NZBDrone and Bitdefender firewall

nzbdrone/nzbdrone.console are configured to be allowed through the firewall; however, it is being blocked for external access. Firewall is not interfering with CP/SABNZBD/SB remote access using default config. Is there anything beyond those two exe files that need to be added?

Windows 8.1
Bitdefender Internet Security 2015
Sonarr 2.0.0.3004 Master branch

Check the Windows firewall.

Also step #3 [here] (https://github.com/Sonarr/Sonarr/wiki/Installation#windows)

nzbdrone.exe is allowed in both Windows Firewall and Bitdefender firewall. The port is bound properly because if the Bitdefender firewall is on there is no external access; however, within a few seconds of turning off the firewall there’s a login prompt for Sonarr in a previously timed out webpage.

Re-running as admin has no effect.

After turning off which firewall does it start working? Its definitely failing because its blocked by the firewall though, the request isn’t even making it to Sonarr.

The EXE exception might stop working when a new Sonarr version comes out due to matching a signature, not just the path, you can use a port exception though.

It starts working within seconds of the bitdefender firewall being disabled.

Unfortunately the bitdefender system appears to be more focused around casual users and is not terribly configurable. No ability to open specific ports in the firewall.

I’ll try removing/adding the nzb exceptions when I get home. Hopefully it will work.

Did a complete reset on Bitdefender firewall. Tried running NZBDrone as admin (auto-added to firewall) and tried manually adding NZBDrone to the firewall. Neither method worked. Bitdefender continues to block NZBDrone.

Which application did you use to open the firewall?

Try both NzbDrone.exe and NzbDrone.Console.exe

Running both from a blank firewall ruleset yields the same results. Not accessible externally while firewall is on.

This may be due to how Sonarr listens to incoming connections since it relies on the OS (specifically http.sys) to pass the connections to Sonarr.

I suspect because http.sys is handling the connections Bit Defender can’t deal with it, since they seem to think port exceptions are a flaw, not a feature you may be out of luck unless their support has a suggestion.

Like you said, all reports from their end is that a customizable firewall is a faulty system. Looks like I’ll be getting a different package sometime soon.

Thanks for trying and onto the new way I’ve broken NZBDrone!

Removed previous and tedious workaround. Spoke with Bitdefender support, and they advised the following changes need to be made.

Go to the Adapters tab > at “Network Type” select “Home/Office” > at “Stealth Mode” select “Off” > at “Generic” select “On”

Now please go back (click on the “back” arrow in the upper left part of the window ) > Intrusions Detection > turn off Intrusion Detection System (I didn’t do this part)

Glad you got it working! From our end our IP address will change at some point, not sure when, but we’ve been planning a server upgrade for a while (not sure what the IP will be though).

Multiple services also use different IPs, I think TheTVDB does and I’m aware of a couple indexers that do, so things might work temporarily…

@markus101 instructions updated without need for such a tedious workaround.