# Complex Configurations - Firewalls and Routers

Nicecast itself is fairly easy to set up. However, if you have a firewall in place, you'll need to adjust it so listeners can reach your stream. As well, if you use a router to share a single internet connection, you'll need to adjust this so listeners can connect.

Below you'll find a quick overview, with examples from Mac OS X and AirPort Base Stations. For more information specific to your hardware, please see the specific manuals for your firewall or router - this is merely provided as an overview. Please keep in mind that Rogue Amoeba doesn't have access to every piece of router hardware or firewall software, so your manufacturer will best be able to help you configure these products.

### Router Port Mapping/Port Forwarding/Virtual Server Overview (Example using AirPort Base Station)

1. Open up the admin software on your router. For an AirPort Base Station, you'll use the AirPort Utility, found in /Applications/Utilities.
2. Find the port mapping configuration panel (which may instead be named port forwarding or virtual servers, depending on your router). In Airport Utility, select your Base Station, click Manual Setup, then click the Internet toolbar icon.
3. Add a new port mapping to the machine on your LAN which is doing the broadcasting. You'll need to map public port 8000 to private port 8000, on the machine's LAN IP. In AirPort Admin Utility, click Add, put port 8000 in the two port fields and the IP of the machine which will be broadcasting in the Private Address field. Click Ok, then click Update. Note that this forwarding only needs to be TCP, you can leave UDP alone.

Details
A router takes traffic from the Internet and sends it to your LAN. The machine which is running Nicecast needs to receive all the requests for port 8000 (by default) which are coming in from the Internet. Port forwarding/port mapping/virtual servering allows this traffic to go where it's needed, so listeners can connect to your stream.

Note: UPnP and NAT-PMP Routers
Many newer routers support UPnP (Universal Plug-And-Play) and NAT-PMP (Network Address Translation Port Mapping Protocol), which allow software to configure the router automatically. If UPnP or NAT-PMP is on, Nicecast will configure the router for you. To determine if your router supports UPnP, please check the router's documentation. You may need to enable UPnP on the device - again, see the router's documentation for more information.

For AirPort Base Stations, NAT-PMP is off by default. For full information on activiting this, see this link.

### Firewall Overview (Example using OS X Built-in Firewall)

1. Open up your firewall software. OS X's built-in firewall (off by default) is accessible from the “Security & Privacy” System Preference.

2. If the firewall is on, open up the port Nicecast is using to broadcast. By default, this is 8000, but it can be changed in Nicecast's Server window. In OS X's firewall, you just need to click New, and choose Other, then enter 8000 in the port field, and Nicecast in the description field, then click OK. You're all set. If the firewall is off, then you don't need to adjust anything.

Details
A firewall prevents network connections from occurring. This can be good in stopping malicious connections from occurring. However, Nicecast needs to be able to establish benign connections on port 8000 (by default). To allow this, you'll need to open up port 8000, or whatever port you set Nicecast to use in your firewall software.