---
title: "Minecraft Port 25565 Not Working: Router and Firewall | ZCS"
description: "Port 25565 not working? Check router forwarding, firewall rules, DNS records and host settings to find why players cannot join your server."
url: "https://www.zcraftstudios.com/blog/minecraft-server-port-25565-not-working"
updated: "2026-10-20T07:22:11.764657+00:00"
source: "ZCraft Studios"
---

> Site index for AI agents: https://www.zcraftstudios.com/llms.txt (full reference: https://www.zcraftstudios.com/llms-full.txt). Every page is available as Markdown by adding `.md` to its URL or sending `Accept: text/markdown`.

1. [Home](https://www.zcraftstudios.com/)
2. [Blog](https://www.zcraftstudios.com/blog)
3. Minecraft Port 25565 Not Working: Router and Firewall

[ All posts](https://www.zcraftstudios.com/blog)

# Minecraft Port 25565 Not Working: Router and Firewall

ZCraft StudiosOct 15, 2026Updated Oct 20, 2026

Port 25565 not working? Check router forwarding, firewall rules, DNS records and host settings to find why players cannot join your server.

## In this guide

- [Diagnose the network path](#diagnose-the-network-path)
- [TCP versus UDP](#tcp-versus-udp)
- [Check server.properties](#check-serverproperties)
- [Home hosting: LAN is not public internet](#home-hosting-lan-is-not-public-internet)
- [Managed hosts: don't assume 25565](#managed-hosts-dont-assume-25565)
- [What the error tells you](#what-the-error-tells-you)
- [Keep the server secure](#keep-the-server-secure)
- [How to verify](#how-to-verify)
- [Further reading](#further-reading)
- [Test whether the port is listening](#test-whether-the-port-is-listening)
- [Frequently asked questions](#frequently-asked-questions)

## Minecraft Server Port 25565 Not Working

Port **25565** is commonly used by Minecraft Java Edition servers, but it is not guaranteed to be the port assigned to your server. A game server listening on one port while players connect to another cannot accept the connection.

## Diagnose the network path

```
Minecraft client
      |
      v
domain or public IP
      |
      v
host/provider firewall
      |
      v
router/NAT (home hosting)
      |
      v
Minecraft listener
```

Each step must point to the correct next destination. If you're using a hosting panel, its allocation is the source of truth.

## TCP versus UDP

Minecraft **Java Edition** gameplay commonly uses TCP. Minecraft **Bedrock Edition** primarily uses UDP, with different default ports. Cross-play products such as Geyser may need both a Java listener and a separate Bedrock UDP endpoint.

Do not open every port in the firewall to make cross-play work. Open only the documented listeners.

## Check server.properties

```
server-port=25565
server-ip=
```

Use your actual allocation if it differs. In many dedicated-hosting setups, blank `server-ip` is correct. Binding to an incorrect address can prevent server startup.

## Home hosting: LAN is not public internet

A private address such as `192.168.x.x` is intended for local network use. Remote friends usually cannot connect to it directly. A home router may need a correctly configured inbound mapping, but the network may also use carrier-grade NAT or provider filtering.

If you do not control the router or account, consult your network administrator. A conventional host with a public endpoint may be simpler.

## Managed hosts: don't assume 25565

Shared hosting commonly allocates non-default ports. Copy the connection address and port provided by the host. A domain may use an SRV record to point clients toward that allocation; check DNS propagation and record accuracy if the domain behaves differently from a direct address.

## What the error tells you

| Error | Initial direction |

| --- | --- |

| Connection refused | Listener, address, port or rejected connection |

| Connection timed out | Routing, firewall or unavailable path |

| Unknown host | DNS name or resolver |

| Failed to verify username | Authentication rather than port |

| Outdated client/server | Version compatibility rather than port |

See [connection refused troubleshooting](https://www.zcraftstudios.com/blog/minecraft-server-connection-refused-fix) for a step-by-step decision tree.

## Keep the server secure

A firewall change should not reveal RCON, databases, hosting dashboards or internal proxy backends. Do not copy firewall rules from unknown guides without understanding which application each port serves.

When changing network access on a remotely administered machine, protect your administrative access and preserve a recovery route.

## How to verify

1. Confirm the game process completed startup.
2. Verify it listens on the assigned TCP port.
3. Connect from the host and an appropriate local test client.
4. Connect from an authorized external network.
5. Verify the custom domain, if used, resolves to the intended endpoint.

**Conclusion:** The goal is not “open 25565 everywhere.” It is “make the _actual_ game listener reachable through the intended public address without exposing anything else.”

## Further reading

- [Firewall basics](https://www.zcraftstudios.com/blog/minecraft-server-firewall-hardening)
- [Geyser and Floodgate setup](https://www.zcraftstudios.com/blog/geyser-floodgate-bedrock-crossplay-setup)
- [Choosing a host](https://www.zcraftstudios.com/blog/choosing-minecraft-server-host)

## Test whether the port is listening

Run these on the machine hosting the server.

Linux:

```
ss -tlnp | grep 25565
sudo ufw status
```

Windows (PowerShell):

```
netstat -ano | findstr 25565
Test-NetConnection -ComputerName localhost -Port 25565
```

If nothing is listening, the server is not running, crashed, or is bound to a different port. If it listens locally but not from outside, the problem is the firewall, router, or host. Check [Connection Refused: Find the Real Cause](https://www.zcraftstudios.com/blog/minecraft-server-connection-refused-fix) and [Firewall Hardening](https://www.zcraftstudios.com/blog/minecraft-server-firewall-hardening).

## Frequently asked questions

**Do I need to forward 25565 on a VPS?** No router forwarding, but you must allow the port in the host firewall and any cloud firewall.

**Can I change the port?** Yes, in `server.properties`. If you use a custom port, add an SRV record or tell players the port. See [Custom Domain and SRV Records](https://www.zcraftstudios.com/blog/minecraft-server-dns-srv-record-guide).

**Does Bedrock use the same port?** Bedrock uses UDP, commonly 19132\. See [Geyser and Floodgate](https://www.zcraftstudios.com/blog/geyser-floodgate-bedrock-crossplay-setup).

**Why can friends join on LAN but not online?** LAN uses your private address. Public access needs forwarding and your public IP or domain.

## Continue reading

- [Minecraft Whitelist Not Working? Fixes for Access Errors](https://www.zcraftstudios.com/blog/minecraft-server-whitelist-not-working)
- [Minecraft Plugin Not Loading? Fix Red Plugins Fast](https://www.zcraftstudios.com/blog/minecraft-plugin-not-loading-fix)
- [Hardening a Minecraft Server With a Firewall](https://www.zcraftstudios.com/blog/minecraft-server-firewall-hardening)

[ Previous guide Build a Minecraft Staging Server Before Updates](https://www.zcraftstudios.com/blog/minecraft-server-staging-environment-guide)[ Next guide Read Minecraft Crash Reports and Find the Bad Plugin](https://www.zcraftstudios.com/blog/minecraft-server-crash-report-guide)