I suppose im too stupid for port forwarding :/ reddit / selfhosted ---------------------------------------------------------------------- Mqttes · 2023-11-12 14:56 Hi everyone, i want to set up a jellyfin server so that it can be accesed from outside of my local network. (my first self hosting project :) ) However, despite having gotten port forwarding to work in the past, i cannot get it to work in this case. (Its a fritz box) I have contacted fritz support, they sent me the standard trouble shooting guides, which were of no help. Im quite certain, that, as is most often the case with such issues, it is a stupid mistake i made somewhere in the configuration. My jellyfin setup is run in a docker container of a Raspberry Pi with Pi OS lite installed. it works witout an issue in the local network, i do not use a vpn for this. Here is my Fritz port forwarding config: [https://imgur.com/a/LFZNgmu](https://imgur.com/a/LFZNgmu) The relevant port is 8096: [https://imgur.com/Dk67L4L](https://imgur.com/Dk67L4L) ​ If someone knows what i did wrong, please let me know, Greetings, Mqttes ---------------------------------------------------------------------- Karagun · 2023-11-12 15:16 Would it be possible to upload the first screenshot in higher resolution? I can't make out any details. ---------------------------------------------------------------------- braeluca · 2023-11-12 15:18 Hast du bei der Config als Protokoll TCP angegeben und stimmt der Port zum Gerät? In der Ansicht kann man das nicht sehen. Sonst würde ich sagen, dass alles richtig aussieht :) ---------------------------------------------------------------------- Mqttes · 2023-11-12 15:29 Hi, ja TCP, und der port ist 8096, welches der ist den ich bei docker compose und der webui von jellyfin angeben habe (ist eh der default). dieser klappt ja auch im lokalen netzwerk. ---------------------------------------------------------------------- braeluca · 2023-11-12 15:32 Bei welchem Internetanbieter bist du denn? Kann sein, dass du kein volles Dual Stack hast mit ner eigenen IPv4, sondern nur Dual Stack Lite. ---------------------------------------------------------------------- SadaUkyo · 2023-11-12 15:33 Bekommst du einen vollen Dualstack Tunnel oder nur dslite? Beim Dslite Tunnel kann es sein, dass der Port für dich ncht existiert und für einen anderen User mit der selben IP genutzt wird. ---------------------------------------------------------------------- tech2but1 · 2023-11-12 15:33 Clean your glasses mate. ---------------------------------------------------------------------- braeluca · 2023-11-12 15:33 Bei welchem Internetanbieter bist du denn? Kann sein, dass du kein volles Dual Stack hast mit ner eigenen IPv4, sondern nur Dual Stack Lite. ---------------------------------------------------------------------- Mqttes · 2023-11-12 15:34 1&1 ---------------------------------------------------------------------- Mqttes · 2023-11-12 15:35 ach so, wo kann ich das denn einsehen? ---------------------------------------------------------------------- Mqttes · 2023-11-12 15:36 https://imgur.com/NwYADCE.png ---------------------------------------------------------------------- braeluca · 2023-11-12 15:39 Schau in der FritzBox im Online Monitor mal nach, ob da unter IPv4 irgendwas mit dslite steht oder ob da eine IP Adresse steht ---------------------------------------------------------------------- sebampueromori · 2023-11-12 15:40 Wenn Sie Cgnat anwenden dann wird es nicht funktionieren einen Port zu forwarden ---------------------------------------------------------------------- SadaUkyo · 2023-11-12 15:45 In der Fritzbox auf der Startseite unter Internetzugang steht DSL oder Dslite. ---------------------------------------------------------------------- Mqttes · 2023-11-12 15:51 oh ja dslite, also kann ich nur eine gewisse range an ports nutzen? wenn ja, weißt du wo ich diese finde? ---------------------------------------------------------------------- Mqttes · 2023-11-12 15:52 oh ja dslite, also kann ich nur eine gewisse range an ports nutzen? wenn ja, weißt du wo ich diese finde? ---------------------------------------------------------------------- Mqttes · 2023-11-12 15:54 wo würde ich sehen ob ich cgnat verwende? ---------------------------------------------------------------------- SadaUkyo · 2023-11-12 15:56 Puh ja das kann mein irgendwo in der Fritzbox einsehen. Ich weiß gerade aber leider nicht mehr wo, so aus dem Kopf. Du kannst natürlich auch bei deinem Anbieter Anrufen und ein wenig Stunk machen wegen VPN und Home-Office und so das die dich auf Dualstack umstellen. ---------------------------------------------------------------------- braeluca · 2023-11-12 15:57 Da bin ich leider auch überfragt, wo man diese info her bekommt. Du könntest allerdings auch eine IPv6 freigabe machen und über IPv6 dann zugreifen. Ist halt etwas umständlich. ---------------------------------------------------------------------- sebampueromori · 2023-11-12 16:06 Wenn deine IP Adresse nicht public ist dann bist du hinter einem CGNAT ---------------------------------------------------------------------- SadaUkyo · 2023-11-12 16:17 Wenn ich mich recht erinnere sagt die Fritzbox einem das, wenn man eine Portfreigaben erstellt. Aber auch schon länger her... ---------------------------------------------------------------------- Felinatorio · 2023-11-12 16:24 As mentioned by others, I suspect that you (like many of us poor souls) sit behind a Cgnat of some sort, so port forwarding won't work without purchasing a static IP or something to that effect. However, tunneling (with services like Tailscale, which I cannot recommend enough) will work for your purposes. ---------------------------------------------------------------------- Karagun · 2023-11-12 16:27 was on mobile and would only get shown the preview image. My bad. ---------------------------------------------------------------------- Mqttes · 2023-11-12 16:32 can i avoid purchasing a static ip by using a domain? ---------------------------------------------------------------------- Mqttes · 2023-11-12 16:33 habe gerade noch eine freigabe erstellt, die auch nicht funktioniert, habe leider kein mitteilung erhalten, aber danke ---------------------------------------------------------------------- drizzleV · 2023-11-12 16:36 Very high chance that you are behind DualStack IPv4-v6, that is the default config if your provider is 1&1 or Vodafone (lower chance) . To expose your services to the Internet, you need to call them to convince them that you need an IPv4 address (dynamic). Tip: don't tell them that you want to expose your services to the Internet. ---------------------------------------------------------------------- DiscoKeule · 2023-11-12 16:37 Ich hab gesehen dass du ds Lite nutzt, das bedeutet du hast keine eigene ipv4 sondern teilst dir diese was leider ports öffnen so unmöglich macht, du kannst aber einen portmapper wie feste IP benutzen einfach Mal googlen, mach ich selber mit meinem Plex Server genauso ---------------------------------------------------------------------- drizzleV · 2023-11-12 16:38 No, the problem is that you are behind a NAT, you cannot expose anything unless your provider let you. ---------------------------------------------------------------------- tech2but1 · 2023-11-12 16:39 Nope. ---------------------------------------------------------------------- Yanni_X · 2023-11-12 16:40 Beim Anbieter anrufen kann sehr oft helfen. Ich hab sowohl bei 1&1 als auch bei Vodafone schon eine öffentliche IP ohne NAT bekommen, ohne einen Aufpreis zahlen zu müssen oder so. Dauerte teilweise nur 10min nach dem Anruf Achtung: Unterschied öffentliche und statische IP. Statisch kostet oft extra. Mit DynDNS reicht jedoch auch eine öffentliche, dynamische IP. ---------------------------------------------------------------------- SadaUkyo · 2023-11-12 16:45 Ja das stimmt. Andere Frage OP an wen möchtest du deinen jellyfin den Teilen? Kannst du deinen Freunden/Familie nicht einfach ein wireguard VPN zu deiner Fritzbox einrichten? Dann musst du dich nicht mit Portfreigaben in dein privates Netz rumschlagen. ---------------------------------------------------------------------- ZerNico · 2023-11-12 17:02 I had the same and called my internet provider. They just switched me to a public IP for free ---------------------------------------------------------------------- tgkad · 2023-11-12 17:06 In some case, you can call your ISP and ask them to turn off cgnat for you. The reason I usually give is that I'm trying to access my cameras at home. ---------------------------------------------------------------------- emprahsFury · 2023-11-12 17:13 Im sure you already know this, but when i open that link, Reddit opens a webview of imgur. So i have to first close the "dl my app" nag and then i have to pinch-to-zoom the image because imgur doesn't believe that anyone but them owns the image. Once Ive zoomed in i realize im zooming the webpage and not the image, because again- imgur doesn't believe anyone has any rights to the image so they disable normal usage. So us of lesser gods have this blurry resized preview with no way to access the original. Im so sorry i let imgur get this bad that it affects your ability to scroll comments. ---------------------------------------------------------------------- KennyRX · 2023-11-12 17:27 Hi, if you are behind a CGNat indeed and you can't convince your ISP to get out of it you can get a cheap VPS from a local provider, set a Wireguard tunnel between your Jellyfin server and the VPS then run a reverse proxy on the VPS pointing to the tunnel ip:port, the easiest reverse proxy to run is Nginx Proxy Manager which is pretty straight forward. ---------------------------------------------------------------------- Franceesios · 2023-11-12 17:32 Can I suggest that you use Cloudflare tunnel? And don't call yourself stupid, you are quite the opposite dwelling in this self hosting adventure. ---------------------------------------------------------------------- 9acca9 · 2023-11-12 17:38 after several calls to the ISP and using this as argument, and also saying that i will make a complain in "consumer defense" they give me my beautiful static