v12.1 worked fine, Updated to 14.9 - Now nothing !!!

[MTOakey]

Please, for the love of GOD, this should not be this hard ...
I have used UMS for YEARS, and up until 12.1, it has been working fine, when I tried to do an update to 13.0 it took a crap, so I went back to 12.1 and NO PROBLEMS...
I just tried to install the 14.9, and all kinds of errors in the Logs for IP's and PORTS I do not have anything attached and do NOT use.
This is ridiculous.
Please Help.

ums_dbg_2024-12-24-14-18.zip

(65.65 KiB) Downloaded 525 times

[SubJunk]

Thanks for using UMS for years, great to still have you
A lot of things are logged by UMS just to help us to diagnose if problems happen. But the logging itself is not a problem.
What is the actual problem you are experiencing?

[MTOakey]

It didn't work as expected.
No, no problems WITH the LOGs, the LOGs SHOW the problems.
Trying to contact a certain IP and PORT there that do NOT exist.
Trying to access UPNP and getting errors there ...
Numerous things like that, and NO list of videos in the webPlayer.
Showing my Router as a media device - which it is not, but not showing my computer or Chromecast, or Smart TV or ROKU...

2024-12-24 14 31 56.jpg (293.72 KiB) Viewed 8864 times

2024-12-24 14 30 22.jpg (121.86 KiB) Viewed 8864 times

2024-12-24 14 27 03.jpg (44.53 KiB) Viewed 8864 times

[MTOakey]

The Forum would not attach this 4th picture/screencapture, don't know why ...

[mik_s]

I am staying with family for a few days so not set up to look at the logs till get back.

In the mean time to make it easier to see exactly what you mean could you list the IPs/ports that you should not be seeing so I can search for them in the logs and see why.

Did you do a clean install of this version or is this an update to your previous one?

Do you have some custom network setup like a proxy or something to change the domain name?
Usually the IP address for the web player should be something like 192.168.1.83:9002 but I know it can be changed as I did it setting up Octoprint for my 3D printer.
Does any media show when going to http://localhost:9002/ on the computer running UMS?
Could you give some more info about your network setup?

Do you have UPnP disabled?

One thing I noticed on your last screenshot is that UMS is using port 9011 when it should be 5001 by default. Did you change this?

[MTOakey]

Thanks, and a Merry Christmas to You and everyone reading this !!!
STATIC network.
UMS sits on an NVMe drive, along with 128G RAM available to a 12 core 3.?? mhz processor, Win11-24H2 fully updated and EVERYTHING else runs smooth & well.
UMS has been the ONLY problem I have ever had.
UMS has worked flawlessly since 12.1 on this machine and Network, with all the same settings.

