What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If your Minecraft server works on localhost but friends outside your home cannot join, troubleshoot from the inside out. First prove that the server is listening on the expected port, then test another device on your LAN, allow the host through its firewall, verify the router rule and private address, and finally check for double NAT or carrier-grade NAT (CGNAT). Port forwarding cannot repair a server that is not listening, a blocked firewall, or an ISP connection that has no public IPv4 address.
Godlike.Host offers hosted Minecraft Java servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
For Java Edition, the usual external endpoint is your public IPv4 address followed by :25565, using TCP. Bedrock Edition normally uses UDP port 19132. The correct port, protocol, and edition must match the server your friends are running.
As an Amazon Associate I earn from qualifying purchases.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallStart with the connection path
Every connection crosses several checkpoints. A failure at an earlier checkpoint makes later tests meaningless, so do not begin by changing random router settings.
- Server process: Minecraft must start without errors and listen on the intended port.
- Host interface: The process must be reachable through the computer’s LAN address, not only through a loopback interface.
- Host firewall: Windows Defender Firewall,
ufw,firewalld, or security software must permit inbound traffic. - Router NAT: The router must translate the public port to the host’s current private address and matching internal port.
- Upstream network: A second router, modem, or ISP NAT layer must pass the traffic onward.
- Remote test: The server must be running while an external player or port test connects.
Work through those checkpoints in order. Record the private IP, public IP, port, protocol, and test result at each stage; that record prevents you from correcting one device while overlooking another.
#1 Best Overall
- Play and share with friends on console, mobile and Windows 10
- discover community creations in the new in-game store
- access new mini games and game modes through servers
Confirm the edition, port, and protocol
Java Edition
Minecraft Help’s Java server guidance identifies 25565 as the default forwarded port. Java clients use TCP. A remote player enters your public IPv4 address followed by :25565 in the multiplayer server address field, unless you deliberately chose another external port.
Bedrock Edition
SurvivalConfigs records the usual Bedrock server endpoint as UDP 19132. Bedrock clients therefore need the public address and the configured UDP port; forwarding only TCP 25565 will not expose a Bedrock server.
Free tools Windows power users keep installed
One-click scans. No signup required.
| Edition | Typical default | Transport | What to forward |
|---|---|---|---|
| Java | 25565 | TCP | Public TCP 25565 to the host’s Java server port |
| Bedrock | 19132 | UDP | Public UDP 19132 to the host’s Bedrock server port |
Defaults can be changed in the server configuration or startup command. If you changed the port, use that value consistently in the server file, firewall rule, router rule, and the address your friends enter.
Step 1: Prove the server is listening locally
Do this on the computer running the server while the server process is active. A port checker will report a closed port when the process is stopped, which is expected; external tests are useful only while Minecraft is listening.
Test localhost
- Start the server and wait for its console to report that it is ready for connections.
- On the same computer, connect to
localhost:25565for Java, or to the configured Bedrock local port. - If the connection fails, read the server console for Java errors, missing files, failed world loading, or a port-in-use message.
A failed localhost test means port forwarding is not yet relevant. Repair the installation, Java runtime, world, or server configuration first. If another program already owns the port, stop that program or choose a free port and update every dependent setting.
Inspect server.properties
For most home servers, leave server-ip empty. Binding it to an old address, a Wi-Fi address that no longer exists, or another interface can prevent LAN and remote connections. SurvivalConfigs recommends an empty value or 0.0.0.0 so the server listens on the host’s available interfaces. Set server-port to the port you intend to expose, then restart the server; editing the file while it is running may be overwritten.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problemsRank #2
- Learn your way around one block at atime in the new tutorial mode
- Craft all sorts of items from boats todiamond armor and create enormousstructures
- Team up with friends in eight-playeronline multiplayer and four-player splitscreen modes
Do not confuse the server’s listening port with the query or remote-administration port. Forward only the game port required by your edition unless you have a specific, secured reason to expose another service.
Check the listening socket
On Windows, open PowerShell and run:
Get-NetTCPConnection -LocalPort 25565 -State ListenFor Bedrock’s UDP port, use:
Get-NetUDPEndpoint -LocalPort 19132On Linux, run:
sudo ss -ltnp | grep 25565
sudo ss -lunp | grep 19132The output should show the Minecraft process listening on the expected port. If it shows only 127.0.0.1, the service is loopback-only; correct server-ip and restart. A listener on 0.0.0.0 or the host’s LAN address can accept connections arriving through the network interface.
Step 2: Test from another device on the same LAN
Find the server computer’s private IPv4 address. On Windows, ipconfig displays it under the active adapter. On Linux, ip addr or hostname -I displays the address. It commonly begins with 192.168., 10., or 172.16. through 172.31..
- Connect a second computer or console to the same home network.
