Ant Media Server Ubuntu firewall configuration

To enable firewal for Ant Media Server on Ubnuntu server, use following rules

ufw allow ssh
ufw allow http
ufw allow https
ufw allow 1935/tcp
ufw allow 5080/tcp
ufw allow 5443/tcp
ufw allow 5000:65000/udp
enable ufw

After enabling, you will have following status

root@server:~# ufw status
Status: active

To                         Action      From
--                         ------      ----
22/tcp                     ALLOW       Anywhere
80/tcp                     ALLOW       Anywhere
443/tcp                    ALLOW       Anywhere
1935/tcp                   ALLOW       Anywhere
5080/tcp                   ALLOW       Anywhere
5443/tcp                   ALLOW       Anywhere
5000:65000/udp             ALLOW       Anywhere
22/tcp (v6)                ALLOW       Anywhere (v6)
80/tcp (v6)                ALLOW       Anywhere (v6)
443/tcp (v6)               ALLOW       Anywhere (v6)
1935/tcp (v6)              ALLOW       Anywhere (v6)
5080/tcp (v6)              ALLOW       Anywhere (v6)
5443/tcp (v6)              ALLOW       Anywhere (v6)
5000:65000/udp (v6)        ALLOW       Anywhere (v6)

root@server:~#

Port forwarding

You can forward port 80 and 443 to Ant Media Server, so you don’t have to use ports.

You can use following iptables commands

sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 5080
sudo iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 5443

To make it permanent, edit

vi /etc/ufw/before.rules

In the beginning of the file, find

*filter

Add above

*nat
:PREROUTING ACCEPT [0:0]
-A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 5080
-A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 5443
COMMIT

Restart ufw firewall