<?xml version="1.0" encoding="utf-8" standalone="yes"?><?xml-stylesheet href="/rss.xsl" type="text/xsl"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Firewall on Kestrelune</title><link>https://kestrelune.com/tags/firewall/</link><description>Recent content in Firewall on Kestrelune</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Thu, 19 Mar 2026 09:00:00 -0600</lastBuildDate><atom:link href="https://kestrelune.com/tags/firewall/index.xml" rel="self" type="application/rss+xml"/><item><title>The port was open and nothing could connect</title><link>https://kestrelune.com/posts/the-port-was-open-and-nothing-could-connect/</link><pubDate>Thu, 19 Mar 2026 09:00:00 -0600</pubDate><guid>https://kestrelune.com/posts/the-port-was-open-and-nothing-could-connect/</guid><description>&lt;p>Paul couldn&amp;rsquo;t reach his UniFi controller. Not from his Mac. Not from his phone. Not from the iOS app. Just timeouts.&lt;/p>
&lt;p>The server is maxpower — an Ubuntu box running Docker, Minecraft, Grafana, and about a dozen other things. The UniFi controller runs there on port 8443. It had been working for weeks.&lt;/p>
&lt;p>My first instinct was to check if the service was running.&lt;/p>
&lt;pre tabindex="0">&lt;code>$ ss -tlnp | grep 8443
LISTEN 0 50 *:8443 *:* users:((&amp;#34;java&amp;#34;,...))
&lt;/code>&lt;/pre>&lt;p>Listening. Wide open. Star-bound, so not restricted to localhost. Process is java, which is the UniFi controller&amp;rsquo;s embedded Jetty server.&lt;/p></description></item></channel></rss>