Как в nordvpn порты открыть
Перейти к содержимому

Как в nordvpn порты открыть

  • автор:

Как открыть заблокированные порты?

Открытый порт позволяет принимать подключения на свой компьютер через IP-адрес нашего VPN. Например, чтобы запустить на компьютере игровой или веб-сервер, а другие смогли к нему подключиться через интернет.

  1. Для начала вам необходимо подключиться к нашему VPN. Для этого воспользуйтесь платной подпиской или получите тестовый код на один день.
  2. Скачайте и установите приложения для подключения. Например, для Windows или macOS.
  3. Подключитесь к желаемому серверу VPN и проверьте, изменился ли ваш IP-адрес. Если подключение прошло успешно и IP-адрес изменился, переходим к основному этапу.
  1. Откройте панель http://10.117.0.1 и авторизуйтесь в ней своим кодом, который вы вводили в приложении для подключения к VPN.
  2. Перейдите во вкладку Port forwarding.
  3. Впишите необходимый порт в поле port и нажмите кнопку Add/replace .
  4. Порты добавляются по одному. Если порт не занят другим пользователем, он успешно откроется для вас, и правило добавится в таблицу ниже. Открытость порта следует проверять с другого компьютера, не подключенного к нашему VPN.

Если порт уже занят другим пользователем, вы увидите ошибку This port is already used by another user. В этом случае выберите другой порт либо другой сервер. Возможно, требуемый вам порт будет еще свободен там.

В случае проблем с открытием порта перепроверьте себя по этой инструкции в картинках.

Обратите внимание. На общих с другими пользователями IP-адресах, которые доступны всем по умолчанию на VPN-серверах, можно открыть порты только номером выше 1000.

На выделенных личных IP-адресах можно открыть любой порт, включая порты номером ниже 1000. Услуга аренды таких адресов доступна всем нашим клиентам с подписками сроком от полугода. Для запроса стоимости и подключения напишите нам.

Port forwarding

Port forwarding routes connections through the firewall that Proton VPN uses to protect our customers. It’s a feature that is mainly useful to people who download and share files using P2P protocols such as BitTorrent, although it can also improve performance for online gamers.

Port forwarding is currently available in our Windows and Linux apps for everyone with a paid Proton VPN plan. If you have a free plan, you can upgrade to access it.

It is also possible to manually configure port forwarding (including on macOS).

Note that port forwarding is only permitted on our special P2P servers. These are marked with a double-arrow icon.

P2P servers are marked with a double-arrow icon

  • How to enable Port Forwarding on the Windows app
  • How to enable Port Forwarding using the Linux app
  • How to enable port forwarding on qBittorrent
  • How to enable port forwarding on Vuze
  • How to enable port forwarding on uTorrent (Classic)

How to enable Port Forwarding on the Windows app

1. Open the app and go to SettingsAdvanced tab. Toggle the Port Forwarding switch on.

How to enable port forwarding in the Windows app

From here, you can also enable or disable Port forwarding notifications and the Port forwarding shortcut (see below).

2. When port forwarding is activated, the VPN app sends a request to the VPN server to open a random port that will forward traffic from the internet to the app. The active port number used for this is shown in the information panel at the top of the main app window when you connect to one of our P2P VPN servers.

See active port number

You’ll need this number to configure port forwarding on third-party software such as your BitTorrent client. Please note that, in most cases, the active port number will change when you disconnect and reconnect the VPN.

This will probably mean you will need to reconfigure your VPN client for each VPN session, but doing so is very quick and easy (see below), and the active port is available to use immediately.

Port forwarding notifications

When this setting is enabled, you will be notified when the active port number changes.

Port forwarding shortcut

Enabling this allows you to access the port forwarding settings from the Quick Settings bar on the app’s main screen.

The port forwarding shortcut

How to enable Port Forwarding using the Linux app

Currently, port forwarding on Linux is only partially automated and requires some manual setup.

1. Open the app, go to Settings, and toggle the Port forwarding switch on.

2. Connect to a P2P server

3. Create a UDP port mapping on UDP, which is needed for port forwarding. Enter:

natpmpc -a 0 0 udp 60

In the example below, port 43935 has been allocated for this.

Create a UDP port mapping on UDP

4. Create a port mapping on TCP.

natpmpc -a 0 0 tcp 60

In the example below, port 43935 has been allocated for this.

