Issue with 'External internet access denied' Error - Help Needed [docker, unraid]

[BartholomewTP]

I'm trying to access my Sabnzbd docker container but I keep getting the error message
External internet access denied - https:// sabnzbd. org/ access - denied

On the logs for this container I get the following error message:
2025-12-02 16:00:43,861::WARNING::[interface:414] Refused connection from: ::ffff:100.99.37.89 [Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36]

I've read the article and it wants me to go to 'go to the General page of the Configand at External internet access, select Full Web interface or Full Web interface - Only external access requires login..' The problem is that I cannot access the GUI at all (I'm currently not on the same network as my server - would I be able to do this if I was on the same local network?)

I then tried to enter the following command into the unraid terminal & then the container terminal: --inet_exposure <0..5> Set external internet access

& I get the following error message:
bash: 0..5: No such file or directory

I've tried to access the sabnzbd.ini file directly but I apparantly dont have read/ write access (though I have set this up to be the case in unraid). I'm at my wits end to work out how to get access to SABNZBD. I've tried un-installing and re-installing the container but I'm still unable to gain access & Im at my wits end here for how to resolve this... Please can anyone help me.

[safihre]

Please check the explanation how to provide command line parameters to your chosen Docker.

Sounds like your unit is also exposed to the internet so if you configure it like that you might just give the whole world access...

[BartholomewTP]

I'm sorry but I don't understand...

I've tried to read the 'Command Line Parameters' WIKI page which is making me think that I need to first type this on the unraid terminal:
--config-file /mnt/cache/appdata/sabnzbd/sabnzbd.ini I've also tried: --config-file "/mnt/cache/appdata/sabnzbd/sabnzbd.ini"

I then tried this in the console for the docker application as well & I keep getting the following error message:
bash: --config-file: command not found

I've tried variations of:
--inet_exposure <4> "Set external internet access"
--inet_exposure <4>
within the docker console & I keep getting errors here too.

I'm figuratively drowning here & I'm not sure if youre referring to a different wiki page or if there's other documentation on how to do this... But I'm completely lost at sea here, & I've no idea how to provide command line paramaters to my docker...

So my docker being exposed to the internet as its currently set up (or lack thereof) is bad because the whole world can access this. I need to secure this as well, but I can't even think about that as I can't currently use it at all.

If anyone can help me here as I just don't understand

[sander]

> I'm currently not on the same network as my server - would I be able to do this if I was on the same local network?

Yes.

Unless ...

> Refused connection from: ::ffff:100.99.37.89

100.99.37.89 is the IPv4 range for CGNAT: "The Carrier-Grade NAT (CGNAT) IP address range is 100.64.0.0 to 100.127.255.255 (100.64.0.0/10), as defined by RFC 6598."
It's used by ISPs on the WAN-side of client CPE's. Weird that you have such an IPv4 address on your LAN. SABnzbd does not consider 100.64.0.0/10 as local (like 192.168.x.y and 10.x.y.z)

So: just try from the same local network.

[OneCD]

100.99.37.89 is the IPv4 range for CGNAT: "The Carrier-Grade NAT (CGNAT) IP address range is 100.64.0.0 to 100.127.255.255 (100.64.0.0/10), as defined by RFC 6598."
It's used by ISPs on the WAN-side of client CPE's.

Today I learned.

[sander]

100.99.37.89 is the IPv4 range for CGNAT: "The Carrier-Grade NAT (CGNAT) IP address range is 100.64.0.0 to 100.127.255.255 (100.64.0.0/10), as defined by RFC 6598."
It's used by ISPs on the WAN-side of client CPE's.

Today I learned.

FWIW: I'm on CGNAT, and my WAN IP Address: 100.64.202.3