Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
For a typical Minecraft: Java Edition dedicated server, forward TCP 25565 to the server computer’s private IPv4 address. For a Bedrock Dedicated Server, the usual IPv4 rule is UDP 19132. The exact port comes from the server’s configuration, and forwarding works only if the server is running, the host firewall allows the traffic, and your internet connection accepts inbound connections.
This guide covers both editions, explains how to set up the rule, and shows how to tell whether a failure is caused by the server, firewall, router, or ISP.
What port forwarding does
Port forwarding tells your router where to send incoming internet traffic addressed to a particular port. For Minecraft, the route looks like this:
Friend on the internet
↓
Your public IP address:port
↓
Home router’s forwarding rule
↓
Server computer’s private IP
↓
Minecraft server processYour public IP address is the address visible to other people on the internet. Your server computer’s private IP address is its address on your home network, commonly something like 192.168.1.50. A port identifies the network service receiving traffic. Your router uses NAT (network address translation) to share the internet connection among devices; a forwarding rule directs selected incoming traffic to one device.
Forwarding is not the same as allowing an app through your computer’s firewall, enabling UPnP, or putting a computer in the router’s DMZ. A firewall rule alone does not direct traffic through the router. DMZ is not a safe shortcut: it can expose far more of the computer than the Minecraft port you need.
Check your edition and port
Java and Bedrock use different server software and default ports. Do not forward Java’s port for a Bedrock server or vice versa.
| Server | Typical default | Protocol | Where to verify |
|---|---|---|---|
| Java Edition dedicated server | 25565 |
TCP | server.properties |
| Bedrock Dedicated Server, IPv4 | 19132 |
UDP | server.properties |
| Bedrock Dedicated Server, IPv6 | 19133 |
UDP | server.properties |
These are defaults, not guarantees: a server can be configured to use different ports. Microsoft documents Bedrock’s server-port and server-portv6 settings in its Bedrock server properties reference. The official Java server download page provides server software for Java Edition.
Java Edition
Open the Java server’s server.properties file and check:
server-port=25565
server-ip=If you changed server-port, use that port in your firewall rule, router rule, and the address players enter. It is generally practical to leave server-ip blank unless you have a specific reason to bind the server to a particular network interface.
The official Java download page shows the general launch-command pattern, for example java -Xmx4G -Xms4G -jar minecraft_server.jar nogui. The memory setting is an example, not a universal requirement; suitable memory depends on player count, world activity, mods, and other programs running on the computer.
Bedrock Dedicated Server
Check the Bedrock server’s server.properties for its port settings. Typical values are:
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11server-port=19132
server-portv6=19133Microsoft’s Bedrock Dedicated Server setup guide covers installation, startup, ports, and firewall configuration. Its download page lists current platform requirements; check the official Bedrock server download page before installing.
Open to LAN and hosted worlds are different
Java’s Open to LAN feature is designed primarily for sharing a session with people on the same local network. The port may be selected dynamically, and the host must keep the world open. That makes it less convenient for a persistent internet-facing server than dedicated server software. Minecraft’s multiplayer guide explains LAN play and joining servers.
For a Bedrock world that does not need to remain online independently, the built-in Invite to Game flow may be simpler than running a dedicated server and configuring a router. Use Realms or a hosting service if you want an always-available world without maintaining a home server.
Before changing router settings
- Confirm the edition and server software, and make sure the server starts successfully. Complete any required EULA step.
- Check that another device on your home network can reach the server.
- Find the server computer’s current private IPv4 address and reserve it in the router so it does not change.
- Confirm the configured server port and protocol.
- Make sure you can administer both the computer’s firewall and the router.
- Check whether an ISP gateway, modem/router, or second router sits between your router and the internet.
- Check whether the router has a reachable public address; CGNAT or ISP restrictions can prevent inbound forwarding.
1. Find the server computer’s private IP address
Windows
Open Command Prompt and run:
ipconfigUnder the active Ethernet or Wi-Fi adapter, note IPv4 Address and Default Gateway. For example, the computer might be 192.168.1.50 and the router might be 192.168.1.1. Forward to the computer’s address, not the gateway.
