Every port number here was read from the source: the configuration files and source code of the programs that use them, not from forum posts. Where a number is quoted from somewhere else, it says so.
A hotspot uses two entirely different sets of ports, and they are constantly mistaken for each other.
127.0.0.1. They never touch your network. They never need a firewall rule, and forwarding
them achieves nothing.
Inside a hotspot, MMDVMHost handles the radio side and a separate gateway program handles the internet side for each mode. The two halves talk to each other over loopback. So a single DMR contact crosses two ports on the way out: one internal, one external. People reading a configuration file and forwarding what they find there are usually forwarding the wrong one.
These are the destination ports your gateway connects to. This is the set that matters when something will not connect.
| Mode | Protocol / network | Port | Notes |
|---|---|---|---|
| D-STAR | DPlus (REF reflectors) | UDP 20001 | The American REF network |
| DExtra (XRF reflectors) | UDP 30001 | The open alternative to REF | |
| DCS / XLX | UDP 30051 | XLX reflectors accept D-STAR here | |
| CCS7 | UDP 30062 | Callsign routing by seven-digit ID | |
| G2 gateway, voice | UDP 40000 | Also the Icom Terminal / Access Point port | |
| G2 gateway, DD data | UDP 40001 | The 23 cm data mode | |
| DMR | MMDVM / Homebrew to XLX | UDP 62030 | The DMR side of an XLX or URF reflector |
| MMDVM / Homebrew to BrandMeister, TGIF | UDP 62031 | The usual master port for amateur DMR networks | |
| DMR+ | UDP 55555 | DMRplus and the networks that follow it | |
| DMR+ DMO mode | UDP 8880 | Direct mode operation into a reflector | |
| OpenBridge | UDP 62035 | Network-to-network, not for hotspots — see the sourcing note | |
| System Fusion | YSFReflector | UDP 42000 | The open Fusion reflector system |
| FCS | UDP 42001 | The FCS room servers | |
| P25 | P25Reflector | UDP 41000 | |
| NXDN | NXDNReflector | UDP 41400 | |
| M17 | mrefd reflectors | UDP 17000 | Also the port used between interlinked M17 reflectors |
| POCSAG | DAPNET | — | Handled by DAPNETGateway; the port is set by the DAPNET server you use |
These are the defaults in G4KLX's own MMDVM.ini. Every one binds to
127.0.0.1. None of them should ever be forwarded. They are listed so you can
recognise them and leave them alone.
| Mode | MMDVMHost side | Gateway side | Gateway program |
|---|---|---|---|
| D-STAR | 20011 | 20010 | ircDDBGateway |
| DMR | 62032 | 62031 | DMRGateway |
| System Fusion | 3200 | 4200 | YSFGateway or DGIdGateway |
| P25 | 32010 | 42020 | P25Gateway |
| NXDN | 14021 | 14020 | NXDNGateway |
| POCSAG | 3800 | 4800 | DAPNETGateway |
| FM | 3810 | 4810 | FM gateway |
| Purpose | Port | Notes |
|---|---|---|
| Fusion parrot | UDP 42012 | Local echo service |
| YSF to DMR / NXDN / P25 cross-mode | UDP 42013 / 42014 / 42015 | Set in YSFGateway |
| P25 parrot | UDP 42011 | |
| NXDN parrot | UDP 42021 | |
| Network modem | UDP 3334 / 3335 | Only when the modem is reached over the network rather than by serial |
| Transparent data | UDP 40094 / 40095 | |
| MQTT | TCP 1883 | Status messaging between components |
| GPSD | TCP 2947 | Where an attached GPS receiver is read |
A reflector is the far end, so it needs ports open inbound. This list is from the URF reflector documentation, which supports the widest range of protocols and therefore the longest list. You only open what you have enabled.
| Port | What it carries |
|---|---|
| TCP 80, 443 | The reflector dashboard |
| UDP 8880 | DMR+ DMO mode |
| UDP 10002 | BrandMeister connection |
| UDP 10017 | URF-to-URF interlinking |
| TCP 10100 | Transcoder, where one is fitted |
| UDP 12345, 12346 | Icom G3 Terminal presence and request |
| UDP 17000 | M17 |
| UDP 20001 | DPlus |
| UDP 30001 | DExtra |
| UDP 30051 | DCS |
| UDP 32000 | USRP — the AllStar connection |
| UDP 40000 | Icom G3 Terminal |
| UDP 41000 | P25 |
| UDP 41400 | NXDN |
| UDP 42000 | YSF |
| UDP 62030 | MMDVM / DMR |
These are not digital voice, but they are what digital voice bridges to, and their ports turn up in the same firewall conversations.
| System | Port | Notes |
|---|---|---|
| AllStarLink | UDP 4569 | IAX2, the protocol AllStar runs on. The AllStarLink manual gives the working range as 4560–4580 |
| UDP 1667 | VOTER. The manual notes 667 may be needed for legacy reasons | |
| EchoLink | UDP 5198, 5199 | Voice and control |
| TCP 5200 | The directory server | |
| IRLP | UDP 2074–2093 | Audio, bi-directional |
| TCP 15425, 15426, 15427 | Control and update | |
| TCP 22 | SSH, needed only for remote admin help | |
| USRP | UDP 32000 | The plain-audio format used to bridge AllStar to a digital reflector. Both ends are configurable |
| APRS-IS | TCP 14580 | The standard filtered-feed port |
This is the part that saves the most time, and it is the opposite of what a lot of guidance assumes.
A hotspot initiates its connections. It reaches out to a master or a reflector, and the replies come back on the connection it opened. An ordinary router allows that without being told, because it is the same thing your web browser does. Nothing needs forwarding for a hotspot to work normally.
Port forwarding becomes necessary only when something outside has to start the conversation:
The mode ports, the loopback ports and the D-STAR protocol numbers were read this session from the
projects themselves — the shipped MMDVM.ini, DMRGateway.ini,
YSFGateway.ini, P25Gateway.ini and NXDNGateway.ini, and the
DStarDefines.h constants in ircDDBGateway. The reflector list is from the URF reflector's
own documentation and configuration. M17's port is from mrefd's source and README. EchoLink's ports
were confirmed against the SVXLink implementation, which is an independent codebase. IRLP's are from
the IRLP FAQ, and AllStar's from the AllStarLink manual.
Ports are configurable in nearly every one of these programs. What is listed here is the default that the software ships with, which is what a network expects unless you have deliberately changed it.
Return to n6jet.com — 73 de N6JET
Sources: g4klx/MMDVMHost · g4klx/DMRGateway · g4klx/YSFClients · g4klx/P25Clients · g4klx/NXDNClients · g4klx/ircDDBGateway · n7tae/urfd · nostar/mrefd · sm0svx/svxlink · AllStarLink Manual — Managing the Firewall · IRLP FAQ · Handheld and Hotspot Troubleshooting