ljm42

Administrators
  • Posts

    4379
  • Joined

  • Last visited

  • Days Won

    27

Community Answers

  1. ljm42's post in 6.10.3 Unraid showing wrong WAN IP was marked as the answer   
    Thanks. I see now that if the router claims the external IP is 100.x.x.x then it is likely CGNAT and port forwarding isn't really possible. It is basically like being double-NATd except that you don't control the Internet-facing router.
     
    Your best bet would be to see if you can upgrade your connection to one that does not use CGNAT.
     
    For a rather technical work around, try a Google search for "cgnat vps". That is well out of scope for anything we could support though.
  2. ljm42's post in My Servers - can see status remotely but can't access was marked as the answer   
    Instructions for configuring remote access are here:
      https://wiki.unraid.net/My_Servers#Configuring_Remote_Access_.28optional.29
     
    There is likely an issue with your port forward in step 10. You need to configure that on your router, outside of the Unraid interface. Step 11 is how to test it.
  3. ljm42's post in Failed install showing errors was marked as the answer   
    It is hard to say exactly what state you're in, I'd recommend using the normal install/uninstall routine rather than manually renaming files.
     
    The best way to get back to a fully working system is to reboot. Then you can install/uninstall as needed.
  4. ljm42's post in Browser URL no longer shows the DNS Rebind version was marked as the answer   
    Please go to Settings -> Management Access. If you have previously provisioned a certificate you can click on the "Certificate subject" link to get the URL.
     
    If you want to change what happens when you access:
      http://ipaddress 
    please see:
      https://wiki.unraid.net/Manual/Security#Redirects
     
    BTW, this is not related to the My Servers plugin The URL used to access the Unraid webgui is determined by Unraid itself. There were changes between 6.9 and 6.10. 
  5. ljm42's post in Latest release breaks My Servers (2022.07.26.1609) was marked as the answer   
    @CorvinusLucian @Koenig Thanks to you both.  Would you please run this:
    /etc/rc.d/rc.unraid-api install and grab the results, then run this:
    unraid-api report (note: that second command will clear the screen, so you need to grab the results before running it)
     
    EDIT: please see this post: https://forums.unraid.net/topic/112073-my-servers-releases/#comment-1154449
     
     
  6. ljm42's post in 6.10.0 - Unable to Log in via Web GUI, Able to Log in via SSH was marked as the answer   
    Do you have a user starting with the name "root", like "rootshare"? If so that was the issue, it has been fixed in 6.10.2.
  7. ljm42's post in Programmatically provision SSL certificate was marked as the answer   
    The "Provision" button will provision a myunraid.net certificate. There is no need to press it if you are providing your own custom certificate.
     
    You can provide your own certificate if you want, but the filename is different. See https://wiki.unraid.net/Manual/Security#Custom_Certificates 
     
    So have your shell script put the certificate here:
    /boot/config/ssl/certs/[servername]_unraid_bundle.pem And then run:
    /etc/rc.d/rc.nginx reload  
  8. ljm42's post in My Servers Remote Access Secure? was marked as the answer   
    The optional Remote Access feature provides secure access to the Unraid webgui. No additional client software is needed, just a web browser.  And a good root password.
     
    WireGuard is harder to setup, and requires the client to run special software, but is arguably more secure.
  9. ljm42's post in Will "My Servers" work if array is not started? was marked as the answer   
    Just to confirm... yes all of the features of My Servers (including flash backup and remote access) work regardless of whether the array is running or not. Both My Servers Remote Access and WireGuard are options for getting remote access to the webgui to enter the encryption passphrase.
  10. ljm42's post in My Servers Error > CORS Error was marked as the answer   
    These "ALLOWED_ORIGINS" are the urls that are able to access the server without a CORS error. What url are you using?
  11. ljm42's post in 50Mbit constant upload to backup.unraid.net was marked as the answer   
    Interesting, the issue is on the cloud server not your server. Looking into it, may take a few days though.
  12. ljm42's post in Old trial install still visible was marked as the answer   
    Licenses are tied to flash GUIDs, so even though those two flash drives were used in the same hardware, the licensing system does not know that. They are two separate licenses.
     
    The Expired Trial license will be removed from your dashboard after 30 days I believe.
  13. ljm42's post in Certificate and Chrome was marked as the answer   
    Unfortunately, DNS Rebinding Protection seems to be enabled on your network. Until you resolve that you won't be able to use this certificate with the proper url.
     
    You can verify this by opening a command prompt on your computer and typing:
    nslookup yourpersonalhash.unraid.net (use your personal url there, it was shown the in the error message you pasted)
     
    If DNS Rebinding Protection is disabled, you will get a response similar to this:
    Address:  192.168.1.1 Non-authoritative answer: Name:    yourpersonalhash.unraid.net Address:  192.168.1.8 But if it does NOT resolve to 192.168.1.8 then you know DNS Rebinding Protection is enabled.
     
    This protection might be enabled by your DNS server, you could try configuring your router to give DHCP clients the 8.8.8.8 DNS server. Or it might be a feature of your router, in which case try Googling "disable DNS rebinding [router name]". There isn't really a whole lot more I can suggest, it depends on the specifics of your network.
     
     
     
  14. ljm42's post in My Servers says plugin needs updated but no updates available. was marked as the answer   
    We are seeing an issue lately with zero byte files on the flash drive. 
     
