Community discussions

MikroTik App
 
User avatar
broderick
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Mon Nov 30, 2020 7:44 pm

Allowing Plex tv to reach the Plex server

Tue May 03, 2022 11:26 am

Hi,
I installed Plex server as a docker container in my Ubuntu server and the Plex app on my smart TV.
They used to lay on the same local subnet until a few days ago, and everythign worked well.
I then decided to put the smart tv, as long as the AP on the same room of my house on a different subnet in order to separate guest wifi and the tv traffic from my private LAN.
I am now struggling to enable my smart tv, I mean the plex app installed on tv, to reach my plex server. The smarTV is on subnet 10.10.10.0/24 and its IP is 10.10.10.30,
my server has IP 192.168.3.12.
I set this firewall rule to drop traffic from subnet 10.10.10.0/24:
add action=drop chain=forward comment="DROP Guest" dst-address=192.168.3.0/24 log=yes log-prefix=drop-guest src-address=10.10.10.0/24
It works as expected. The Plex app can't reach the Plex server on my ubuntu if this rule is enabled.
I then set another firewall rules on the top of it to enable only the plex app on my tv to reach the plex server:
add action=accept chain=forward comment="Accept Plex" dst-address=192.168.3.12 in-interface=bridge-guest src-address=10.10.10.30
Before setting the rules above I tried with a more restrictive one:
add action=accept chain=forward comment="Accept Plex" dst-address=192.168.3.12 dst-port=32400 protocol=tcp src-address=10.10.10.30
But it hadn't worked then I came up with the former above.
Could you help me figure it out please?

Thanks
 
User avatar
rextended
Forum Guru
Forum Guru
Posts: 11967
Joined: Tue Feb 25, 2014 12:49 pm
Location: Italy
Contact:

Re: Allowing Plex tv to reach the Plex server

Tue May 03, 2022 11:30 am

Simply replace both with
add action=drop chain=forward comment="DROP Guest" dst-address=192.168.3.0/24 log=yes log-prefix=drop-guest \
    src-address=10.10.10.0/24 src-address-list=!list_ip_tv
and implement ip tv address list.
/ip firewall address-list
add address=10.10.10.30 list=list_ip_tv
 
User avatar
broderick
Member Candidate
Member Candidate
Topic Author
Posts: 242
Joined: Mon Nov 30, 2020 7:44 pm

Re: Allowing Plex tv to reach the Plex server

Tue May 03, 2022 11:37 am

Simply replace both with
add action=drop chain=forward comment="DROP Guest" dst-address=192.168.3.0/24 log=yes log-prefix=drop-guest \
    src-address=10.10.10.0/24 src-address-list=!list_ip_tv
and implement ip tv address list.
/ip firewall address-list
add address=10.10.10.30 list=list_ip_tv
I found the problem. I mistakened the destination IP:

add action=accept chain=forward comment="Accept Plex" dst-address=192.168.3.10 dst-port=32400 protocol=tcp src-address=10.10.10.30

IP 192.168.3.12 was an old one

My bad, sorry.

Thanks anyway

Who is online

Users browsing this forum: GoogleOther [Bot] and 73 guests