Differences

This shows you the differences between two versions of the page.

--- pfsense:plex [2020/12/07 09:02] – [Update DNS Resolver] peter
+++ pfsense:plex [2020/12/07 09:30] (current) – [Update DNS Resolver] peter
@@ Line 63: / Line 63: @@
 This protection can prevent being able to connect to a Plex Media Server securely on the local network.
-In pfSense:
+To remediate this:
-Navigate to **Services -> DNS Resolver -> General Settings**.
+  * In pfSense:
+  * Navigate to **Services -> DNS Resolver -> General Settings**.
+  * Add the following to the **Custom Options** box on a new line. <code>
+server:private-domain: "plex.direct"
+</code>
-Add the following to the **Custom Options** box on a new line.
+  * Ensure that other entries in this box are on separate lines.
+{{:pfsense:pfsense_dns_resolver_custom_options.png?800|}}
+<WRAP todo>
+**TODO:**  This image is wrong.  There should only be a single **server:** word, right at the top.  Remove the other one.
+</WRAP>
+<WRAP info>
+**NOTE: ** An alternative method is to have the following entries within the Resolver Custom option:
 <code>
-server:private-domain: "plex.direct"
+server:
+    local-zone: “plex.direct” redirect
+    local-data: "plex.direct 3600 IN A "
 </code>
-Ensure that other entries in this box are on separate lines.
+</WRAP>
-{{:pfsense:pfsense_dns_resolver_custom_options.png?800|}}
+<WRAP info>
+**NOTE:**  An alternative method to overcome the DNS protection is to navigate to **System -> Advanced -> Firewall and NAT**.
+In **Network Address Translation**:
+  * NAT Reflection mode for port forwards:  **NAT + proxy**.
+While this works for remote connections, it is not everything needed to get local secure connections working, so this is not the recommended approach to take.
+</WRAP>
+<WRAP important>
+**WARNING:** When working around DNS rebinding protection this way, your apps and Plex Media Server will typically treat the connections as being from a **Remote** source.
+This can affect which streaming qualities are used, as well as trigger Remote-applicable Server Settings - Bandwidth and Transcoding Limits.
+</WRAP>
+----
 See [[PFSense:pfBlockerNG:Bypass pfBlockerNG for specific clients|Bypass pfBlockerNG for specific clients]]