ip public. At least you can use this argument in Argentina. ---------------------------------------------------------------------- Mqttes · 2023-11-12 17:52 hi, thanks very much, someone else reccomended a similar process with noip, however when setting that up i saw it requires you open up a port anyway, which i suppose cloudflare does as well? ---------------------------------------------------------------------- Franceesios · 2023-11-12 17:54 Cloudflare does not require you to open any ports up. Just sign up (it's free) but it does require you to have a top domain registered. ---------------------------------------------------------------------- tech2but1 · 2023-11-12 17:57 I didn't know that as I use old reddit and RES on a computer. I'm not really into using phones for anything much as, as is evidenced here, they are a PITA and give you a terrible user experience! ---------------------------------------------------------------------- freshmeat09 · 2023-11-12 17:58 Use Tailscale or headscale on a vps to route through the cnat ---------------------------------------------------------------------- Dantnad · 2023-11-12 18:23 Try Cloudflare tunnels, I use them for absolutely everything regarding DNS and use Tailscale mainly to use one of the nodes as a DNS with affairs for all the other nodes and ssh. But cloudflare tunnels is the way to go to get around port forwarding and ddns ---------------------------------------------------------------------- Dantnad · 2023-11-12 18:23 You can with cloudflare tunnels ---------------------------------------------------------------------- Deadlydragon218 · 2023-11-12 18:41 No because domain name records are tied to IP addresses. ---------------------------------------------------------------------- notdoreen · 2023-11-12 19:26 Can you use Tailscale on top of a VPN or can you have both active? I tried Tailscale on my phone but I'm not able to access it if my VPN is turned on. ---------------------------------------------------------------------- HeftyNerd · 2023-11-12 19:57 Warum kein WireGuard VPN (seit FritzOS 7.50) und dann drauf zugreifen? Sonst Cloudflare Tunnel :) ---------------------------------------------------------------------- ArtamaMeyer · 2023-11-12 20:07 Dont use Cloudflare tunnel for streaming media. You will probably get banned for it. There are numerous post talking about this will break their TOS ---------------------------------------------------------------------- AltLawyer · 2023-11-12 20:11 Will get banned for media streaming ---------------------------------------------------------------------- Franceesios · 2023-11-12 20:14 I'm using cloudflare to access my plex server without any issues. ---------------------------------------------------------------------- GamerXP27 · 2023-11-12 20:26 isnt it breaking the tos of cloudlfare tunnel? ---------------------------------------------------------------------- zovix · 2023-11-12 20:34 If you're only planning on hosting it for yourself, you could use Tailscale. No need to mess with port forwarding. ---------------------------------------------------------------------- AltLawyer · 2023-11-12 20:43 Yet. It violates the TOS and they're banning Plex users ---------------------------------------------------------------------- Franceesios · 2023-11-12 20:44 Ohhhh I will keep an eye in that then, thank you. ---------------------------------------------------------------------- nataku411 · 2023-11-12 23:45 Always call the ISP first. I didn't even have to pay to get my permanent IP. ---------------------------------------------------------------------- subven1 · 2023-11-13 04:56 Jellyfin uses 8096 **and 8920** TCP. ---------------------------------------------------------------------- dark-tapioca · 2023-11-13 06:57 Static IP is not required for successful port forwarding (in fact, it's worse for home users because of potentially reduced security). And with some providers you can have the same issue even after purchasing a static IP. What's really needed is a "white" IP (I don't remember the proper term for it) - basically just a real unique public IP address that's not shared between clients behind ISP's NAT. ---------------------------------------------------------------------- dark-tapioca · 2023-11-13 07:06 This is the best proper solution. However, it does require a bunch of technical knowledge, and there's no way to get a VPS completely for free. Also, one needs to watch out for bandwidth limits for cases like streaming media ---------------------------------------------------------------------- killermouse0 · 2023-11-13 11:40 That was my case as well, but I was fortunately able to switch to IPv6 without side effects. ---------------------------------------------------------------------- Alcudring · 2023-11-13 11:59 If you don't want to use cloud flare, duckdns is a free alternative. I think you're German speaking? Here is a German guide: https://dc9vq.de/anleitungen/duckdns-org-und-fritzbox/ ---------------------------------------------------------------------- Efficient_Bird_6681 · 2023-11-13 12:27 Did they not change this?