(solved) Jellyfin spamming an external IP?

[Strangle7068]

I was digging into logs to troubleshoot a library that will not play but discovered Jellyfin is, I think, trying to call out to an external IP every .2 seconds and has been for days, the connection is refused. and then repeat,

first is this Jellyfin calling out or is this someone else calling in?

and more importntly why and how do I stop it?

there are thousands of these, all the same except for the time stamp:



[2023-11-06 14:17:56.779 -06:00] [ERR] Error sending socket message from "192.168.1.8" to "239.255.255.250:1900"
System.Net.Sockets.SocketException (13): Permission denied
  at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.CreateException(SocketError error, Boolean forAsyncThrow)
  at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.SendToAsync(Socket socket, CancellationToken cancellationToken)
  at System.Net.Sockets.Socket.SendToAsync(ReadOnlyMemory1 buffer, SocketFlags socketFlags, EndPoint remoteEP, CancellationToken cancellationToken)
  at System.Net.Sockets.Socket.BeginSendTo(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags, EndPoint remoteEP, AsyncCallback callback, Object state)
  at Emby.Server.Implementations.Net.UdpSocket.SendToAsync(Byte[] buffer, Int32 offset, Int32 bytes, IPEndPoint endPoint, CancellationToken cancellationToken)
  at Rssdp.Infrastructure.SsdpCommunicationsServer.SendFromSocket(ISocket socket, Byte[] messageData, IPEndPoint destination, CancellationToken cancellationToken)
  at System.Runtime.CompilerServices.AsyncMethodBuilderCore.Start[TStateMachine](TStateMachine& stateMachine)
  at Rssdp.Infrastructure.SsdpCommunicationsServer.SendFromSocket(ISocket socket, Byte[] messageData, IPEndPoint destination, CancellationToken cancellationToken)
  at System.Linq.Enumerable.WhereSelectListIterator2.MoveNext()
  at System.Threading.Tasks.Task.WhenAll(IEnumerable1 tasks)
  at Rssdp.Infrastructure.SsdpCommunicationsServer.SendMessageIfSocketNotDisposed(Byte[] messageData, IPEndPoint destination, IPAddress fromLocalIpAddress, CancellationToken cancellationToken)
  at Rssdp.Infrastructure.SsdpCommunicationsServer.SendMulticastMessage(String message, Int32 sendCount, IPAddress fromLocalIpAddress, CancellationToken cancellationToken)
  at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state)
  at System.Runtime.CompilerServices.AsyncTaskMethodBuilder1.AsyncStateMachineBox`1.MoveNext(Thread threadPoolThread)
  at System.Threading.Tasks.AwaitTaskContinuation.RunOrScheduleAction(IAsyncStateMachineBox box, Boolean allowInlining)
  at System.Threading.Tasks.Task.RunContinuations(Object continuationObject)
  at System.Threading.Tasks.Task.DelayPromise.CompleteTimedOut()
  at System.Threading.TimerQueueTimer.Fire(Boolean isThreadPool)
  at System.Threading.TimerQueue.FireNextTimers()
  at System.Threading.UnmanagedThreadPoolWorkItem.ExecuteUnmanagedThreadPoolWorkItem(IntPtr callback, IntPtr state)
  at System.Threading.UnmanagedThreadPoolWorkItem.ExecuteUnmanagedThreadPoolWorkItem(IntPtr callback, IntPtr state)
  at System.Threading.UnmanagedThreadPoolWorkItem.System.Threading.IThreadPoolWorkItem.Execute()
  at System.Threading.ThreadPoolWorkQueue.Dispatch()
  at System.Threading.PortableThreadPool.WorkerThread.WorkerThreadStart()
--- End of stack trace from previous location ---
  at System.Threading.Tasks.TaskToApm.End[TResult](IAsyncResult asyncResult)
  at Emby.Server.Implementations.Net.UdpSocket.<>c__DisplayClass21_0.<SendToAsync>b__0(IAsyncResult callbackResult)
--- End of stack trace from previous location ---
  at Rssdp.Infrastructure.SsdpCommunicationsServer.SendFromSocket(ISocket socket, Byte[] messageData, IPEndPoint destination, CancellationToken cancellationToken)

[BobHasNoSoul]

firewall blocking the port for multicast? (thats port 1900)

if you are running docker add that port or simply use host network mode

"239.255.255.250:1900." is SSDP / upnp multicast so not exactly an external ip address its more like a shout to all things on the local network iirc this also is needed for dlna

[Strangle7068]

That IP address did look odd.

Not in docker, its installed to Debian12:

curl https://repo.jellyfin.org/install-debuntu.sh | sudo bash

I have a VPN and UFW is set to block all WAN traffic except for the VPN, LAN traffic should just pass unobstructed.

I wonder if IP tables sees 239.255.255.250 as an external address? I will have to look into that.

I turned off DLNA in the settings, no change.

[Strangle7068]

Ok killing
"Enable 'Play To' DLNA feature"
"Blast alive messages"
and rebooting fixed it, thank you!