    Would you please open a web terminal and run:
    ls -al /boot/config/plugins/dynamix.my.servers/*.node  
    If the files are valid the output will look like this:
    -rw------- 1 root root 355016 Jul 12  2021 /boot/config/plugins/dynamix.my.servers/libvirt.node -rw------- 1 root root  29776 Feb 15 20:13 /boot/config/plugins/dynamix.my.servers/segfault-handler.node  
    If the files are any other size (such as zero bytes) then please delete them:
    rm /boot/config/plugins/dynamix.my.servers/libvirt.node rm /boot/config/plugins/dynamix.my.servers/segfault-handler.node  
    Then either reboot the server or uninstall/reinstall the My Servers plugin, either way the files will be re-downloaded. Sorry for the trouble, the next version of the plugin will handle this automatically, but for now you have to manually delete the bad files as mentioned above.
  15. ljm42's post in PFSense Self Signed Certs Problem - post upgrade to 6.10.3 from 6.9.2 (Solved) was marked as the answer   
    Oh, your screenshot of the Local TLD shows a typo:  domian instead of domain
  16. ljm42's post in I get constantly disconnected from the Unraid API, what can I do? was marked as the answer   
    The unraid-api is running fine, but the browser isn't able to connect to it for some reason.

    What url are you using to access the server? It needs to be one of the ALLOWED_ORIGINS shown in your screenshot.
     
    Do you have any kind of ad blocker or privacy settings that could be preventing this connection? Try using a different browser in private/incognito mode (as that disables most browser extensions that could be getting in the way)
     
     
    What do you mean by this? It sounds like another symptom of an ad blocker or extreme privacy settings preventing the browser from communicating with unraid.
  17. ljm42's post in Webgui no access from ip address but domain works was marked as the answer   
    According to the diagnostics, the server's IP is 192.168.1.138, not 192.168.1.139
     
    You don't have SSL setup, so the urls would be:
      http://192.168.1.138
      http://MediaTower.local 
  18. ljm42's post in (SOLVED) 6.10.3 MyServers wiki slightly out of date? was marked as the answer   
    Good catch! This was changed in 6.10.3, I've updated the docs.
  19. ljm42's post in Cant access the web portal. I can ping the box and hooking up monitor i can log in. was marked as the answer   
    No issues on the server, turns out there was an issue of some sort on the client computer, just had to reboot the client and everything started working as expected.
  20. ljm42's post in Myservers issues was marked as the answer   
    Even without seeing the diagnostics, I'm going to jump to a fix... Go to Settings -> Network Settings and change Unraid's DNS server to 8.8.8.8. Good chance that will fix the problems.
     
    FYI, Google documents 8.8.8.8 here:  https://developers.google.com/speed/public-dns

    If that doesn't help, then I really will need to see diagnostics.
  21. ljm42's post in Firefox 96.02 was marked as the answer   
    This is due to Firefox privacy settings, more details here:
      https://support.mozilla.org/en-US/kb/firefox-protection-against-fingerprinting
     
    We have disabled this "feature" from the built-in Firefox browser in Unraid 6.10+ when booted in GUI mode. But we cannot control the Firefox privacy settings on other computers.
     
    If you are seeing this issue, click the icon in the address bar and choose to "Allow HTML5 canvas image data":
     

     
     
  22. ljm42's post in "backup.unraid.net" - Is this normal behavior? was marked as the answer   
    Yes it is normal for the My Servers flash backup service to contact backup.unraid.net via SSH
  23. ljm42's post in Https redirect broken after 6.10 update SSL/TLS was marked as the answer   
    For redirects to kick in you need to use http://[ipaddress] or http://[servername].[localTLD] (note: http not https)
     
    The exact behavior of the redirect depends on the value of your "Use SSL/TLS" setting:
    If Use SSL/TLS is set to Strict, you will be redirected to https://[lan-ip].[hash].myunraid.net However, this behavior makes it more difficult to access your server when DNS is unavailable (i.e. your Internet goes down). If that happens see the note under https://wiki.unraid.net/Manual/Security#Https_with_Unraid.net_certificate_-_with_no_fallback_URL  If Use SSL/TLS is set to Yes, you will be redirected to https://[servername].[localTLD] as that will likely work even if your Internet goes down. If Use SSL/TLS is set to No, then the http url will load directly. Personally, I prefer the "Strict" setting as my Internet is pretty stable.
     
    I just added this to the documentation:
      https://wiki.unraid.net/Manual/Security#Redirects
    in the section talking about how to setup SSL:
      https://wiki.unraid.net/Manual/Security#Securing_webGui_connections_.28SSL.29
  24. ljm42's post in 6.9.2 WebUI not available after enabling SSL was marked as the answer   
    Hi @ZKWolf we've resolved the issue with your cert. Please open a web terminal and run:
    rm /boot/config/ssl/certs/certificate_bundle.pem then press Provision again. Your url should change to https://hash.unraid.net:9443
  25. ljm42's post in Unraid 6.10.1 SSL was marked as the answer   
    To use this url:
      https://backup.horts.com.au
    Your Server name (on Settings -> Identification) should be "backup" Your Local TLD (on Settings -> Management Access) should be "horts.com.au" When you change "Use SSL/TLS" to Yes, Unraid will automatically make a self-signed certificate with the "Subject" of "backup.horts.com.au" and place it on the flash drive here:
       config/ssl/certs/backup_unraid_bundle.pem
     
     
    The screenshot you provided of your custom certificate uses the "Subject Alternative Name" field, which Unraid ignores. It sort of worked in 6.9.2, but only by accident. It will not work in Unraid 6.10.
     
    If you want to provide your own certificate, you need to make sure the "Subject" of the certificate is either "backup.horts.com.au" or "*.horts.com.au". Then overwrite the certificate that Unraid created on your flash drive:
      config/ssl/certs/backup_unraid_bundle.pem
    You can then change "Use SSL/TLS" back to No and then to Yes again to get it to see the cert. Or you can open a web terminal and run:
      /etc/rc.d/rc.nginx reload
     
    Note that if the "Subject" of the cert is not correct, the certificate will be deleted and replaced with a self-signed cert that has the correct Subject.