Code: Select all

WARN  Could not retrieve service descriptor, no response: (RemoteService) Descriptor: dial_SCPD.xml
09:58:51 WARN  Device descriptor retrieval failed: http://192.168.1.5:2869/upnphost/udhisapi.dll?content=uuid:8ff82b53-5dd7-4d69-a673-0aa5afde7cd5, 400 Bad Request
INFO  IP Filter: Access allowed to 147.185.132.196
INFO  IP Filter: Access allowed to 147.185.133.156
INFO  IP Filter: Access allowed to 172.245.40.162
WARN  Device descriptor retrieval failed, no response: http://192.168.1.86:8060/dial/dd.xml
WARN  Service descriptor retrieval failed: http://192.168.1.190:8008/ssdp/notfound, 404 Not Found
11:16:46 WARN  Device service description failed: (RemoteDevice) Identity: (RemoteDeviceIdentity) UDN: uuid:d50968c2-c5ad-69de-8006-73f69a084345, Descriptor: http://192.168.1.190:8008/ssdp/device-desc.xml, Root: true
11:16:47 WARN  Service descriptor retrieval failed: http://192.168.1.197:8008/ssdp/notfound, 404 Not Found
11:16:47 WARN  Device service description failed: (RemoteDevice) Identity: (RemoteDeviceIdentity) UDN: uuid:85b43b7b-466d-ce8d-c499-2c0e873489a4, Descriptor: http://192.168.1.197:8008/ssdp/device-desc.xml, Root: true
11:16:47 INFO  Finding user id: -1 
11:16:47 WARN  Service descriptor retrieval failed: http://192.168.1.157:8008/ssdp/notfound, 404 Not Found
11:16:47 WARN  Device service description failed: (RemoteDevice) Identity: (RemoteDeviceIdentity) UDN: uuid:ca88aa05-14b0-ab36-d44c-bb07cc1cf01b, Descriptor: http://192.168.1.157:8008/ssdp/device-desc.xml, Root: true
11:16:49 WARN  Service descriptor retrieval failed: http://192.168.1.218:8060/dial/ecp_SCPD.xml, 404 Not Found
11:16:49 WARN  Service descriptor retrieval failed: http://192.168.1.218:8060/dial/dial_SCPD.xml, 404 Not Found
11:16:49 WARN  Device service description failed: (RemoteDevice) Identity: (RemoteDeviceIdentity) UDN: uuid:28001180-0000-1000-8000-20efbd4b67b2, Descriptor: http://192.168.1.218:8060/dial/dd.xml, Root: true
INFO  Using the following UUID configured in UMS.conf: d39487b6-1573-40bb-b6c2-193141496aba
11:44:50 INFO  Starting UPnP service...
11:44:50 INFO  Registering UPnP servlet under context path: 
11:44:50 INFO  Starting Jetty server 12.0.16
11:44:50 INFO  Starting Jetty HTTP client v12.0.16 connection manager/pool
11:44:51 INFO  Web player is available at: http://192.168.1.83:9011
11:44:51 INFO  Launching the graphical interface on a browser
11:44:51 INFO  Universal Media Server is now available for renderers to find
11:44:51 INFO  Media scan started
11:44:55 INFO  IP Filter: Access allowed to 192.168.1.1
11:44:55 INFO  Found new web gui renderer with uuid: 176786bc-8049-4a56-a833-c19a65102746
11:44:55 INFO  Checking IP: 192.168.1.1 for Chrome
11:45:00 INFO  Renderer Chrome found on address: 192.168.1.1
11:45:00 INFO  IP Filter: Access allowed to 192.168.1.190
11:45:00 INFO  IP Filter: Access allowed to RedSabre
11:45:00 WARN  Service descriptor retrieval failed: http://192.168.1.190:8008/ssdp/notfound, 404 Not Found
11:45:00 WARN  Device service description failed: (RemoteDevice) Identity: (RemoteDeviceIdentity) UDN: uuid:d50968c2-c5ad-69de-8006-73f69a084345, Descriptor: http://192.168.1.190:8008/ssdp/device-desc.xml, Root: true
11:45:02 WARN  Unhandled exception while resolving New Whistleblowers Golf course: For input string: "CC1"
11:45:02 INFO  Media scan completed in 11 seconds

At first, just tried "Updating" from 12.1 to 14.9.0, the result was my initial request for some help & direction... then I uninstalled any and all UMS items, Cleaned the Registry, rebooted several times, then clean install 14.9.0
Nothing special or exotic in house, I use "dynu.com" for external access utilizing Port "9011",
UPnP is NOT disabled.
Port 5001 is still used by UMS, I did never have to change that on any version.
Port 9002 is not used.
192.168.1.1 is the Router - NOT a "Chrome Renderer", but, it does have a USB3.0 input for hanging a "media drive" off of it, so maybe it does use some version of Android/Chrome to render ???
192.168.1.83 is my Computer: RedSabre
192.168.1.22 is a RokuExpress4K
192.168.1.146 is a Vizio SmartTV
192.168.1.147 is a Vizio SmartTV
192.168.1.190 is my TCL SmartTV
192.168.1.197 is ChromeCast
192.168.1.36 is a Google-Nest Hub
192.168.1.218 is another RokuExpress4K
192.168.1.106 is a MacMini
192.168.1.59 is a FireTablet



Comcast Gigabit cable > NETGEAR Nighthawk Multi-Gig Cable Modem CM2000 > ASUS RT-BE86U WiFi7 BE6800 Router > Server@wifi
UMS/Audio Directory/Video Directory and Video playout has shown in browser at {http://www.****-net.dynu.net:9011/player/browse/132} just fine, forever.

And now in this pic, none of the 3 Roku's show up here, nor does whatever is at 192.168.1.157 ...

2024-12-25 17 53 06.jpg (212.32 KiB) Viewed 8783 times

But here in the Server page, the pic shows many different IP's ...

[mik_s]

I redacted the web address as I was curious why you were using it and if it would connect to your UMS.
It did and had free access to your files as you have no access control set up so I immediately closed the tab and edited your post.

