Windows Server / Windows OS
On Windows, Port 443 outbound traffic is usually open by default, but local firewall policies or anti-virus software can sometimes block it.Method 1: Windows Defender Firewall (GUI)
- Press
Win + R, typewf.msc, and press Enter to open Windows Defender Firewall with Advanced Security. - Click on Outbound Rules in the left panel.
- In the right panel, click New Rule…
- Select Port and click Next.
- Choose TCP, select Specific remote ports, and type
443. Click Next. - Select Allow the connection and click Next.
- Keep all profiles checked (Domain, Private, Public) and click Next.
- Name the rule (e.g.,
BedwarsRestrictions - Port 443 Outbound) and click Finish.
Method 2: PowerShell (Administrator)
Open PowerShell as Administrator and run the following command to automatically create the outbound rule:Linux (Ubuntu, Debian, CentOS, RHEL)
Most Linux dedicated servers or VPS instances utilize local firewalls such asUFW or firewalld.
1. Ubuntu / Debian (UFW)
Check your current UFW status and allow outbound HTTPS traffic:2. CentOS / RHEL / AlmaLinux (firewalld)
If your system usesfirewalld:
3. Native iptables
If you manage rawiptables rules directly:
macOS Server / macOS
If you are running a local test server on macOS, traffic can be allowed via System Settings or the Packet Filter (pf) tool.
Method 1: System Settings (GUI)
- Open System Settings > Network > Firewall.
- Click Options…
- Ensure Block all incoming connections is OFF.
- Ensure your Java binary (or Minecraft server terminal) is set to Allow incoming connections.
Method 2: Terminal (pfctl)
To allow traffic through the built-in macOS packet filter:- Open Terminal.
- Check if
pfis running:
- To add a temporary pass rule for port 443:
Cloud Hosting / VPS Providers
If you host your server on cloud providers (such as AWS, DigitalOcean, Linode, or Google Cloud), operating system firewalls are often supplemented by External Cloud Firewalls / Security Groups although normally it is enabled by default or asks on creation of instance.Google Cloud Platform (GCP)
- Go to the VPC network section in your GCP Console.
- Click on Firewall in the left menu, then click Create Firewall Rule.
- Name:
allow-https-outbound - Direction of traffic: Select Egress (Outbound).
- Action on match: Select Allow.
- Targets: Select Specified target tags and add the tag assigned to your VM (e.g.,
allow-https). - Destination filter: IPv4 ranges -> Set to
0.0.0.0/0. - Protocols and ports: Check TCP and type
443. - Click Create.
AWS EC2
- Go to your EC2 Dashboard and click on your Instance.
- Select the Security tab and click on your Security Group.
- Click Edit Outbound Rules (do not change Inbound rules).
- Click Add Rule:
- Type: HTTPS
- Protocol: TCP
- Port Range: 443
- Destination: Anywhere-IPv4 (
0.0.0.0/0)
- Click Save rules.
DigitalOcean
- Go to Networking > Firewalls.
- Select the firewall attached to your Droplet.
- Scroll down to Outbound Rules and click Add Rule.
- Select Secure Web (HTTPS) from the dropdown (this automatically sets TCP Port 443 to All IPv4/IPv6).
- Click Save.
Linode (Akamai Connected Cloud)
- Go to the Linode Cloud Manager dashboard and select Firewalls from the left-hand navigation menu.
- Click on the firewall attached to your Linode instance (or click Create Firewall if you have not set one up yet).
- Select the Outbound Rules tab.
- Click Add Rule and configure the settings:
- Label:
allow-https-outbound - Type:
HTTPS(Selecting this automatically sets the Protocol to TCP and Port Range to 443) - Action:
Accept - Sources:
All(orAnywhere-IPv4/0.0.0.0/0)
- Label:
- Click Save on the rule drawer, then click Save Changes at the top right of the main page to apply the firewall configuration.
Game Panel Hosts (Pterodactyl / Apex / Bisect)
Most shared Minecraft hosts leave outbound Port 443 open by default. If you still encounter connection errors, contact your hosting provider’s support team to verify that outbound HTTPS requests are not restricted by network proxies or panel firewalls.How to Test Port 443 Connectivity
To verify whether your server can reach external HTTPS services on Port 443, run one of the following diagnostic commands from your server terminal.On Linux / macOS:
On Windows (PowerShell):
TcpTestSucceeded : True is returned, outbound Port 443 traffic is open.