- In Minecraft, enter the host’s private address and port, such as
192.168.1.50:25565for Java. - For Bedrock, enter the private address and the configured UDP port in the server form used by that client.
If the LAN test fails, inspect the server binding and host firewall before touching port forwarding. Also check whether the two devices are genuinely on the same network: guest Wi-Fi and many mesh systems enable client isolation, which intentionally blocks device-to-device traffic. Disable isolation for trusted devices or test over the primary LAN.
Make the private address stable
A router’s DHCP lease can change after a reboot, causing an existing rule to point at the wrong computer. Reserve the host’s address in the router’s DHCP settings, or configure a static address that fits the router’s subnet and does not collide with the DHCP pool. Then confirm the reservation is active and update the forwarding rule if the address changed.
Step 3: Allow the game through the host firewall
Firewalls are independent of NAT. A correct router rule still fails if the operating system silently drops the packet.
Rank #3
- ENGAGING AND COOPERATIVE: Experience the thrill of Minecraft in a unique and cooperative board game format. Perfect for teams of 2 to 4 players, the game encourages joint strategies and shared victories
- EVER-CHANGING GAMEPLAY: With a map that changes every time you play, this game offers high replay value, making every game a unique and unpredictable experience
- QUALITY COMPONENTS: The game includes 25 wooden blocks, 18 world tiles, 4 inventory boards, 6 player cards, 9 buildings, 12 mob tokens and more. All components are crafted with care to enhance your gaming experience
- AGE-APPROPRIATE CHALLENGE: Aimed at ages 7 and up, this game offers a great balance of fun and challenge, making it a great choice for family game nights, parties, or gatherings
- TRUSTED BRAND: With over 130 years of experience, Ravensburger ensures top quality games that stimulate the mind, engage the hands, and touch the heart
Windows
When Windows first detects the server, allow it on the Private network profile. If the prompt was dismissed, open Windows Security → Firewall & network protection → Advanced settings → Inbound Rules. Create or enable an inbound rule for the Java executable or for the chosen port, selecting TCP 25565 for Java. For Bedrock, create a UDP rule for 19132. Restrict the rule to the Private profile unless you have a deliberate reason to expose the service on Public networks.
For a temporary diagnostic, you can disable the firewall briefly on the private profile, test from the LAN, and immediately re-enable it. If the test succeeds only while disabled, create a narrow allow rule instead of leaving protection off. Third-party endpoint-security suites may have their own network firewall; check their event log as well.
Recommended Free Tools
Linux
With ufw, allow the appropriate protocol and port, then verify the status:
sudo ufw allow 25565/tcp
sudo ufw statusFor Bedrock:
sudo ufw allow 19132/udpOn systems using firewalld, add a permanent rule and reload:
sudo firewall-cmd --permanent --add-port=25565/tcp
sudo firewall-cmd --reload
sudo firewall-cmd --list-portsUse the equivalent UDP command for Bedrock. If a hosting panel, container, or security module manages filtering, inspect that layer too. The goal is an explicit allow rule on the interface and port where Minecraft is listening.
Step 4: Build the router forwarding rule correctly
Router labels differ, but the required values are the same. In the router’s administration page, open a menu named Port Forwarding, Virtual Server, or NAT Rules.
Rank #4
- Minecraft Dungeons Hero Edition includes the Hero Pass DLC content: a Hero Cape, two player skins, and a chicken pet. It also includes the Jungle Awakens and Creeping Winters DLC packs.
- Dungeon Creeper Battle new-and-nasty mobs in this all-new action-adventure, inspired by classic dungeon crawlers.
- Multiplayer Up to four players can team up and fight together in co-op mode.
- Power Up Unlock dozens of unique items and weapon enchantments for devastating special attacks.
- Options Personalize your character, then fight up-close and personal with melee swings, hang back with ranged attacks, or tank your way through swarms of mobs, by heavy armor
| Field | Java example | Bedrock example |
|---|---|---|
| Rule name | Minecraft-Java | Minecraft-Bedrock |
| External/public port | 25565 | 19132 |
| Internal/private port | 25565 (or your configured port) | 19132 (or your configured port) |
| Destination IP | Host’s reserved LAN IPv4 | Host’s reserved LAN IPv4 |
| Protocol | TCP | UDP |
| Status | Enabled | Enabled |
Some routers offer an “all” protocol option. Do not use it when the edition’s protocol is known; selecting the required protocol reduces unnecessary exposure. Save the rule, apply changes, and reboot only if the router requires it. Recheck that the destination still matches the host’s current private address.
Keep external and internal ports straight
The public port and private port may differ. For example, external TCP 25566 can map to an internal Java port 25565. Friends must then enter public-address:25566. If you use the same number on both sides, troubleshooting is simpler and matches Minecraft Help’s default example.
Step 5: Verify the WAN address and detect double NAT
Log in to the router and note its WAN or Internet IPv4 address. Compare it with the public IPv4 shown by an independent “what is my IP” service from a device on your network. They should match for a straightforward single-router setup.