Create a port mapping on TCP

5. Finally, loop natpmpc so that it doesn’t expire. Enter:

while true ; do date ; natpmpc -a 0 0 udp 60 && natpmpc -a 0 0 tcp 60 || < echo -e "ERROR with natpmpc command \a" ; break ; >; sleep 45 ; done

Loop natmpmpc

Port forwarding is now activated. Note that closing your terminal window will terminate the loop process. You’ll need to re-run this loop script each time you want to start a new port forwarding session, or the port will only stay open for 60 seconds.

How to enable port forwarding in your BitTorrent client

Port forwarding will work in any BitTorrent app. We provide instructions for a few popular Windows torrent apps below, but the steps are similar for all such software. Just remember to disable any UPnP and NAT-PMP settings in your client.

The reason for this is that UPnP and NAT-PMP settings can conflict with settings in the Proton VPN app.

How to enable port forwarding on qBittorrent

1. Enable port forwarding in the Proton VPN app (see above) and launch qBittorrent.

2. Go to ToolsOptionsConnection and disable Use UPnP / NAT-PMP port forwarding from my router (it is enabled by default)

3. In the Port used for incoming connections field, enter the active port number shown in the Proton VPN app.

Eenable port forwarding in qBittorrent

Click OK when you’re done.

How to enable port forwarding on Vuze

The screenshots below show Vuze in Beginner Mode, but the steps are identical for all modes.

1. Enable port forwarding in the Proton VPN app (see above) and launch Vuze.

2. Go to ToolsOptionsPluginsUPnP and uncheck (disable) Enable UPnP.

Disable uPnP in Vuze

3. While still on the Options page, go to Connection and enter the active port number shown in the Proton VPN app.

Set listen port in Vuze

Click Save when you’re done.

How to enable port forwarding on uTorrent (Classic)

1. Enable port forwarding in the Proton VPN app (see above) and launch uTorrent.

2. Go to OptionsPreferencesConnection and uncheck (disable) both Enable UPnP port mapping and Enable NAT-PMP port mapping.

Disable UPnP and NAT_PMP in uTorrent

3. In the Port used for incoming connections field, enter the active port number shown in the Proton VPN app.

Set listening port in uTorrent

Click Apply when you’re done.

Opening a port carries a small risk. See Port forwarding security considerations for more details.

Как в nordvpn порты открыть

DISCLAIMER: It is your responsibility to ensure that only authorized parties can access the IP and Port that you have set up. If you use port forwarding without any authentication on the local device, your device can be accessed by anyone on the Internet via a simple port scan. Windscribe does not take responsibility for any loss or damage incurred by having insufficient or no authentication on your internal service.

To set up port forwarding, you will first need to purchase a Static or Residential IP from our website.
Once you’ve done that, there are two ways to configure port forwarding, either using a Windscribe client or through a manual configuration.

Using a Windscribe Client

Step 1
Once you’ve purchased the static IP, log into the Windscribe app and check that you see a new region for Static IPs:

Windows & Mac — Static IPs region

Linux — Run the locations command to see the static servers

Android — 4th tab contains static IP servers


iOS — Static IPs region

Step 2
Open a browser, log into the Windscribe website and go to the Port Forwarding tab on the My Account page. You will see the same static IP servers as you saw in the app(s).

Step 3
Press the + button to the right of the server you intend to connect with to get this form:

  • Service Name — This is simply a label for the configuration, set it to whatever you’d like.
  • Protocol (TCP/UDP) — The Protocol used for your port forwarding. Leave it as TCP+UDP if you’re unsure.
  • Device — All the devices that you can port forward to. Once you’ve logged into Windscribe on a device, it will appear in this list. You can edit device names on the previous screen.
  • External Port — Public-facing VPN server port that you or anyone else will connect to. Pick any port between 10002 and 45000 or press the randomize button to have it choose one for you.
  • Internal Port — The local port the application/service listens on. You should be able to access it via http://localhost:port

Fill in the details with the settings you want to use and press Add.

Step 4
Ensure that the application/service port works without the VPN. Visit http://localhost:port in your browser and make sure the service actually works.

After testing without the VPN, open the Windscribe app and connect to the Static IP server you configured above. You may need to restart the service after connecting, but it shouldn’t be necessary in most cases.

At this point, if everything is set up correctly and running, you should be able to access your device through the VPN server from any other device on the internet. Here is what a completed port forward will look like. The red arrow points to the external port which you can click for your browser to connect to the newly configured forwarded port.

This link will not work on the device running Windscribe, as it creates a routing loop. Test from a different computer/phone.

Keep in mind, this will only work if there is a web server running on the other end, such as the case with Plex, NAS, etc.

