[mdxdm]

Hi,

wondering whether it is possible to control Kodi running on XBox remotely using its built-in HTTP server. I tried to turn it on but it's not accessible over the LAN which I suspect is because of firewall running on XBox. There seems be no info on the Internet about firewall management on XBox which makes it look like it's not possible at all. Maybe Kodi should request the port to be opened by some API call on XBox when user turns on web server in the settings?

Thank you,
Martin

[jogal]

wondering whether it is possible to control Kodi running on XBox remotely using its built-in HTTP server.

Yes, is possible and works.

This was tested e.g. here:

https://github.com/xbmc/xbmc/issues/25015

Tested:

• Web interface Chorus2
  
• Kore Android app
  
• Kore  iOS app
  

and 

How has this been tested?

Runtime tested Xbox Series S querying settings with web interface Chorus2.
Confirmed crash before and not crash after.

https://github.com/xbmc/xbmc/pull/25025

[jogal]

Tested again NOW:




This is on Xbox Series S with Kodi version now live in Microsoft Store (v21.1)

[mdxdm]

Thank you for looking into it.

I've got the same version of Kodi and the same console but it does not work for me. I can ping the Xbox but TCP connections to port 8080 are timing out (verified with telnet).

Did you have to change some Xbox settings or do something else to make it work or should it just work right out of the box? I suppose Xbox is running some firewall so I am quite surprised it works at all. Maybe Kodi does something to open port 8080 in firewall and for some reason it fails in my case?

Best regards,
Martin

[jogal]

You don't need to do anything special on Xbox, if it doesn't work for you it will be due to something specific to your network setup or the web browser "wants" to use only httpS.

[mdxdm]

There is definitely no problem in the network or in the browser, because Xbox responds to ping and it is also possible to telnet to its only open TCP port (port 53 - detected via nmap). However, it's not possible to connect to port 8080, even though the HTTP server is enabled in Kodi's settings, so the only remaining explanation is that the Xbox is running a firewall that blocks port 8080.

The question is why on my Xbox this port is closed when it should be open as you say. The only reason I can think of is some Xbox setting - I'll try to go through all of them to see if I can find anything that would help.

[jogal]

The only reason I can think of is some Xbox setting - I'll try to go through all of them to see if I can find anything that would help.

 

You don't need to do anything special on Xbox

[jogal]

he question is why on my Xbox this port is closed when it should be open as you say.

The ports are "closed" (from the outside) on the router in any case. It makes no sense to talk about "closed ports" inside a network.

[mdxdm]

You seem to be confusing LAN firewall with OS firewall. As I wrote, communication with Xbox works (I can successfully ping it or open TCP connection to port 53), it's just not possible to open TCP connection to port 8080 where the Kodi web server is supposed to listen.

This can only be because Kodi is not listening on that port, or because Xbox OS firewall is blocking access to that port on LAN IP address. LAN router has no play in it.

[izprtxqkft]

Xbox OS firewall

do you have a site or any document at all that even confirms xbox actually has a firewall?

i can't find anything at all which is unusual

edit:
nevermind

try this page https://www.ncesc.com/gaming-pedia/how-d...-firewall/
make decisions whether or not the firewall should be on for your own use case, i make no claims that either way as this is a security feature and disabling security blindly is not a good practice

[mdxdm]

Thanks for the link, haven't found that one. Unfortunately I don't have such option in Xbox network settings, you do?

I was also surprised to find no relevant info about the firewall on Xbox. It's odd because Xbox, like most other connected devices nowadays, must surely be running a firewall. 

Another thing is that Kodi can easily be the only app/game available for Xbox that needs to open ports in the firewall. That would explain why there is no info/tools about Xbox OS firewall because it's simply not needed. But that would mean it shouldn't work for anybody including you. Unless you disabled firewall on you Xbox somehow or your Xbox is in developer mode etc.

[jogal]

Unless you disabled firewall on you Xbox somehow or your Xbox is in developer mode etc.

I have not disabled any firewall nor am I aware of one existing. Not tested in developer. Expressly tested in regular mode with version of Store (no sideload).


Since YOU are the one with the problem and asking for help maybe you should provide some information:

• Xbox model
  
• Screenshot with ping
  
• The network uses DHCP or static IP?
  
• You have IPv6 enabled?
  
• You have other security/antivirus software installed on the PC: Bitdefender, Panda, etc?
  
• From which client do you want to connect Windows 10, Windows 11, Mac, Android?
  
• You have your own router with access to the settings or you use one from the ISP?
  
• Provide Kodi debug log (you can also enable Webserver component).
  
• Maybe test with other web browser.
  
• Maybe test with server in other port (Kodi settings) (any other number e.g. 6144).
  
• Have you established user and password in Kodi settings? (password is mandatory)
  
• Have you enabled setting "Allow remote control from applications on other systems"?
  