When two routers are in the path
Double NAT occurs when an ISP modem/router sits upstream of your own router, or when two home routers both perform NAT. Netgate’s pfSense documentation explains that the forward must exist on each upstream device. Add a rule on the outer device forwarding the public port to the inner router’s WAN address, then a second rule on the inner router forwarding to the Minecraft host. Alternatively, place the ISP gateway in bridge or passthrough mode, if supported, so only one device performs NAT.
Inspect packet and firewall logs where available. Traffic that never leaves the inside interface indicates a NAT or firewall problem rather than a Minecraft problem. Avoid exposing the administration interfaces of either router; forward only the game port.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Step 6: Identify CGNAT or another upstream block
Port forwarding cannot create an inbound path when your router does not own a reachable public IPv4 address. Compare the router WAN address with the independent public address result. Warning signs include a mismatch, or a WAN address in private ranges such as 10.0.0.0/8, 172.16.0.0/12, or 192.168.0.0/16, and shared carrier ranges such as 100.64.0.0/10.
Best Value
- Official Minecraft Puzzle Game – Hands-On Logic Game Based on the Best-Selling Video Game.
- 40 Strategic Challenges – Use the Actions to Navigate & Solve Increasingly Tough Puzzles.
- No Screens, Just Strategy – Promotes Problem-Solving with Off-Screen Minecraft Fun.
- Perfect for Ages 8+ – Great Gift for Minecraft Fans Who Love a Challenge!
- Trusted by Parents Worldwide – With Over 50 Million Sold, ThinkFun is the World's Leading Manufacturer of Brain Games and Mind-Challenging Puzzles!
In CGNAT, the ISP translates many customers behind one public address. You cannot add a rule to equipment you do not control, so repeated edits to your home router will not open the port. EnderDash and Taipan Transit describe three practical options:
- Ask the ISP for a public IPv4 address or a plan that permits inbound connections. It may be static, dynamic, or an add-on, and availability and fees depend on the provider.
- Use a Minecraft-capable tunnel that creates an outbound connection from your home to a relay. This avoids inbound NAT but adds a provider dependency, configuration overhead, and potentially recurring cost.
- Run the server on a VPS with a public address. This avoids home NAT, but you must manage operating-system updates, firewall rules, backups, performance limits, and the provider’s charges.
A router upgrade alone does not solve CGNAT; the change must occur at the ISP or through an external tunnel or server.
Step 7: Test from outside without being fooled by hairpin NAT
Use a phone on cellular data, a friend on another network, or an external TCP test service while the Minecraft server is running. Do not rely on a test from the same home Wi-Fi: many routers lack hairpin (NAT loopback), so they cannot route your public address back into the LAN even though outside players can connect.
For Java, test TCP 25565. For Bedrock, test UDP 19132 with a tool that actually supports UDP; a TCP-only checker cannot validate a UDP service. A “closed” result while the server is stopped is normal. Start Minecraft, wait until it is listening, and repeat the test.
Interpret the result
- Open externally and friends still fail: confirm they are using the correct edition, address, port, and account version. Check server whitelist, authentication, and game-version compatibility separately from networking.
- Closed externally but LAN works: inspect the router rule, WAN address, double NAT, upstream firewall, and ISP filtering.
- Timeout rather than refusal: packets are often being dropped by NAT or a firewall. Review logs on the host, router, and upstream gateway.
- Immediate refusal: the address is reachable but no process is accepting that protocol and port, or a device is actively rejecting it. Recheck the listener and protocol.
A compact decision tree
- Does
localhost:25565work on the host? If no, fix startup, Java,server.properties, or the listening port. - Does a second LAN device connect to the host’s private IP? If no, inspect
server-ip, host firewall, interface selection, and Wi-Fi isolation. - Does an external test reach the service while it is running? If no, verify the forwarding destination, protocol, WAN address, and firewall logs.
- Does the router WAN address differ from the public address or use a private/shared range? Suspect double NAT or CGNAT and escalate to the upstream device or ISP.
- Does the port checker say closed only when the server is stopped? That is expected; retest with Minecraft actively listening.
Security and reliability after it works
Expose the smallest possible surface. Forward only the game port, keep the operating system and server software updated, use a strong operator password, enable the whitelist for a private server, and make regular world backups. Reserve the host’s LAN address and document the rule so a router reset does not leave you guessing. Review router and host logs after updates, and remove the forwarding rule when you no longer run the server.
Direct forwarding gives the lowest network complexity when you have a public IPv4, a stable LAN address, and control of every NAT layer. A tunnel or VPS is the practical alternative when CGNAT or an ISP policy blocks inbound traffic, but it shifts trust, maintenance, and possibly cost to another provider. Choose based on which part of the path you can actually control.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