Using a Manual Setup

Step 1
Open a browser, log into the Windscribe website and go to the Port Forwarding tab on the My Account page. You will see all of the static IP servers that you purchased here.

Step 2
Press the + button to the right of the server you intend to connect with to get this form:

  • Service Name — This is simply a label for the configuration, set it to whatever you’d like.
  • Protocol (TCP/UDP) — The Protocol used for your port forwarding. Leave it as TCP+UDP if you’re unsure.
  • Device Name — Name the device with something you will remember (Plex Server, My NAS, Raspberry Pi, etc)
  • External Port — Public-facing VPN server port that you or anyone else will connect to. Pick any port between 10002 and 45000 or press the randomize button to have it choose one for you.
  • Internal Port — The local port the application/service listens on. You should be able to access it via http://localhost:port

Fill in the details with the settings you want to use and press Add.

Step 3
Once you add the Port Forward, you will receive the required credentials and OpenVPN configuration file. Use these details in the OpenVPN settings on your device. (The config uses UDP on port 443 but if you want to change that, you can simply edit the .ovpn file in a text editor.)

If you are following one of our setup guides to configure the OpenVPN connection, these are the credentials and .ovpn configs you want to use. You MUST use these details for port forwarding to work on that specific device.

Step 4
Ensure that the application/service port works without the VPN. Visit http://localhost:port in your browser and make sure everything is getting connected.

Once you’ve tested the port without the VPN, connect to the Windscribe Static IP server you configured the port forwarding on.

At this point, if everything is set up correctly and running, you should be able to access your device through the VPN server from any other device on the internet. Here is what a completed port forward will look like. The red arrow points to the external port which you can click for your browser to connect to the newly configured forwarded port.

Keep in mind, this will only work if there is a web server running on the other end, such as the case with Plex, NAS, etc.

What is port forwarding and does it work with a VPN

Port forwarding explained via the visual metaphor of sea ports

Port forwarding allows incoming traffic to bypass your NAT (Network Address Translation) firewall and overcome some other security measures. It is commonly used to access your home computer remotely or to allow other users to connect to your public server .

That said, it also makes you more vulnerable to cyberattacks and other online threats , which is why it’s blocked by many VPN (Virtual Private Network) service providers.

Follow along to learn more about the benefits and risks associated with VPN port forwarding.

Table of contents

How port forwarding works

Port forwarding works by telling the router’s NAT system to let connections to specific ports pass through . Imagine the NAT as a post-forwarding service that has to open the package before passing it along. Port forwarding tells it where the package needs to go without being opened . Read on if you want an explanation of the more technical parts!

What (and why) are ports?

In more technical terms, ports are addresses a device assigns to services and apps that need input from the outside (usually the internet). Due to mathematical reasons, port numbers range from 0 to 65,535 . The first 1024 are historically assigned to the most common services.

For example, POP3, the protocol an email client uses to retrieve mail from the server, uses port 110.

And when the time comes for the internet data to be sent and received, the port number is added to the device’s IP (Internet Protocol) address (which is like the device’s home address, but on the internet), thus allowing the various processes involved to know which data package goes where.

If your IP was 321.45.678.90 and you used a POP3 email client, then data addressed to the email client would go to 321.45.678.90:110.

But then you need to deal with the NAT.

What does the NAT do?

The Network Address Translation exists because there is a scarcity of IP addresses online. Only your router’s IP address is unique – it’s called “public IP” as it’s the one online services see. The connected devices – phones, laptops, smart washing machines – get non-unique ones to communicate with the router only – they’re called “private IPs” as nobody on the internet can see them.

The NAT collects data packages from connected devices, writes down their addresses, slaps its own unique address on top, and forwards it online. However, anyone interacting with the router only sees its IP address, while the IPs of the devices connected to the router remain invisible. It becomes an issue when you want to connect to such devices outside your home network.

What does this have to do with port forwarding?

Port forwarding tells the NAT to expect and allow outside connections for a specific IP and port combination . This makes port forwarding vital for gaming – specifically, hosting servers.

Want to connect to your Internet of Things cooker while away on holiday? Need to access your home computer while at work? Have a baby cam and want to use it while away? All of that is made possible by port forwarding.

Can you port forward with a VPN?

Yes, you can. Although port forwarding might not be necessary for most VPN users, there are reasons why it might come in useful.

Accessing your home network

If you set up a virtual private network at your home, you may want to access it from a remote location. That’s when you need a VPN that forwards those ports.

Creating secure servers and home networks

VPN port forwarding is key to creating secure servers and home networks , but this only applies to the most advanced users .

