ZeroTier does not connect to JellyFin

[TheDreadPirate]

Windows Firewall is probably restricting which interfaces it allows traffic in on port 8096.

[mightyenigma]

Jellyfin is allowed on private networks and blocked on public networks. I went to open 8096 specifically, in The windows firewall advanced settings, but which protocol should I open it for? TCP? If I choose "Any" for the protocol, then it disables choosing a port number. The existing entries are for the jellyfin server exe with UDP

[TheDreadPirate]

Only TCP is used on port 8096.

[mightyenigma]

Only TCP is used on port 8096.

Well i tried opening TCP port 8096 specifically, on the host machine, but I still couldnt log in to my jellyfin server over zerotier from my phone jellyfin client.

I'll double check it but is there anything else to try if that fails?

Double checked it. Both local and remote port is 8096 allow all scopes every user any ip address etc.

[TheDreadPirate]

Try configuring Jellyfin to specifically bind to both your LAN IP and Zerotier IP.

Also, you stated that Jellyfin is now allowed on private networks, but are both the LAN NIC and Zerotier "NIC" set as private networks?

[mightyenigma]

Try configuring Jellyfin to specifically bind to both your LAN IP and Zerotier IP.

Also, you stated that Jellyfin is now allowed on private networks, but are both the LAN NIC and Zerotier "NIC" set as private networks?

I attached a lot of screenshots of various things in my firewall related to ZeroTier and Jellyfin.

One of the screenshots shows that ZeroTier is indeed showing up as a Public network, not private.

I saw that Jellyfin is set to Private networks only, so I changed it to also work on Public networks. Not sure if that's necessary since there is another app called Jellyfin client that is already on public, but maybe that is for when the host machine is accessing another host or itself as a client.

However, despite this change, and also specifically opening port 8096 both Incoming and Outgoing for TCP, I get the same error when trying to log in from my phone over Zerotier.

Strangely, the port 8096 rule I added yesterday has disappeared so I had to put it in again. I named it differently "ZT 8096 TCP In" and "ZT 8096 TCP Out" in case ZeroTier is wiping it out due to it having the same name.

Not sure where to go from here. Does it matter that in the screen that showed ZT being public, it also said "No network access"?

[TheDreadPirate]

I saw mentioned somewhere (I don't recall where) that Jellyfin actually only listens on one NIC. I think the solution is to tell Zerotier to bridge the Zerotier interface to the LAN interface.

https://www.reddit.com/r/zerotier/commen...indows_10/

[mightyenigma]

I saw mentioned somewhere (I don't recall where) that Jellyfin actually only listens on one NIC.  I think the solution is to tell Zerotier to bridge the Zerotier interface to the LAN interface.

https://www.reddit.com/r/zerotier/commen...indows_10/

Interesting article. It sounds like a different use case than mine, but I hadn't thought of installing ZeroTier directly on the router itself.
Maybe this is too complicated.

I tried binding to the ZeroTier IP address instead, and had to type that in to log into my server on the host machine, but doing this did not make it notice or acknowledge incoming login from my JF phone client.

Is there another free solution I could be using instead?
ZeroTier seems to work fine for my game streaming and SMB file shares, but is there something similar I could use instead? I see on the forums people using TailScale and Caddy, so I could try looking into those and see if they have a free service tier. I am being a cheapskate right now to get out of debt slightly faster.

[TheDreadPirate]

Tailscale is free.

[mightyenigma]

Thanks, I will try TailScale.

Or maybe that SyncPlay feature I just noticed. Does that let remote users join/use my host, or is it just a way to make sure everyone is watching the same movie together "in sync"?