Rank #2
- Upgraded Two Zipper Pockets: Forvencer server books feature two secure zipper pockets for better organization of coins, cash, and receipts, ensuring that everything you collect has a safe and secure place
- Smart Storage & Quick Access: Designed with 8 multi-functional compartments, the right side includes a guest receipt pad, while the left has a money pocket, ticket pocket, and credit card slot. Two small clear pockets store bills, receipts, and other visible items. A stitched pen loop ensures you always have your favorite pen ready
- High-quality & Easy to Clean: Crafted from high-quality PU leather with heavy-duty stitching, this server book is built to last. It resists tears, scratches, and its waterproof surface makes cleaning easy with just a damp cloth or a non-chlorine sanitizer
- Perfect Fit for Your Apron: Measuring 5” x 8”, this compact organizer is slightly smaller than other models, making it ideal for bending or sitting while carrying in your server apron. It holds everything a waitress needs—a place for everything
- What's Included: This server organizer comes with multiple open and zippered pockets to store money, receipts, tips, etc. Clear sleeves are perfect for keeping menus or special lists while serving. Available in a variety of colors, allowing you to express yourself even when in uniform
macOS
In Terminal, try ipconfig getifaddr en0; interface names vary, so that command may not apply to every connection. You can also open System Settings → Network, select the active connection, and view its details.
Linux
Run ip addr or hostname -I and identify the address assigned to the active network interface.
Do not use 127.0.0.1 as the router’s forwarding target. It is the computer’s loopback address. Do not use the router’s address, an old DHCP address, or an IPv6 address in an IPv4-only rule.
2. Keep the server’s private IP stable
A forwarding rule points to a private address. If DHCP later assigns the server computer a different address, the rule may send traffic to the wrong device.
The easiest option for most users is a DHCP reservation in the router, usually under a section named LAN, DHCP, or Address Reservation. Select the server computer or enter its network adapter’s MAC address, then reserve its current address. Router labels and menus vary by model and firmware.
You can instead configure a static address on the computer, but it must use the correct subnet, gateway, and DNS settings and should not conflict with the router’s DHCP pool. A reservation keeps address management in one place and is usually simpler for beginners.
3. Allow the server through the computer’s firewall
A correct router rule cannot bypass a firewall on the server computer. Permit only the server program or required port; do not disable the firewall permanently or allow every port.
Windows Defender Firewall
When the server first runs, Windows may ask whether Java or the Bedrock server can communicate through the firewall. For a home network, allow access on the private network profile when appropriate. If the computer is on a public profile, review the rule deliberately rather than allowing broad access.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesTo create a port rule, open Windows Security → Firewall & network protection → Advanced settings → Inbound Rules → New Rule, then choose Port. Select the relevant protocol and enter the server’s port:
- Java default: TCP,
25565. - Bedrock IPv4 default: UDP,
19132. - Bedrock IPv6 default: UDP,
19133, if you use that path.
Choose Allow the connection, select only the network profiles the server needs, and give the rule a recognizable name. Microsoft’s Bedrock setup instructions also cover Windows firewall access.
Ubuntu with UFW
For Java’s default port:
sudo ufw allow 25565/tcp
sudo ufw reload
sudo ufw statusFor Bedrock’s default IPv4 and IPv6 ports:
sudo ufw allow 19132/udp
sudo ufw allow 19133/udp
sudo ufw reload
sudo ufw statusOnly allow the ports and protocols your server uses. Microsoft’s Bedrock guide includes Ubuntu firewall examples; the rules above make the Bedrock UDP protocol explicit.
Rank #3
- 【All-Purpose Server Guest Book】Ideal for busy waiters and waitresses this server book for women and men helps you stay organized on the job with 7 large pockets that can store cash, checks, tips, bills, receipts, coins, bank cards, and more. Differ from middle holder, side pen holder avoid annoying ink stains.
- 【Perfect Size】 The size of this serving book: 7.5inch * 5inch, the expansion size: 10.2inch * 5inch.It is a moderate size fit many restaurant server apron pocket. (Noted: apron & guest check are not included).
- 【Premium Material】This waitress book organizer made by high quality PU leather.It touch soft and comfortable. This material is waterproof and easy to clean, you can easily remove surface stains with a wet cloth.
