Unable to forward Plex for direct connection

Question

Hi everyone, 
 I just upgraded my old sophos UTM, to the new XG firewall (SFOS 19). Now I can't make my Plex server accessible from internet. I try to use de DNAT server assistant, but it doesn't work. Did someone manage to permit direct connexion for Plex media server ? 
 thank you very much 
 
 Eric

Christian Sosa1 · Accepted Answer

Stumbled upon this whle searching for something else but quick comment. I wanted to ask if you are confident that the source port is 55000? It's much more common to have the source port be 1-65535 and destination port be 32400 in your case.

Prism · Answer

Hi! 
 Can you send a screenshot of the Service, NAT and Firewall Rules? On the Plex Service you created over the Firewall you need to leave the source port as 1:65535, or else the policy won't work since It's expecting the client to reach the Firewall while using the source port (itself) on 55000. 
 Meanwhile the Destination port is 32400, which is the default for Plex (Plex uses only TCP/32400 for remote access.) . It should look like this: 
 
 If you need assistance, I can send two example screenshots of a Firewall & NAT Policy which will work as expected with Plex. 
 Thanks!

Vivek Jagad · Answer

Hey Eric Gosselin , ANY = 1:65535 As in the world there are only 65,535 ports available. So by ANY it means any port falling in the range of 1:65535. So For example if you are browsing to google.com, then you know that the google.com uses https Port i.e. 443. So, the service object for 443 i.e. HTTPS traffic would be as follows: Source range of Ports will be 1:65535. and destination Port will be just 443. In your case it is plex so source range of ports will be 1:65535 and destination will be 32400.

Vivek Jagad · Answer

Nope source could be any, as for any machine originating the traffic would pick up a random port, so yes you are safe and it is not a security issue... But when it comes to a destination port, "ANY" is not recommended. Better mention an explicit service only or it could be a range of ports depending upon the destination server's requirement.

Eric Gosselin · Answer

Thank you all for the help, it seem that my error was to specify port 32400 as source. Now when I specify the 1:65536 it is working.

Unable to forward Plex for direct connection

Top Replies