Firewall Configuration
Configure firewalls for Exposr.
Required ports
| Port / Range | Protocol | Purpose |
|---|---|---|
| 22 | TCP | SSH (if needed for server admin) |
| 9000 | TCP | Exposr control channel |
| 9001 | TCP | Exposr data channel |
| 25565 | TCP/UDP | Default public tunnel port |
| 20000–30000 | TCP/UDP | Dynamic public tunnel ports |
Warning
Without allowing the 20000–30000 range, Exposr may register a tunnel internally but external users will not be able to reach the exposed service.
Cloud provider setup
For Azure, AWS, GCP, or DigitalOcean, you need to configure security groups or network security groups to allow the required ports. In Azure, create inbound security rules for each port/range.
Linux firewall
If using ufw:
bash
sudo ufw allow 9000/tcp
sudo ufw allow 9001/tcp
sudo ufw allow 25565/tcp
sudo ufw allow 25565/udp
sudo ufw allow 20000:30000/tcp
sudo ufw allow 20000:30000/udpIf using iptables:
bash
sudo iptables -A INPUT -p tcp --dport 9000 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 9001 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 25565 -j ACCEPT
sudo iptables -A INPUT -p udp --dport 25565 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 20000:30000 -j ACCEPT
sudo iptables -A INPUT -p udp --dport 20000:30000 -j ACCEPT