- 【Humanized design】Get this server book to streamline steps of service. It is simple, practical, elegant and necessary for any restaurant-like establishment. The money pocket on the left can also put the guest check pad, so that left-handed people can easily use it.
- 【Outside of Work】This server wallet has a cute appearance,you can take it for travel ,school ,shopping and so on. Artistic waitress book highlight your unique taste. Unique design server book show your outstanding, easily impressed people at a glance.
4. Create a port-forwarding rule on the router
Connect to the router’s administration page or app. Depending on the manufacturer, the setting may be called Port Forwarding, Virtual Server, or appear under NAT or Firewall. Use the field names as a guide; there is no universal menu path.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →For a default Java server, make a rule like this:
Name: Minecraft Java
Protocol: TCP
External/WAN port: 25565
Internal/LAN port: 25565
Internal IP/device: 192.168.1.50
Enabled: YesReplace 192.168.1.50 with the server computer’s reserved private IP. For a port range, enter 25565 as both the start and end.
For a default Bedrock IPv4 server, create a separate rule:
Name: Minecraft Bedrock
Protocol: UDP
External/WAN port: 19132
Internal/LAN port: 19132
Internal IP/device: 192.168.1.50
Enabled: YesIf you are setting up Bedrock IPv6, use the configured IPv6 port and the router’s appropriate IPv6 firewall controls; IPv4 port-forwarding fields do not automatically configure IPv6 access. If you changed the Minecraft port, update the router and firewall rules to match.
5. Give players the right address
Players connecting from outside your home need your public IP address or a hostname that resolves to it—not the private address you found with ipconfig or a similar command. Private IPv4 ranges such as 192.168.x.x, 10.x.x.x, and 172.16.x.x through 172.31.x.x are for local networks.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
For Java’s default port, players can normally enter the public IP address in the server address field. If you use a non-default port, give them PUBLIC_IP:PORT, for example 203.0.113.25:25570. The IP shown is only an example. For Bedrock, provide the public address and the server port in the client’s server connection fields; default IPv4 port is 19132.
Home public IP addresses can change. Dynamic DNS can provide a more memorable hostname that updates when the address changes, but it does not fix CGNAT, double NAT, a blocked firewall, a stopped server, or a bad forwarding rule. Share your public address only with people who need it, and use a server allowlist.
6. Test the connection in layers
Test in this order so you know which part of the route is failing.
- Confirm the server is running. Watch its startup output for errors or a bind failure. On Windows,
netstat -ano | findstr :25565can help check a Java listener. On Linux,ss -lntp | grep 25565checks a TCP listener; for Bedrock UDP, tryss -lunp | grep 19132. Output varies by system and runtime. - Test from the server computer. Try
localhostor127.0.0.1where appropriate. This tests the local process, not the router. A Windows Bedrock client may not connect to a Bedrock Dedicated Server on the same Windows machine without a loopback exemption; Microsoft documents this special case in its setup guide. - Test from another device on the same home network. Use the server computer’s private IP. If this fails, investigate the server, its firewall, the address, Wi-Fi/guest-network isolation, VPN interference, and client/server version compatibility. Router forwarding is not yet the main suspect.
- Test from outside the home network. Ask a friend to connect from their own internet connection, or test over cellular data. This checks the public path. Testing your own public address while connected to the same Wi-Fi is unreliable because some routers do not support NAT loopback (also called hairpin NAT).
A port-checking site can be a clue, not a verdict. The server must be running and listening, the rule and firewall must be active, and the checker must test the correct protocol. Generic checkers often handle TCP better than UDP, so a “closed” UDP result does not by itself show what is wrong.
Recommended Free Tools
Troubleshooting: why friends cannot join
LAN works, but an outside player times out
Check that the forwarding rule targets the server’s current private IP, the port and protocol match the server configuration, and the host firewall allows incoming traffic. Then compare the router’s WAN address with the public address visible to the internet. If the WAN address is private, or does not match the public address, an upstream gateway or ISP network may be in the way.
