Firewall Configuration
Configure firewalls for Exposr.
Required ports
| Port / Range | Protocol | Purpose |
|---|---|---|
| 22 | TCP | SSH (if needed for server admin) |
| 9000 | TCP | Exposr control channel |
| 9001 | TCP | Exposr data channel |
| 20000–30000 | TCP | Dynamic public tunnel ports |
Warning
Without allowing the 20000–30000 range, Exposr may register a tunnel internally but external users will not be able to reach the exposed service.
Cloud provider setup
For Azure, AWS, GCP, or DigitalOcean, you need to configure security groups or network security groups to allow the required ports. In Azure, create inbound security rules for each port/range.
Linux firewall
If using ufw:
bash
sudo ufw allow 9000/tcp
sudo ufw allow 9001/tcp
sudo ufw allow 20000:30000/tcpIf using iptables:
bash
sudo iptables -A INPUT -p tcp --dport 9000 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 9001 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 20000:30000 -j ACCEPT