How to Allow Minecraft Server Through Windows Firewall
Allow a Minecraft Java server through Windows Firewall by opening the correct TCP port, checking Java permissions, profiles, private networks, and router forwarding.
Windows Firewall can block Minecraft server traffic even when the server starts correctly. The rule must match the port and network profile your machine uses.
Check server.properties
server-port=25565
server-ip=
Use the configured server-port in your firewall rule. Do not assume the default if your panel or startup setup uses a different port.
Create an Inbound Port Rule
Create an inbound rule for:
| Field | Value |
| --- | --- |
| Rule type | Port |
| Protocol | TCP |
| Local port | 25565 or your configured port |
| Action | Allow |
| Profile | The active network profile |
| Name | Minecraft Server |
If you run a Bedrock or Geyser listener, handle UDP separately based on that setup.
Temporarily testing can help isolate the issue, but leaving the firewall off is not a safe fix. Create a targeted allow rule.
Check Private vs Public Network Profile
Windows applies firewall rules by network profile. If your server machine is on a Public profile but the rule only applies to Private, traffic can still be blocked.
For home LAN hosting, make sure the network profile and firewall rule match your intended setup.
Router Forwarding Still Matters
Windows Firewall only controls the server machine. External players still need router port forwarding or a hosted public endpoint.
If LAN players can join but external players cannot, continue with port forwarding not working.
FAQ
Should I allow Java or port 25565?
A port rule is usually clearer for a dedicated server. Allow TCP on the configured server-port.
Why can I join locally but friends cannot?
Windows Firewall may allow local access while the router, public firewall, wrong IP, or CGNAT blocks external players.
Do I need UDP in Windows Firewall?
For normal Java Edition, open TCP. Bedrock or Geyser setups may need UDP separately.
Related Tools
server.properties Generator
Generate a clean Minecraft server.properties baseline for online mode, max players, difficulty, view distance, simulation distance, and command blocks.
Minecraft Port Checker / Troubleshooting Wizard
Build a Minecraft port troubleshooting plan for port 25565, home hosting, VPS firewalls, panel allocations, proxy networks, DNS, and CGNAT.
Java Version Compatibility Tool
Check the Java version needed for common Minecraft server version ranges and avoid UnsupportedClassVersionError plugin and server startup failures.
Related Articles
Port Forwarding Not Working for Minecraft Server
Fix Minecraft port forwarding not working by checking server-port, local IP, router NAT, Windows Firewall, UFW, provider firewalls, and CGNAT.
How to Check If Port 25565 Is Open
Check whether Minecraft port 25565 is open by confirming server startup, local access, public IP, firewall rules, port forwarding, and external reachability.
Minecraft Server Timed Out Error
Fix Minecraft server timed out errors by checking startup, public IP, port forwarding, firewalls, CGNAT, DNS, proxies, and player network issues.