I think the problem is you are using dynu.com and it is basically making your private network public so all those IPs are other people that can see your videos.
At a guess I think UMS is broadcasting to dynu so it cannot see some of the necessary traffic on your local network for other devices to work.

Since you updated from an old version some of the access control probably was not set up. You should have had to register an admin account with UMS when updating.

I suggest getting rid of dynu.com, it is probably free as they are making money off of you.
There are probably better ways of doing it but I know next to nothing about networking besides keeping things on auto.

Try to do a clean install on your computer with default settings till you get it working then you can set it up for access outside the network later, and when you do make sure access control is enabled so you need to login. You can then set so your shared folders to only have access to certain users/groups.

I am not sure the best way to have external access. At the very least you need to forward the ports UMS uses like 5001, 9001 and 9002 but there may be more for UPnP which I think needs to be enabled for most devices, not sure about the web player. There are several people that have managed to get this working in the past even though that was not the use for UMS.
There should be some sort of guide or pointers somewhere on the forum if you try and search for it, I think someone did it this past year.

[MTOakey]

Thanks for the advice, but I have had this working for years now, since UMS 6.x.x
NO unauthorized access has ever happened, I am the only one who accesses this Server, over any network no matter where I am, and it always works fine, I did use "User Access" with password when it was first implemented, but I hate having to type in passwords all the time, so I removed that.
I have Seven servers running on my computer, for my remote use only, and have never had any issues with any of them {Abyss, Subsonic, UMS, etc.}
All you accessed was a couple dozen movies, and 3TB of music - not really the end of the world, if you wanted to download any of it, so be it, no harm can be done, but thank you for the Security heads-up.
Dynu is the best way {or any other of same type of service} for getting the external access without the hassles involved in providing all the pinholes and other configurations. I have no open ports to the Public so my network is not in any danger.
I do not Forward Ports 5001, 9001 or 9002, only 9011, and the few others that are all specifically linked with their Apps... they will only work with the specific Apps.
My external IP from Comcast blocks access from about 20K known domains and specific "dark web" IP broadcasters.
And what exactly would be the use ofUMS if NOT to access my media whereever I am, and, on whatever platform or System I am on ??

Also, was notified and saw your access, from Virgin Media Net, cable, {***** to be specific} with external IP ******, using Firefox, and your bandwidth was immediately throttled down to 0.0638457 Mb/s.... at 19:51:07 my local time.

[boss]

Do you not think you are leaving yourself exposed with the setup you have?
I can access your media server.
I can restart your UMS.
I can shutdown your UMS.
I could watch movies on your UMS. I guess that would only be a problem if you were paying per GB for your internet connection.
But... if a few unauthorised people were watching, when you wanted to watch a movie from a remote location, the bandwidth to you would be reduced.

Furthermore, most of your computer (inc personal information) is open to the public on a certain port (which I won't write here) and all of your personal files can be downloaded.

[mik_s]

The main purpose for UMS is to be contained on your local network, it was never intended to be used in setups like you do.

It is possible if you know what you are doing but as UMS was never meant for this it could have serious security vulnerabilities for your network.
As Boss said someone can shutdown or restart UMS, but also your computer too.

Boss knows a lot more about networking than me so he could better advise how to improve this.
As I said my knowledge about this goes as far as forwarding the ports UMS uses which should only be 9002 if you only intend to use the web player on remote computers.

Another method I have seen involves using Apache2 and ProxyPass here

You should also look into setting up HTTPS on the player too. This might help

Code: Select all

# Web player authentication
# ------------------
# Whether to force authentication service or not over the player gui.
# Users permissions will be set to authentication service accounts.
# Default: false
web_player_auth=

# Use HTTPS (SSL) for web player connection
# ----------------------------------
# Whether the web player should use HTTPS.
# To enable HTTPS, a self-signed keystore file called \"UMS.jks\" with password
# \"umsums\" must be generated using the Java 'keytool' commandline utility.
# The file must be placed in the profile folder (where this file resides).
# Default: false
web_player_https =

I tried this out a while ago here



You can't rely on your ISP on blocking dark IPs as they would first have to know of them which may be too late if someone wanted to take advantage.

As I am staying with family I had to remove the IP information. Its more for the bots that like to spam the forum and look for web addresses.