Wg-easy, how to limit access to a single ip:port

Apps and Virtualization
1

Hello everyone,

I share my jellyfin library with family and friends with wireguard, limiting acces to a single ip.
I would like to only allow the jellyfin port on this specific ip address with a variable, but I don’t know how to do that.
I have read some topics about iptables but I don’t know what I’m dealing with at this point and I don’t want to mess it up.

Allowed ip entry is set to : 192.168.1.9/32 , I can’t set it to 192.168.1.9:30013

Any advices ?

Ty guys

2

This is what your internet firewall / router should be used for.

Wether is capable is down to the manufacturer

3

My router ISP firewall is lame, I can’t.

4

Well there goes any simple option.

I assume you are running jellyfin as a container. You might try iptables on TrueNAS - but I am unsure of the interaction between TN and docker and what iptables would do (having never tried it, and not going to)

I am also assuming that the “friends and familly” are external - coming in via port forwarding on the router.

If I was doing this I would, as part of the port forwarding rule, only allow the specific source address (F&F Internet IP) to use that port forwarding rule - but that assumes the router/firewall is something other than cheap crippled crap.

Your next option is to put a username / password on Jellyfin

5

Thank you for your answers.

I ended up setting a tailscale tailnet free account.
My truenas tailscale only advertise a single IP as subnet and ACL are set to deny everyhting except the correct ip:port request.

Works like a charm.