There are two routers or an ISP gateway
A common layout is internet → ISP gateway/router → personal router → server. This is double NAT. Traffic may need a forwarding rule on both devices, or the ISP gateway may need a supported bridge or modem mode so the personal router handles the connection directly. Do not assume opening the port on only the downstream router is enough.
Rank #4
The router’s WAN address differs from the public address
Your ISP may use carrier-grade NAT (CGNAT), which places multiple customers behind a shared public IPv4 address. Ordinary home-router forwarding cannot direct unsolicited traffic through the ISP’s shared NAT to your server. Ask the ISP whether it can provide a public IPv4 address or remove the connection from CGNAT. A dynamic-DNS name and DMZ setting do not solve CGNAT.
Other options are a properly configured IPv6 connection, a tunnel or overlay service, or hosted server. IPv6 requires compatible addresses and firewall configuration on both ends; it is not the same as adding an IPv4 forwarding rule.
Free tools Windows power users keep installed
One-click scans. No signup required.
The server works until the computer restarts
The computer may have received a different private IP address. Create a DHCP reservation, then update the router rule if necessary. Also check that the server starts after reboot and that the firewall rule is enabled.
The server binds to the wrong address or reports a bind error
Check the port in server.properties and avoid setting server-ip to an address the computer does not currently own. Unless you have a specific network configuration that requires binding to an interface, leaving it blank is usually the practical choice.
A port checker says the port is closed
Make sure the server is running during the check and confirm the checker is testing the right protocol. Verify the host firewall, forwarding target, port, and any upstream router. A TCP-only test cannot establish that a UDP Bedrock port is reachable, and many UDP scans cannot reliably distinguish a closed service from one that does not respond to the probe.
The host cannot connect using its own public IP
This may be a NAT loopback limitation rather than a broken external setup. Test from a genuinely separate network, or use the private IP when joining from inside the home network.
Players get an outdated-client or outdated-server message
That is a version compatibility problem, not a port-forwarding error. Make sure clients and server use compatible releases and that a mod loader, mods, or preview build is not introducing a mismatch. Java players generally need a version compatible with the server; Bedrock can reject even patch-level protocol differences. Minecraft’s official multiplayer guide and Microsoft’s Bedrock guide explain version considerations.
The ISP may block inbound traffic
Some providers restrict inbound connections or selected ports. Ask the ISP about your plan and connection. If supported, you can map a different external port to the server’s internal port—for example, external TCP 25570 to 192.168.1.50:25565. Friends then use PUBLIC_IP:25570. The server and client must support the chosen arrangement, and changing the external port does not bypass CGNAT.
Security and upkeep
Port forwarding exposes the Minecraft service to unsolicited internet traffic. Reduce risk by keeping the server software, operating system, and Java or other runtime updated; enabling a whitelist/allowlist; using strong, unique administrative credentials; and backing up worlds before upgrades or mod changes. Allow only the Minecraft port through the firewall, and do not expose router administration, remote desktop, SSH, or file shares unnecessarily. Avoid running unrelated services on the same machine where practical.
Port forwarding does not mean your entire home network is automatically open, but a vulnerable server or overly broad firewall rule can create risk. Do not use DMZ to avoid diagnosing a rule. If you do not want to manage updates, security, uptime, and backups on a home computer, choose a hosted alternative.
When port forwarding is not the right choice
| Your situation | Option to consider | Trade-off |
|---|---|---|
| You want a simple private world with minimal setup | Bedrock invites or Minecraft Realms | Less server administration; features and player limits depend on the applicable option. |
| You want the world online while your PC is off, or need managed tools | Third-party Minecraft hosting | Recurring cost and reliance on the provider, in exchange for hosting controls and uptime. |
| You are behind CGNAT or cannot change router settings | Tunnel or overlay service | Requires a third party and may add latency, limits, account requirements, or client setup. |
| You want full control and have a reachable connection | Self-host with port forwarding | You manage the machine, security, backups, network, and availability. |
| You only want to play on the same home network | LAN play | No public server exposure is needed, but the host must be available. |
Port forwarding is a useful no-subscription option when your network supports inbound connections and you are willing to maintain the server. If the public path is blocked by CGNAT or provider policy, changing router settings repeatedly will not fix it; use an alternative or ask the ISP about available service options.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
