To enable firewal for Ant Media Server on Ubnuntu server, use following rules
ufw allow ssh ufw allow http ufw allow https ufw allow 1935/tcp ufw allow 5080/tcp ufw allow 5443/tcp ufw allow 5000:65000/udp enable ufw
After enabling, you will have following status
root@server:~# ufw status Status: active To Action From -- ------ ---- 22/tcp ALLOW Anywhere 80/tcp ALLOW Anywhere 443/tcp ALLOW Anywhere 1935/tcp ALLOW Anywhere 5080/tcp ALLOW Anywhere 5443/tcp ALLOW Anywhere 5000:65000/udp ALLOW Anywhere 22/tcp (v6) ALLOW Anywhere (v6) 80/tcp (v6) ALLOW Anywhere (v6) 443/tcp (v6) ALLOW Anywhere (v6) 1935/tcp (v6) ALLOW Anywhere (v6) 5080/tcp (v6) ALLOW Anywhere (v6) 5443/tcp (v6) ALLOW Anywhere (v6) 5000:65000/udp (v6) ALLOW Anywhere (v6) root@server:~#
Port forwarding
You can forward port 80 and 443 to Ant Media Server, so you don’t have to use ports.
You can use following iptables commands
sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 5080 sudo iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 5443
To make it permanent, edit
vi /etc/ufw/before.rules
In the beginning of the file, find
*filter
Add above
*nat :PREROUTING ACCEPT [0:0] -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 5080 -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 5443 COMMIT
Restart ufw firewall
ufw disable ufw enable
See Ant Media Server