How do I allow monerod through the Windows firewall?

To allow monerod through Windows Firewall, add an inbound rule for TCP port 18080, the default port other Monero nodes use to connect to you. You usually do not need an inbound rule just to sync your node, solo mine locally, or run P2Pool on the same computer.

Decide whether you need an inbound rule

monerod.exe is the program that runs your Monero node. Your node checks transactions and blocks and shares them with other nodes.

Windows Firewall normally allows outgoing connections. That means your node can usually connect to the network and sync without accepting unsolicited incoming connections.

Opening port 18080 lets other nodes initiate connections to you. This helps the network, but it is not a requirement for local mining.

If Windows shows a security prompt when you first start monerod:

• Check that it names the genuine monerod.exe you installed.
• Allow access on Private networks if you are using a trusted home network.
• Leave Public networks unchecked unless you specifically need access there.

For a more restricted rule that allows only the node’s peer connection port, use the steps below.

Create a rule for just monerod and port 18080

These steps apply to Windows 10 and Windows 11. You may need administrator permission.

1. Press Windows + R, type wf.msc, and press Enter.
2. Select Inbound Rules, then New Rule.
3. Choose Custom, then Next.
4. Select This program path and browse to your actual monerod.exe file.
5. Set Protocol type to TCP.
6. Under Local port, choose Specific Ports and enter 18080. Leave the remote port set to All Ports.
7. Leave the address settings unchanged if you want any Monero peer to be able to connect.
8. Choose Allow the connection.
9. Select Private for a trusted home network. Only select other profiles if you understand why they are needed.
10. Name the rule something recognizable, such as Monero node — TCP 18080, and finish.

These instructions assume you use Monero’s main network and have not changed its peer-to-peer port. If you configured a different port, use that instead.

An older, broader allow rule may still permit other traffic. Review existing monerod rules if your goal is to restrict access to port 18080 only.

Keep mining-control connections private

Port 18081 is normally used for RPC, the interface that wallets and mining software use to request information or instructions from your node. It is not the public peer connection port.

For a miner or P2Pool running on the same computer, keep these connections on localhost—your computer’s internal address, usually 127.0.0.1. You generally do not need an inbound firewall exception for them.

Do not expose RPC or P2Pool’s node-notification connection to the internet just to make mining work. P2Pool also has its own peer connections; a monerod rule does not automatically allow those.

Check the firewall and your router separately

Run status in the monerod console to check its connection counts. Incoming connections may take time to appear.

For incoming connections from the internet over IPv4, your router may also need TCP port forwarding for 18080 to your computer’s local address. Windows Firewall permission alone does not configure your router. Your internet provider may also block unsolicited incoming connections.

The bottom line

Allow TCP 18080 for monerod.exe if you want incoming Monero peers. Keep local mining interfaces private, and never disable the whole firewall to troubleshoot your node.