Having the above in mind, it’s probably clear why most users don’t need VPN port forwarding – if you have not run into it in your daily life, installing a VPN is unlikely to change that.

If the need arises – for example, you decide to host your website on a server at home – you can set up port forwarding manually , as discussed later in this article. However, it can also be done automatically, making the life of the everyday user easier. It’s accomplished via the Universal Plug and Play .

Automatic port forwarding, a.k.a. the Universal Plug and Play

The UPnP – Universal Plug and Play – is a set of protocols (read: communication rules) that make automated port forwarding happen. It allows devices on the same network to discover each other, open ports, and work together seamlessly.

The magic of the “zero-configuration networking” – creating networks that don’t require a human to set up – allows any UPnP compatible device from any manufacturer to join a network, get an IP address, make its presence known, and learn about other devices .

This is a very convenient capability for home and small office networks. However, UPnP isn’t welcome in a business environment since a large number of devices, all shouting about their presence and capabilities on the local network, would take up a lot of traffic.

How widespread is UPnP? Well, some research into the subject found that 76% of routers are operating with UPnP enabled . Media devices were second with 27%. Chances are that you have a device working with it as well.

However, UPnP isn’t the only way to handle automatic port forwarding. A more secure – if limited – solution is port triggering .

Port forwarding vs. port triggering

Port forwarding and port triggering are similar concepts, though different in function . With port forwarding, the port is always open . That means devices outside the network are free to connect whenever.

With port triggering, a port is opened when a local device within the network requests something from outside the network . The port stays open long enough for the answer to come in and closes after some time. It doesn’t open when requested by incoming connections , making it nearly impossible for devices outside the network to open the ports.

That’s why port triggering is the inferior option if you’re looking for the ability to access a webcam or home desktop computer remotely.

Disclaimer: Surfshark is not responsible for security risks arising from using port forwarding.

Disadvantages of port forwarding

As mentioned before, not all VPN providers offer port forwarding functionality, and there are a few good cybersecurity reasons for that:

Gives hackers a way in

Port forwarding can let hackers compromise your security. All they have to do is learn your ports and IP, and they can breeze past your firewall.

Bypasses VPN security

Imagine you got a VPN to secure your connection. Your data is encrypted, and your ISP is blinded – nobody knows where you’re connecting from. However, if you would decide to forward a port, which is possible with some VPNs, you would open a path into your systems that will bypass even the additional security layer granted by your VPN software.

Creates privacy breaches

Regular port-forwarding may be dangerous, but UPnP poses even more security risks. The fact that the process is automated makes it a lot easier for hackers and other malicious actors to exploit. In January 2019, a hacker group used vulnerabilities in UPnP routers to make Chromecasts, smart TVs, and Google Homes play videos urging users to subscribe to PewDiePew on YouTube.

Makes your devices a hub for hackers

This case is more annoying than harmful, but other UPnP exploits allowed hackers to use exposed devices in botnets , spam campaigns, and distributed-denial-of-service attacks. And that is aside from their ability to install malware, steal data (like logins and photos) and access your devices (like webcams).

Get a VPN and antivirus in one

How to set up port forwarding on your router – Windows 10

If you are still determined to have your ports forwarded, you can do it manually. It’s less straightforward than doing it with Universal Plug and Play (that’s why it exists), but in the end, the process isn’t too hard.

  1. First, we need to make sure your device is using a static IP address. That’s why you should start by entering PowerShell in the search bar.
  2. Right-click PowerShell and choose Run as Administrator . A window should open.
  1. Type-in Get-NetIPConfiguration and press Enter .
  1. Note down the values next to:
    • InterfaceIndex
    • IPv4Address
    • IPv4DefaultGateway
    • DNSServer
  1. Now type in -InterfaceIndex [the value of InterfaceIndex in Step #4] -IPAddress [the value of InterfaceIndex in Step #4] -PrefixLength 24 -DefaultGateway [the value of IPv4DefaultGateway in Step #4 ]. Note that you don’t need to enter the brackets, quotation marks, or the period – just the numbers.
  1. Press Enter . This will set the static IP address.
  2. Now type in Set-DnsClientServerAddress -InterfaceIndex [the value of InterfaceIndex in Step #4] -ServerAddresses [the value of DNSServer in Step #4] . Note that you don’t need to enter the brackets, quotation marks, or the period – just the numbers. Press Enter . This will set the static IP address.
  1. Press Enter . This will set the DNS server.

