# Opening ports for relays

**URL:** <https://forum.cardano.org/t/opening-ports-for-relays/39789>\
**Category:** Stake Pool Security\
**Created:** [4 September 2020 04:35 UTC](https://forum.cardano.org/t/opening-ports-for-relays/39789 "2020-09-04T04:35:02Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![ADAfrog](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/adafrog/32/16303_2.png) [@ADAfrog](https://forum.cardano.org/u/ADAfrog)\
**Post date:** [4 September 2020 09:36 UTC](https://forum.cardano.org/t/opening-ports-for-relays/39789/2 "2020-09-04T09:36:45Z")

</div>

Hi Bob,

Yes, you need to open your relay ports to allow inbound connections, as these are important to ensure minted blocks take to the chain:

You can follow this post regarding setting up your firewall rules:

> [@Securing a node on Linux?](https://forum.cardano.org/t/securing-a-node-on-linux/37928/2):
>
> Majority of operators are running on Ubuntu, using ufw firewall The ufw firewall rules I have offhand are as follows, and can be translated into iptables by referencing the port activity on relay nodes: ufw default deny incoming ufw default allow outgoing ufw limit proto tcp from any to any port [custom ssh port] ufw allow [relay port]/tcp on block producer (bp) node: ufw default deny incoming ufw default allow outgoing ufw limit proto tcp from any to any port [custom ssh port] sudo u…

Your friend, FROG

---

_[View the full topic](https://forum.cardano.org/t/opening-ports-for-relays/39789)._