Effortless Foundry VTT Port Forwarding: Fix Port 30000
Fix Foundry VTT port forwarding on port 30000 TCP. Bypass ISP CGNAT, fix connection closed errors, and host self-hosted campaigns without lag.
Quick Answer: Foundry VTT Port Forwarding
To set up Foundry VTT port forwarding, forward TCP port 30000 to your host computer's local IPv4 address in your router settings. UDP is not required unless you run integrated WebRTC audio/video. If Foundry shows "Your connection appears to be closed" or your ISP uses CGNAT (common with Spectrum, AT&T, and Starlink), traditional router port forwarding fails. You can bypass CGNAT without paying recurring $5-$10/month hosting fees by using PureVPN dedicated multi-port forwarding or Proton VPN.
Fast Foundry VTT Port Forwarding: Fix Port 30000 & Host Sessions
For foundry vtt port forwarding, you only need to forward TCP port 30000 to your host machine's local IPv4 address. UDP is not required for normal tabletop gameplay, grid tokens, or compendium access unless you enable integrated WebRTC voice/video. If you see the red "Your connection appears to be closed" warning or your ISP uses Carrier-Grade NAT (CGNAT), traditional router forwarding will fail.
As a Game Master, your energy belongs in crafting compelling narratives, dynamic combat encounters, and vivid battlemaps. Nothing drains game-night momentum faster than gathering your party in Discord only to discover your players are staring at a blank screen or connection timeout error.
Whether you host Foundry Virtual Tabletop on Windows, macOS, Linux, or a local Docker container, this guide walks you through the exact router steps, one-click OS firewall commands, ISP-specific quirks (like Spectrum and AT&T), and proven workarounds when ISP CGNAT blocks incoming connections.
Interactive Foundry VTT Port & Firewall Generator
Enter your local IP address and port to generate custom router rules and 1-click firewall scripts.
ipconfig (Windows) or ifconfig (Mac/Linux).Router Port Forwarding Rule Values (Copy into Router Admin)
# Open Inbound TCP Port 30000 for Foundry Virtual Tabletop in Windows Defender Firewall New-NetFirewallRule -DisplayName "Foundry VTT Inbound (TCP 30000)" -Direction Inbound -LocalPort 30000 -Protocol TCP -Action Allow -Profile Any
How to Set Up Port Forward Foundry VTT: Complete 5-Step Process
Follow these sequential steps to configure port forwarding foundry vtt from scratch. Ensure Foundry VTT is running during step 5 so external port scanners can detect an active listening socket.
Lock Down Your Local Host IP (DHCP Reservation)
Routers use DHCP to assign IP addresses dynamically. If your computer reboots or reconnects to Wi-Fi, your local IP could change from 192.168.1.150 to 192.168.1.182, instantly breaking your port forwarding rule.
- Log into your router (typically
http://192.168.1.1orhttp://192.168.0.1). - Navigate to LAN Settings > DHCP Server > Address Reservation (or Static Leases).
- Bind your computer's MAC address to a permanent IPv4 address (e.g.
192.168.1.150).
Create the TCP Port 30000 Forwarding Rule
Navigate to your router's Port Forwarding / Virtual Server / NAT Forwarding section and add a new rule:
Configure Foundry VTT Application Settings & UPnP
Launch Foundry VTT and go to the Configuration tab on the setup screen:
- Verify that Application Port is set to
30000. - UPnP Toggle: If you created a manual port forwarding rule in Step 2, uncheck UPnP. Leaving UPnP enabled when a manual rule exists can cause router state collisions and intermittent connection dropping.
- Set an Administrator Password to prevent unauthorized access to your setup screens.
Allow Inbound Connections in OS Firewall
Routers pass external packets to your PC, but Windows Defender or macOS Application Firewall will reject unsolicited inbound traffic unless explicitly permitted. Use the automated script generator above or verify that both Private and Public network boxes are checked for Node.js: Server-side JavaScript and Foundry Virtual Tabletop.
Launch Your World & Verify Invitation Links
Launch one of your game worlds. Open the sidebar and click the Game Settings (gear icon) > Invitation Links menu:
- Green Checkmark: Foundry displays a green icon next to your Internet URL (e.g.
http://203.0.113.45:30000), confirming port 30000 is open to the world. - Red Warning ("Your connection appears to be closed"): Read our deep-dive troubleshooting checklist below to resolve common router bugs and CGNAT restrictions.
Why Is Foundry Port Forwarding Not Working? (The 5 Culprits)
If you followed every step and Foundry VTT still reports "Your connection appears to be closed" or you can't open port for foundryvtt, one of these five underlying networking obstacles is almost always responsible.
1. Carrier-Grade NAT (CGNAT): The Invisible Brick Wall
As reported in r/FoundryVTT community threads, thousands of DMs discover that their ISP (such as Spectrum in certain regions, AT&T Wireless, Starlink, or UK fiber providers) no longer issues a dedicated public IPv4 address. Instead, hundreds of residential customers share a single pool of carrier IPs.
- Log into your router and find your WAN / Internet IP Address.
- Check your public IP on our homepage IP check or CGNAT diagnostic guide.
- If your router WAN IP falls between
100.64.0.0and100.127.255.255(RFC 6598), or if your router WAN IP doesn't match your browser public IP, you are behind CGNAT.
