Firewall Best Practices

Recommended firewall rules for popular game servers — the ports, filters and protocols we suggest for the best protection.

Required Must be applied for the game server to function correctly behind the firewall.

Recommended Strongly advised for the best protection and performance, but not strictly required.

Optional Situational hardening — apply only if it fits your setup.

FiveM

Port	Rule	Protocol	Priority
30120	`fivem-synproxy`	tcp	required
30120	`fivem`	udp	required
Any	`drop`	tcp	recommended
Any	`udp-holepunch`	udp	recommended

Port	Rule	Protocol	Priority
28015	`raknetv2-noa2s`	udp	required
28017	`steamquery`	udp	required
28016	`synproxy`	tcp	required
28016	`battlemetrics-whitelist`	tcp	recommended
28082	`synproxy`	tcp	required
Any	`drop`	tcp	recommended
Any	`udp-holepunch`	udp	recommended

Port	Rule	Protocol	Priority
2302	`dayz`	udp	required
27015	`steamquery`	udp	required
Any	`drop`	tcp	recommended
Any	`udp-holepunch`	udp	recommended

Port	Rule	Protocol	Priority
7777	`arkse`	udp	required
7778	`arkse-raw`	udp	required
27015	`arkse-query`	udp	required
Any	`drop`	tcp	recommended
Any	`udp-holepunch`	udp	recommended

Port	Rule	Protocol	Priority
19132	`minecraft-bedrock`	udp	required
Any	`drop`	tcp	recommended
Any	`udp-holepunch`	udp	recommended

Port	Rule	Protocol	Priority
25565	`minecraft-java`	tcp	required
Any	`drop`	tcp	recommended
Any	`udp-holepunch`	udp	recommended

Port	Rule	Protocol	Priority
27015	`gmod`	udp	required
27015	`synproxy`	tcp	required
Any	`drop`	tcp	recommended
Any	`udp-holepunch`	udp	recommended

Port	Rule	Protocol	Priority
51820	`wireguard`	udp	required
Any	`udp-holepunch`	udp	recommended
Any	`drop`	tcp	optional

Permits only UDP egress connections. Useful for VPNs. Use only if necessary.

Port	Rule	Protocol	Priority
Any	`udp-holepunch`	udp	required
Any	`drop`	tcp	optional

Permits only traffic originating from Cloudflare.

Port	Rule	Protocol	Priority
Any	`cloudflare-only`	udp	optional
Any	`cloudflare-only`	tcp	optional

Showing 10 of 10 game servers.