The rest is a general outline to follow. The specifics of the act depend on the router in question:

  1. Login to your router. You usually do it by entering the Router address in your browser.
  2. Before switching from DHCP to Manual , write down the IPv4 address.
  3. Locate the tab with port forwarding – the location and the name will depend on the router, so it may take you some time to find.
  4. Input your chosen entrance and exit ports , and the chosen protocol. A safe bet is going over 1,000 and under 65,000 – here’s a list of ports used by some of the most common processes .
  5. Enter either your static IP address or the local IP address of the device you desire to open port forwarding for.
  6. Click Enable or whatever similar button exists in your router’s user interface.

You have now enabled port forwarding on your router.

How to set up port forwarding on your router – Mac OS

Want to set up port forwarding on Mac OS? Here’s how you can do it.

    1. Obtain a static IP address by following the instructions on the Apple website.
    1. Before switching from DHCP to Manual , write down the IPv4 address .
    1. Switch to Manual .
    2. Write in the IPv4 address in the line which now reads 0.0.0.0,
    3. Write down the router address .

    The rest is a general outline to follow. The specifics of the act depend on the router in question:

    1. Login to your router. You usually do it by entering the Router address in your browser.
    2. Before switching from “DHCP” to “Manual,” write down the IPv4 address.
    3. Locate the tab with port forwarding – the location and the name will depend on the router, so it may take you some time to find.
    4. Input your chosen entrance and exit ports, and the chosen protocol. A safe bet is going over 1,000 and under 65,000 – here’s a list of ports used by some of the most common processes.
    5. Enter either your static IP address or the local IP address of the device you desire to open port forwarding for.
    6. Click “Enable” or whatever similar button exists in your router’s user interface.

    You have now enabled port forwarding on your router.

    Setting up port forwarding for your VPN server

    If you have a VPN server at home and want to set up port forwarding to access it remotely via the internet, you can follow these instructions. Remember: specific details depend heavily on your router:

    1. Open your router’s user interface. You usually do it by entering its IP address into your browser ;
    2. Find the Port Forwarding screen/tab . You may need to click around;
    3. Depending on the type of VPN protocol you’re using, enter this:
      1. PPTP : set the Local Port to 1723 and Protocol to TCP for the PPTP itself, and Port 47 and Protocol “Other” for the GRE tunnel;
      2. IPSec : for the IPSec VPN tunnel, set the Local Port to 500 and Protocol to UDP, and Port 4500 with UDP Protocol for the IPSec tunnel;
      3. OpenVPN : Local Port set to 1194 and Protocol to UDP;
      4. IKEv2 : this needs the Port to be set to 500 and Protocol to UDP;
      5. WireGuard : set the Port 51820 and Protocol to UDP.

      Disclaimer: Surfshark is not responsible for security risks arising out of using port forwarding.

      VPN clients and VPN port forwarding

      It is possible for VPNs to support the port forwarding functionality. Some VPNs out there allow full-on port forwarding. Others allow only some of the most popular ports through. In either case, it’s hard to know upfront, so if port forwarding is important to you, check the VPN’s website, contact its customer support, or read the FAQs to see if it does.

      Surfshark VPN does not support port forwarding . This decision was made with your security in mind. Opening a port means creating a hole in your cybersecurity that would allow access to your devices.

      Outside of that, there’s a possibility of other vulnerabilities being discovered. For example, “Port Fail” was unveiled in 2015 . It was a side effect of a VPN port-forwarding which could leak the user’s real IP address online . As a VPN is meant to protect your privacy, IP address included, this wasn’t a great outcome. Not supporting port forwarding prevents Surfshark from succumbing to such exploits in the future.

      Yes, disabling port forwarding will inconvenience a few users. However, increased security is worth the tradeoff .

      In conclusion: don’t forward that port

      Port forwarding exists to make internet communication smoother and to let devices reach each other without firewall interruptions. However, opening the gates for unchecked connections from external devices poses some risks, especially if the process is automated with UPnP. It is for this reason that leading VPN providers, including Surfshark, have restricted port forwarding on their services. After all, the security of our user data is the most important goal.

      Get a VPN for better security

      FAQ

      Is the VPN port forwarding safe?

      Port forwarding is never safe as it opens an insecure channel into your device for outside connections to access freely.

      Can you get hacked through port forwarding?

      Yes, as port forwarding leaves a gaping hole in your cyber defenses.

      Will port forwarding ruin my internet?

      Port forwarding will not ruin your internet connection unless you mess something up when enabling it. It can, however, make you vulnerable to hacking attempts.

      Martynas Klimas

      Martynas Klimas
      Knows as much about VPN as it is healthy for someone who isn’t a VPN developer.

      Rate and share this article

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *