What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
For the documented default configuration of The Forest Dedicated Server, forward 8766, 27015, and 27016 from your router to the computer hosting the server. Create matching inbound rules for both TCP and UDP in the router and on the host computer’s firewall. These ports are used for Steam communication, game traffic, and server queries respectively.
Godlike.Host offers hosted The Forest servers with its own game panel, SFTP access and free DDoS protection, if you would rather not host it yourself.
Forward the ports to the host’s stable private LAN address, never to the router’s public address. Before testing, compare the values in Server.cfg and any launch arguments with your forwarding rules; a changed port in either place makes an otherwise correct rule point at the wrong service.
As an Amazon Associate I earn from qualifying purchases.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Fix the driver behind crashes, sound loss and screen glitches3Clear out junk files and repair common Windows errorsDefault ports for The Forest Dedicated Server
The following values are the documented defaults in the dedicated-server reference and the Windows setup tutorial. The tutorial instructs administrators to allow every listed port over TCP and UDP.
| Function | Default port | Protocol guidance | What it handles |
|---|---|---|---|
| Steam communication | 8766 | TCP and UDP | Communication between the dedicated server and Steam services. |
| Game communication | 27015 | TCP and UDP | Gameplay traffic between connected players and the server. |
| Server query/browser | 27016 | TCP and UDP | Server-list and status queries used to discover or inspect the server. |
Steam’s general dedicated-server documentation separately describes UDP 27015 as a default gameplay port and TCP 27015 as the default RCON channel. That platform-wide guidance provides context, but it does not replace The Forest’s documented three-port set, which includes 8766 and 27016.
#1 Best Overall
- Strategic 2-Player Trick-Taking: Master the art of winning just enough tricks without overcommitting, using clever card play and tactical decision-making to outmaneuver your opponent
- New Module Variations: Three game modules (special cards, goal cards, poison cards) offer endless strategic combinations, keeping gameplay fresh and exciting for repeated plays
- Premium Deluxe Components: Foil-stamped cards, all-new fairy-tale illustrations, and acrylic scoring tokens deliver a visually stunning and tactile experience that enhances every game
- Quick 30-Minute Gameplay: Perfect for busy couples seeking quality time together, delivering strategic depth and meaningful competition in a compact, elegant format
- Complete Game Package: Includes 33 base cards, nine special cards, 16 goal cards, three poison cards, two reference cards, 17 scoring tokens, and comprehensive rulebook
What you need before port forwarding
- A Windows computer running The Forest Dedicated Server.
- Administrative access to the router or gateway that receives your internet connection.
- Administrative access to Windows Firewall on the server computer.
- The host computer’s private IPv4 address, such as
192.168.1.50or10.0.0.25. - The active
Server.cfgfile and the complete launch command, including any command-line overrides. - An external test location, such as a friend on a different internet connection or a device using mobile data.
A DHCP reservation is preferable to a manually typed address on the computer. It keeps the same private address assigned to the host while allowing the router to manage the lease. Without a stable destination, a reboot can give the server another address and leave the forwarding rule aimed at a different device.
Find the ports the server is actually using
Check Server.cfg
On Windows, the setup tutorial places the generated configuration at:
C:UsersUSERAppDataLocalLowSKSTheForestDedicatedServerdsServer.cfgReplace USER with the Windows account that installed or first launched the server. Open the file in a text editor and locate the port entries. A default configuration contains values equivalent to:
serverSteamPort 8766
serverGamePort 27015
serverQueryPort 27016The same file also contains the server IP, name, player limit, passwords, and VAC-related settings. Do not assume that a copied configuration still has the defaults; read the active values before creating rules.
Check command-line overrides
Command-line options can override matching entries in Server.cfg. If the launch shortcut, batch file, service wrapper, or host panel supplies a different value for serverSteamPort, serverGamePort, or serverQueryPort, use that value in the router and firewall. For example:
Rank #2
- Strategic Trick-Taking Gameplay: Master unique character abilities and special powers that let you change the trump suit, lead after losing tricks, and outwit your opponent with clever card play
- Compact Travel-Friendly Design: Perfectly portable for date nights, vacations, and weekend getaways with its small box that fits easily in bags and luggage without sacrificing quality components
- Beautiful Illustrated Cards: Stunning fairy tale character artwork with intricate botanical details and elegant brushwork makes analyzing your options quick and enjoyable during each game
- Quick 30-Minute Sessions: Ideal for busy adults seeking meaningful screen-free connection without long rulebook learning curves or extended play commitments on weeknights
- Balanced 2-Player Experience: Expertly designed trick-taking mechanics ensure neither player gains unfair advantage, rewarding strategic thinking and creating intense memorable moments every game
-serverSteamPort 8770 -serverGamePort 27020 -serverQueryPort 27021In this example, forwarding 8766, 27015, and 27016 would not expose the ports the running process is listening on. Keep one written list of the effective ports and use it when configuring every network layer.
Step-by-step: open the ports
1. Generate and confirm the configuration
- Install and launch The Forest Dedicated Server once so it creates its configuration files.
- Stop the server cleanly before editing the file.
