Roku Developer Program

Developers and content creators—a complete solution for growing an audience directly.
cancel
Showing results for 
Search instead for 
Did you mean: 
lucidstate
Level 7

ECP From outside the network

I'd like to control my Roku from outside my network. I set up a port forward from my Roku to the outside world and tried the following from another network over the internet: http://<publicFacingIPofNetwork>:8060/query/active-app and it gave me a 403 error.


Access to 73.100.192.155 was denied

You don't have authorization to view this page.
HTTP ERROR 403




I'm not all that experienced with network stuff. It seems like I have the port forward setup correctly, but the Roku itself is not allowing the connection (likely a security feature). It works just fine from a device on the same network. Any ideas?
0 Kudos
5 Replies
joetesta
Level 10

Re: ECP From outside the network

I just tried and got the same results as you. I'd guess it's a security feature to only respond to LAN addresses? 
aspiring
0 Kudos
renojim
Level 8

Re: ECP From outside the network

If it's something you really, really need (and I still can't figure out the use case for this) and you have a computer on the same network that you can SSH to, I've successfully used PuTTY and port tunnels.  I was just playing with tunnels at the time, so all I did was to see if I could get the "active_app" on my Mother's Roku.  I don't think you're going to get your phone's remote control app to work this way, but you can query things via the port 8060 web interface and I'm guessing using cURL to issue ECP commands should work.

-JT
0 Kudos
EnTerr
Level 8

Re: ECP From outside the network

"joetesta" wrote:
I just tried and got the same results as you. I'd guess it's a security feature to only respond to LAN addresses? 

I suspect it's a security enhancement in response to this incident
https://forums.roku.com/viewtopic.php?f=34&t=88160
0 Kudos
belltown
Level 7

Re: ECP From outside the network

It used to be possible to use ECP from outside the network, even using the Roku remote app. However, it was disabled, I think in the 7.1 firmware release  last year.
https://github.com/belltown/
0 Kudos
joetesta
Level 10

Re: ECP From outside the network

"EnTerr" wrote:
"joetesta" wrote:
I just tried and got the same results as you. I'd guess it's a security feature to only respond to LAN addresses? 

I suspect it's a security enhancement in response to this incident
https://forums.roku.com/viewtopic.php?f=34&t=88160

Ha, wow!  Makes sense considering they implemented your suggestion #3.
Great suggestion by @renojim (ssh tunnel w putty) maybe that works for OP?
aspiring
0 Kudos