# Relay ports and ip

**URL:** <https://forum.cardano.org/t/relay-ports-and-ip/38680>\
**Category:** Stake Pool Security\
**Created:** [17 August 2020 13:49 UTC](https://forum.cardano.org/t/relay-ports-and-ip/38680 "2020-08-17T13:49:24Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![ADAfrog](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.cardano.org/adafrog/32/16303_2.png) [@ADAfrog](https://forum.cardano.org/u/ADAfrog)\
**Post date:** [17 August 2020 15:33 UTC](https://forum.cardano.org/t/relay-ports-and-ip/38680/2 "2020-08-17T15:33:05Z")

</div>

Hi Momo,

Open your relay node:

- to public outbound on all ports

- to public inbound just on relay port

> [@Securing a node on Linux?](https://forum.cardano.org/t/securing-a-node-on-linux/37928/2):
>
> Majority of operators are running on Ubuntu, using ufw firewall The ufw firewall rules I have offhand are as follows, and can be translated into iptables by referencing the port activity on relay nodes: ufw default deny incoming ufw default allow outgoing ufw limit proto tcp from any to any port [custom ssh port] ufw allow [relay port]/tcp on block producer (bp) node: ufw default deny incoming ufw default allow outgoing ufw limit proto tcp from any to any port [custom ssh port] sudo u…

---

_[View the full topic](https://forum.cardano.org/t/relay-ports-and-ip/38680)._