“0” options still exist ?( in preferences.xml)

2

Not for ~five years. What are you trying to accomplish? There might be alternative ways.

3

Someone is able to download from the server.
Download option is off. Token and password updated.
There is no successful login in log files ( linux)
I can see the bandwidth with a high and costant value . I know that streaming looks like a series of “peaks”.(web plex)

I Checked with 'iftop -B '. There is a ip that download from the server over 32400 port with high speed.
I’m aware there are chrome plugins or script able to download from plex server but I don’t know how they work. If I knew how they work,may be I could block it.
So I added a firewall rule to block that ip…And he has stopped downloading …but he can change his ip again

So I’m figuring out if there is a misconfiguration with plex

plexmedia v. 1.25.9.5721

4

The Plex log files should identify the user/account being used from that IP address. Feel free to share the server logs here if you like.

5

I dont know if it is fine post log. What’s the name of the file ? ( here there many files to check)

6

For that case the Plex Media Server.log and its numbered/indexed predecessors should do.
Preferably zip the files in a single one to upload here.

7

[log.zip|attachment]
I didnt find that ip , here the plex media server log
[log.zip|attachment]

8

Logs roll over, so sadly too late :frowning:

What you can do, is make a copy of your preferences.xml file, and in that invalidate the value of the key named “PlexOnlineToken”

Then send me the zipped preferences.xml in a DM

9

Ok sent . I’m going to remove the log

10

Sadly, all looked okay

All I can suggest, is to increase the number of logs to keep, and then as soon as you see this again, zip the logs and upload here

To increase the amount of logs to keep, look here:

And search for LogNumFiles

Remember to restart PMS afterwards

11

Hi I added LogNumFiles=“30” to Preferences.xml file ( default 5) and restarted plex service. I’m going to monitor it

one question:
What’s the differences between ‘PlexOnlineToken’ and this token :
finding-an-authentication-token-x-plex-token
I use the second token for api call or tautulli etc…
is the ‘PlexOnlineToken’ like the login token ?
How to change ‘PlexOnlineToken’ ?

Thank you

12

PlexOnlineToken is a server token
The other is your user token

13

You can invalidate the server token in two ways:

  1. by signing out the server from your Plex account (Settings - Server - General)
  2. by removing the server from this list https://app.plex.tv/desktop/#!/settings/devices/pms

If you use the latter method, you will have to perform this procedure to get your server back into an account: https://support.plex.tv/articles/204281528-why-am-i-locked-out-of-server-settings-and-how-do-i-get-in/
So whenever possible, I’d prefer method 1).

14

Thank you guys