[jogal]

Kodi can easily be the only app/game available for Xbox that needs to open ports in the firewall

This if FALSE affirmation: mostly online multiplayer games may act as server and needs open ports (on router) or use UPnP/Teredo.

[vecocamacho]

Xbox Model: Xbox One S
Network uses DHCP (also have tried with fix ip for the xbox both wifi and LAN)
No security, antivirus or Firewall (Apple OS with firewall disable)
Trying to connect with iPhone, iPad, Mac and Windows 7
Router provided by ISP but I have acces to ROOT settings 
Debug Log  (https://paste.kodi.tv/eviyenatew)
Time Out with Safari, Firefox, and Kodi Remote app on iPhone
Changed ports and the result is the same

Once again funny enough Kodi Remote works on Kodi installed on iPad and Apple TV but not on xbox all under the same network and settings

https://imgur.com/a/o1vN53d Images

[jogal]

Debug Log  (eviyenatew (paste))

This is normal log (Debug not enabled). You should enable Debug in Settings > System > Logging  "Enable debug logging"

Also please enable "Webserver component" from same place  "Enable component specific logging" and select it in "Specify component-specific logging..."

When you are done capturing the log, make sure to disable both options again for normal operation.


In log should be visible webserver activity like this:

xml:
2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>: request received for /

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] HTTP/1.1 GET /

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Accept-Encoding: gzip, deflate, br, zstd

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Accept-Language: es,es-ES;q=0.9,ca-ES;q=0.8,ca;q=0.7,en;q=0.6

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Connection: keep-alive

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Host: 127.0.0.1:8080

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Sec-Fetch-Dest: document

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Sec-Fetch-Mode: navigate

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Sec-Fetch-Site: none

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Sec-Fetch-User: ?1

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] Upgrade-Insecure-Requests: 1

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] sec-ch-ua-mobile: ?0

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>:  [IN] sec-ch-ua-platform: "Windows"

2024-11-17 06:53:58.935 T:19412   debug <CWebserver[8080]>: [OUT] Connection: close

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] HTTP/1.1 401 /

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Accept-Encoding: gzip, deflate, br, zstd

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Accept-Language: es,es-ES;q=0.9,ca-ES;q=0.8,ca;q=0.7,en;q=0.6

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Connection: keep-alive

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Host: 127.0.0.1:8080

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Sec-Fetch-Dest: document

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Sec-Fetch-Mode: navigate

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Sec-Fetch-Site: none

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Sec-Fetch-User: ?1

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] Upgrade-Insecure-Requests: 1

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] sec-ch-ua-mobile: ?0

2024-11-17 06:53:58.936 T:19412   debug <CWebserver[8080]>: [OUT] sec-ch-ua-platform: "Windows"

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>: request received for /

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] HTTP/1.1 GET /

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Accept-Encoding: gzip, deflate, br, zstd

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Accept-Language: es,es-ES;q=0.9,ca-ES;q=0.8,ca;q=0.7,en;q=0.6

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Authorization: Basic a29kaTprb2Rp

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Cache-Control: max-age=0

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Connection: keep-alive

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Host: 127.0.0.1:8080

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Sec-Fetch-Dest: document

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Sec-Fetch-Mode: navigate

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Sec-Fetch-Site: none

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Sec-Fetch-User: ?1

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] Upgrade-Insecure-Requests: 1

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] sec-ch-ua-mobile: ?0

2024-11-17 06:54:01.580 T:17400   debug <CWebserver[8080]>:  [IN] sec-ch-ua-platform: "Windows"

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Accept-Ranges: bytes

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Cache-Control: private, max-age=0, no-cache

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Content-Type: text/html

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Last-Modified: Tue, 29 Dec 2020 18:00:44 GMT

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] HTTP/1.1 200 /

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Accept-Encoding: gzip, deflate, br, zstd

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Accept-Language: es,es-ES;q=0.9,ca-ES;q=0.8,ca;q=0.7,en;q=0.6

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Authorization: Basic a29kaTprb2Rp

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Cache-Control: max-age=0

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Connection: keep-alive

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Host: 127.0.0.1:8080

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Sec-Fetch-Dest: document

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Sec-Fetch-Mode: navigate

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Sec-Fetch-Site: none

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Sec-Fetch-User: ?1

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] Upgrade-Insecure-Requests: 1

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] sec-ch-ua: "Google Chrome";v="131", "Chromium";v="131", "Not_A Brand";v="24"

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] sec-ch-ua-mobile: ?0

2024-11-17 06:54:01.592 T:17400   debug <CWebserver[8080]>: [OUT] sec-ch-ua-platform: "Windows"

2024-11-17 06:54:01.592 T:17400   debug <CWebServer>: [OUT] write maximum 1225 bytes from 0 (0)

2024-11-17 06:54:01.592 T:17400   debug <CWebServer>: [OUT] wrote 1225 bytes from 0 in range (0 - 1224)

2024-11-17 06:54:01.592 T:17400   debug <CWebServer>: [OUT] done