Port Overview
| Port | Protocol | Purpose |
|---|---|---|
| 5121 | UDP + TCP | Primary game port — client connections and gameplay |
| 5122 | TCP | Server browser communication |
| 512 | UDP | Master server registration |
| 5300 | UDP | Master server registration |
| 6500 | UDP | Master server registration (GameSpy) |
| 6667 | UDP | Master server registration |
| 27900 | UDP | Master server registration |
| 28900 | UDP | Master server registration |
For direct connect and LAN play: only port 5121 (UDP and TCP) is required.
For public listing in the server browser: open 5121, 5122 TCP, and all the UDP master server ports (512, 5300, 6500, 6667, 27900, 28900).
UFW (Ubuntu/Debian)
# Required for all servers
ufw allow 5121/udp
ufw allow 5121/tcp
# Required for public browser listing
ufw allow 5122/tcp
ufw allow 512/udp
ufw allow 5300/udp
ufw allow 6500/udp
ufw allow 6667/udp
ufw allow 27900/udp
ufw allow 28900/udp
ufw reload
Windows Firewall (PowerShell)
# Primary game port
New-NetFirewallRule -DisplayName "NWN:EE Game" -Direction Inbound -Protocol UDP -LocalPort 5121 -Action Allow
New-NetFirewallRule -DisplayName "NWN:EE Game TCP" -Direction Inbound -Protocol TCP -LocalPort 5121 -Action Allow
# Master server ports
New-NetFirewallRule -DisplayName "NWN:EE Master" -Direction Inbound -Protocol TCP -LocalPort 5122 -Action Allow
New-NetFirewallRule -DisplayName "NWN:EE Master UDP" -Direction Inbound -Protocol UDP -LocalPort 512,5300,6500,6667,27900,28900 -Action Allow
Changing the Default Port
Use the -port argument at startup to run on a different port:
nwserver.exe -module "MyModule" -port 5200
Update your firewall rules to match. The master server ports (5122, 512, etc.) are fixed and do not change with -port.
Router Port Forwarding
If the server is behind a NAT router, create port forwarding rules on the router pointing to the server's internal IP for each port listed above. The server must have a static internal IP address or a DHCP reservation to prevent forwarding rules from breaking after a lease renewal.