- Read the three port values in
Server.cfg, then inspect the launch shortcut or script for overrides. - Record the final Steam, game, and query ports. The documented defaults are 8766, 27015, and 27016.
2. Give the host a stable private address
- On the host computer, open Windows network settings and note its IPv4 address.
- In the router’s DHCP or LAN section, create a reservation for that computer’s network adapter MAC address.
- Reconnect the computer or renew its lease, then confirm that it still has the reserved address.
The forwarding destination must be this private address. A public/WAN address belongs to the router and is not the internal destination for a port-forward rule.
3. Create router forwarding rules
- Sign in to the router’s administration page.
- Open the section labeled Port Forwarding, NAT, Virtual Server, or a similar term.
- Create a rule for the configured Steam port, normally external port 8766 to internal port 8766, targeting the host’s private address.
- Create a second rule for the game port, normally 27015 to 27015, with the same destination.
- Create a third rule for the query port, normally 27016 to 27016, with the same destination.
- Choose both TCP and UDP when the router offers a combined option. If it requires separate entries, create one TCP rule and one UDP rule for each port.
- Save or apply the configuration. Some routers restart their NAT service when changes are applied.
Use the same external and internal port unless you have a deliberate reason to translate them. If you do translate a port, the server’s advertised or configured value must match the port players are expected to reach.
4. Allow the ports through Windows Firewall
Windows Firewall can block traffic even when NAT is correct. You can allow the server executable, create explicit port rules, or do both.
- Open Windows Defender Firewall with Advanced Security.
- Select Inbound Rules, then choose New Rule.
- For an executable rule, select Program, browse to the dedicated-server executable, and allow the connection on the profiles that apply to your network.
- For a port rule, select Port, choose TCP, enter the configured port, and allow the connection.
- Repeat the port-rule process for UDP and for each of the three configured ports.
- Give the rules clear names such as
The Forest 8766 TCPandThe Forest 8766 UDP.
If your organization manages firewall policy centrally, a local allow rule may not be sufficient. Check the effective policy and any endpoint-security product that filters inbound traffic.
Rank #3
- EPIC FOREST ADVENTURE: Journey through the Ancient Forest as courageous animal heroes competing to become the next Guardian of the Green Valley in a story-driven strategy board game.
- RICH STRATEGY & COMPONENTS: Explore a modular game board with 12 location tiles, gather resources, complete legendary deeds, encounter mysterious creatures, and use dozens of cards, tokens, and unique player boards to shape every adventure.
- YOUR CHOICES SHAPE THE STORY: Every moral decision influences your reputation as a noble hero or cunning villain while affecting your path through the forest and your race for fame and victory.
- HIGH REPLAYABILITY: Variable locations, encounters, expeditions, and strategic choices create a unique adventure every game, making it perfect for family game nights and tabletop gatherings.
- FOR FANTASY & STRATEGY FANS: Designed for families, teens, and adults who enjoy adventure games, storytelling, exploration, resource management, and immersive fantasy board game experiences.
5. Start the server and test from outside your LAN
- Start the dedicated server after the router and firewall rules are active.
- Confirm that the process starts without a bind or port-in-use error.
- Have a tester connect from a different internet connection, or use a device on mobile data.
- Test server discovery and a direct connection separately if the game or host tool supports both.
- After testing, review the server log for connection attempts and errors.
A successful connection from another computer on the same home network proves only that the service is running on the LAN. It does not prove that the router is forwarding internet traffic.
How the network path works
An outside player sends traffic to your router’s public IPv4 address. The router’s NAT rule translates the selected external port to the private address of the computer running the dedicated server. Windows Firewall then decides whether to pass the packet to the server process. The process must be listening on the same port and protocol that arrived.
There are therefore three independent checks:
- NAT destination: the router must send traffic to the current private address of the host.
- Host firewall: Windows must allow inbound TCP and UDP traffic for the configured ports.
- Application listener: The Forest Dedicated Server must actually be bound to those ports.
An additional upstream filter can exist when an internet provider uses carrier-grade NAT or blocks unsolicited inbound traffic. In that situation, a rule on your own router cannot create an internet-reachable endpoint by itself.
Diagnose a server that works locally but not for friends
Check the forwarding destination first
Compare the router rule’s destination with the host’s current IPv4 address. If the address changed after a reboot, repair the DHCP reservation or update the rule. Also check that the rule is enabled and attached to the WAN interface that actually carries internet traffic.
Verify the effective port values
Read the startup command and configuration again. A command-line override can silently invalidate an older forwarding rule. Confirm all three values, not only the game port: discovery can fail when the query port is wrong even if gameplay traffic reaches the machine.
Rank #4
- Cooperative Trick-Taking Mechanics: Win together by collecting gems through strategic card play and special character abilities that let teammates exchange cards and support each other throughout the game
- Perfect Two-Player Game: Designed specifically for 2 players aged 10 and up with 30-minute gameplay, making it ideal for couples, parents with kids, or anyone seeking meaningful one-on-one connection
- Portable Travel Card Game: Compact design fits easily in bags, backpacks, or carry-on luggage, bringing engaging entertainment to vacations, road trips, or gatherings without bulky components
- Beautiful Hand-Illustrated Cards: Featuring stunning artwork inspired by forest themes with quality card stock that holds up to repeated play while looking attractive displayed or stored
- Easy to Learn, Challenging to Master: Familiar trick-taking foundation makes it instantly approachable for newcomers while unique powers and strategic decision-making keep every game fresh and engaging
Separate TCP and UDP tests
Some routers display a combined TCP/UDP rule while others require two entries. If the interface offers separate protocol choices, create both for 8766, 27015, and 27016. A test that checks only TCP cannot prove that UDP gameplay traffic is available.
Inspect Windows Firewall profiles
A rule allowed on a private profile may not apply when Windows classifies the active adapter as public. Review the profile selected by each inbound rule and make the narrowest change that matches your security requirements. Temporarily disabling the firewall for diagnosis is risky; explicit allow rules are safer and provide a repeatable configuration.
Free tools Windows power users keep installed
One-click scans. No signup required.
Look for upstream filtering or carrier-grade NAT
If the server listens locally, the destination is correct, and Windows allows the traffic, ask whether the router has a public IPv4 address. Compare the router’s WAN address with the address shown by an independent “what is my IP” service. A mismatch, or a WAN address in a private or carrier-grade range, can indicate another NAT layer controlled by the provider. Contact the provider about inbound IPv4 access or use a hosting arrangement that supplies a reachable address.
Use wider ranges only as a diagnostic experiment
Some community troubleshooting material suggests opening 27015–27030 together with 8766 and 80. That is not the minimal set in the dedicated-server setup tutorial. A temporary, tightly monitored test of a wider range may help identify an unusual configuration, but it increases exposure and should not become the permanent default without evidence that a particular build requires it. Remove unnecessary rules after testing.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Security and maintenance considerations
Expose only the configured ports
Port forwarding makes a service reachable from the internet. Keep the rule set limited to the ports the server uses, and do not forward administrative interfaces such as the router’s management port. If you change ports, delete obsolete rules instead of leaving several alternatives exposed.
Best Value
- Beautiful Hidden Object scenes
- Lushly detailed and unique landscapes to discover
- Meet characters that explore the world along with you
- Use your unique magical ability to solve puzzles and uncover clues
Protect server administration
Use strong, unique server passwords where the configuration supports them, restrict access to the host computer, and keep Windows and the server software updated. Review logs for repeated unsolicited connection attempts. A server that is reachable does not need every Windows profile or every local subnet to have unrestricted access.
Recommended Free Tools
Account for the documented player limit
The Windows tutorial, published in 2017 and updated in 2019, documents a default maximum of eight players. Treat that as a documented default rather than a guarantee for every game build or custom configuration. If you raise or lower the limit, validate performance and confirm that the running configuration reflects the intended value.
Self-hosting versus managed hosting
Forwarding ports yourself gives direct control over the router, firewall, configuration, and hardware, but you are responsible for uptime, address changes, security, and troubleshooting every network layer. A managed game host can remove the home-router step, but the provider’s network design determines whether you receive a public IPv4 address, whether TCP and UDP rules are configurable, which firewall and DDoS protections are included, how persistent the address is, and what player capacity and uptime are available.
| Decision factor | Self-hosted at home | Managed host |
|---|---|---|
| Public reachability | Depends on your router and internet provider. | Depends on the provider’s network and address allocation. |
| Port control | You choose NAT and Windows Firewall rules. | The provider controls or exposes the available rules. |
| Address persistence | Use a DHCP reservation and monitor WAN changes. | Ask whether the assigned address is persistent or changes on restart. |
| Security layer | You maintain Windows updates, firewall policy, and router firmware. | Review the provider’s firewall, DDoS, backup, and isolation policies. |
| Capacity and uptime | Limited by your hardware, upload bandwidth, and power reliability. | Defined by the host’s hardware, plan limits, and service-level practices. |
No current provider prices or service guarantees are established here, so choose on these technical criteria rather than assuming that every managed host supports the same ports or player count.
Quick verification checklist
- Server configuration and launch arguments agree on the Steam, game, and query ports.
- The host has a stable private LAN address reserved in DHCP.
- Router rules target that private address, not the router’s WAN address.
- 8766, 27015, and 27016 are forwarded with matching internal and external values unless intentional translation is documented.
- Both TCP and UDP are allowed on the router and in Windows Firewall.
- The dedicated server is running and listening before an outside test begins.
- The tester is truly outside the host’s LAN.
- Any provider-side NAT or inbound filtering has been ruled out.
- Unneeded diagnostic rules have been removed after testing.
Sources and documentation notes
The port assignments and configuration names come from The Forest dedicated-server reference and a Windows setup tutorial. Those guides are community-maintained or older Steam Community material rather than a newly published developer port table, so verify the active values in your own Server.cfg and startup command. For router-specific instructions, the setup guide points readers to PortForward, where menus vary by router model. Steam Support’s generic dedicated/listen-server page describes UDP 27015 for gameplay and TCP 27015 for the default RCON channel; that generic information should be treated as platform context, not as a substitute for The Forest’s documented 8766/27015/27016 configuration.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