Community Finding: One Reddit user confirmed contacting their ISP after port 30000 failed, only to be told they shared a public IPv4 and would be billed an additional £5/month for a static IP. A port-forwarding VPN bypasses this completely at lower cost.
2. ISP Router Quirks: Spectrum SAC2V1K & AT&T BGW320
If you searched for foundry vtt port forwarding spectrum or how to port forward for foundry vtt att, you are dealing with carrier-provided hardware limitations:
- Spectrum (SAC2V1K / My Spectrum App): Modern Spectrum routers do not support local NAT Loopback (Hairpin NAT). If you test your external
http://your-public-ip:30000link while connected to your home Wi-Fi, the connection will fail! Disconnect your phone from Wi-Fi and test over cellular 5G—often, your port is actually working. For complete steps, see our Spectrum Port Forwarding Guide. - AT&T (BGW320 / BGW210): AT&T gateways require configuring rules under Firewall > NAT/Gaming. You must create a custom service named "Foundry" with Global Port Range
30000-30000and Host Port30000, then explicitly assign it to your PC. Detailed walkthrough in our AT&T Port Forwarding Guide. - ONT v2802DAC & Fiber Modems: On fiber bridge modems, look for Advanced NAT > Virtual Server. Map Service: User Defined, Protocol: TCP, WAN Port: 30000, Server IP: your host PC.
3. Foundry VTT Port Forwarding Mac & Linux Node.js Traps
On macOS (Sonoma, Sequoia), macOS Application Firewall silently blocks inbound socket binding for third-party Node.js binaries. Open System Settings > Network > Firewall > Options, ensure Foundry Virtual Tabletop.app is set to "Allow incoming connections", and toggle off "Block all incoming connections".
4. Is Foundry VTT Port Forwarding Safe? What About Port 25565?
A frequent question from new hosts is: "is foundry vtt port forwarding safe? Is it safe to open port 25565?"
Forwarding TCP 30000 only exposes the Foundry VTT Node.js web daemon. As long as you maintain a strong Administrator password in your Foundry Configuration screen, remote attackers cannot access your host operating system files.
Port 25565 is the default port for Minecraft servers, not Foundry VTT. Opening port 25565 does nothing for Foundry. Never put your computer in your router's DMZ (Demilitarized Zone), as DMZ exposes all 65,535 ports on your computer to automated malicious internet bots.
Can Foundry VTT Be Self-Hosted Without Port Forwarding?
Yes. If your ISP blocks port forwarding or you cannot access your router, you have four distinct avenues to run your game night. Here is how they stack up in cost, player friction, and performance:
| Method | Player Friction | Monthly Cost | Asset / Map Limits | Verdict |
|---|---|---|---|---|
| Standard Router Port Forward | Zero (Browser Only) | Free | Unlimited (PC Storage) | Best if your ISP allows public IPv4 |
| The Forge / Molten Hosting | Zero (Browser Only) | $4 - $10+ / mo | Strict (5GB - 20GB caps) | Expensive recurring cost for heavy asset DMs |
| Hamachi / Tailscale Mesh | High (All players must install) | Free | Unlimited (PC Storage) | Fails if players are on iPads or non-tech-savvy |
| PureVPN (Dedicated IP + Port Forward) | Zero (Browser Only) | Low (~$3 / mo) | Unlimited (PC Storage) | Top Pick: Bypasses CGNAT & Zero Player Setup |
Foundry VTT Without Port Forwarding: PureVPN & Proton VPN
Why pay $60 to $120 every single year to managed VTT hosting services that throttle your upload bandwidth and cap your map storage at 10GB? With a port-forwarding VPN, you bypass your ISP's CGNAT, protect your home IP from public scrapers, and allow your players to connect directly via their regular web browser without installing any software.
PureVPN + Port Forwarding Add-On
Dedicated Static IP with Port 30000 Mapping
PureVPN is the gold standard for self-hosting Foundry VTT behind CGNAT. By selecting their Dedicated IP + Port Forwarding Add-on, you get a dedicated public IP address that never changes, mapped directly to port 30000.
- Zero Player Setup: Players simply bookmark your dedicated IP in Chrome/Firefox.
- Dedicated Static IP: Your link never breaks between weekly sessions.
- Unlimited Storage: Host 100GB+ of 4K maps directly from your home SSD.
- Risk-Free Guarantee: Full 31-day money-back guarantee.
Verified with Foundry VTT v11 & v12 • 31-day money-back guarantee
Proton VPN Plus
High-Speed WireGuard & NAT-PMP Port Forwarding
If you run game sessions on Windows and want encrypted Swiss privacy with low-latency WireGuard, Proton VPN Plus includes dynamic NAT-PMP port forwarding to punch through ISP firewalls with 1 click.
- 1-Click Dynamic Port Forwarding: Open inbound ports instantly.
- DDoS & Home IP Shield: Keep your actual home broadband address hidden.
- Audited No-Logs: Based in Switzerland under strong privacy laws.
- Risk-Free Guarantee: 30-day money-back guarantee.
Ideal for WireGuard tunneling • 30-day money-back guarantee
This page contains affiliate links. If you sign up through them, NAT Checker may earn a commission at no extra cost to you.