Outbound Ports and IPs for servers are randomly changed at every server restart

The Aternos forums are now deprecated

Learn more about this change here.

For help regarding Aternos, we recommend you to visit our support center.

  • You use random IPs and outbound ports for connections to servers that changes at every restart. This prevents setting proper outbound firewall rules so we can connect.


    I read in a thread here Port help that your "Engineer" Roman said blocking outbound ports is nonsense. That is complete garbage.


    Blocking outbound ports is standard practice in the business world, and should be in anyone's home who has any security sense. Why? It is key to prevent possible compromise such as many of the file encrypting viruses. Many viruses will attempt to connect outbound on various ports. Forward proxies with A/V scanning and default deny blocking outbound ports is how you prevent getting 99% of viruses when browsing the internet.


    However, Aternos has no set IP ranges and no set outbound port ranges, at least that anyone has provided, so I cannot setup rules to allow connection to Aternos servers in my home network. This needs to be addressed by someone not lacking in common security sense.

    Edited 2 times, last by kyferez: typo ().

    • Official Post

    However, Aternos has no set IP ranges and no set outbound port ranges, at least that anyone has provided, so I cannot setup rules to allow connection to Aternos servers in my home network.

    We can't and won't provide our IP ranges.

  • What about using a standard range of ports? Isn't that something that can be done?


    Alternatively what about allowing a user to select a port range for use on their server?


    What about allowing a server to keep it's IP upon reboot instead of always changing it?


    Saying you can't provide the range - that make sense if you are using a provider like Microsoft that always gives dynamic IPs. But if that's not the case, saying you won't provide your IP range is silly because you provide your IP every time you update the server's location - even though the DNS address doesn't update, I can see in my firewall the new address. So I could figure out your range eventually - it would just be a bit of work.

    Edited 3 times, last by kyferez ().

    • Official Post

    What about using a standard range of ports? Isn't that something that can be done?

    If that would be possible we would do that.



    What about allowing a server to keep it's IP upon reboot instead of always changing it? Isn't that something that can be done?

    That's already the case.

    We only change IP if the server is started after it was offline or if it is restarted by our system (which is relatively rare).

    There is no IP change while the server is simply online or on reboot (via the reboot button on the server page).

  • Roman

    Closed the thread.