Firewall issue

[Charles_Snider (Chas Sniding)]

I recently noteiced that when rebooting the Ropieeedisplay, I need to have my firewall off in order to it working. The web interface is fine, but the display itself has the “something not right is roon working” display. When I turn the firewall on my roon linux server off, reboot the ropieeedisplay all is fine.

I imagine there’s a port I need to open, any ideas?

thank you

[mjw (See you in the major leagues, Jack.)]

What device is Roon server running on, and is this machine also running firewall?

[Charles_Snider (Chas Sniding)]

Ubuntu 24.04LTS with UFW. All other ports are working correctly.

[mjw (See you in the major leagues, Jack.)]

Okay, you’re in luck … this what I currently use on Ubuntu 24.04.3.

Create application profile for Roon

sudo nano /etc/ufw/applications.d/roon

[Roon]
title=Roon Server
description=Roon Labs Core Music Server
ports=9003/udp|9100:9200/tcp|1900/udp|9330:9339/tcp|30000:30010/tcp

Activate UFW application profile for Roon

sudo ufw allow from 192.168.51.0/24 to any app roon

Add IGMP rules for Roon endpoint discovery

sudo nano /etc/ufw/before.rules

### IGMP (Roon) ###"
-A ufw-before-input -s 224.0.0.0/4 -j ACCEPT
-A ufw-before-input -d 224.0.0.0/4 -j ACCEPT
-A ufw-before-input -s 240.0.0.0/5 -j ACCEPT
-A ufw-before-input -m pkttype --pkt-type multicast -j ACCEPT
-A ufw-before-input -m pkttype --pkt-type broadcast -j ACCEPT

Note : Paste above these lines.

# don't delete the 'COMMIT' line or these rules won't be processed
COMMIT

This was recently posted by @Alex_Reusch and is an elegant solution that I’ll likely adopt when I find time or upgrade to 26.04.1.

2026 Update: Minimal, Clean and Working Firewall (UFW) Rules on Ubuntu Server

Dear Roon friends, Over the years, a number of different UFW approaches for Roon have been shared, including some I posted myself. Many of them were helpful, but they often evolved into a combination of custom before.rules entries and UFW app profiles. In practice, that made the setup broader than necessary, harder to understand, and sometimes redundant. In some cases, the same logic was effectively handled in two different places at once. That was never fully satisfying to me. I wanted a clea…

[Charles_Snider (Chas Sniding)]

There’s a new (ish) issue with Roon and the Android app regarding firewall. My rules are per the above (did I write those?) and I’ve add the IGMP, yet connectivity with the Android app exists when I turn UFW on.
Please note that I happily lived under the same rules for the past few years without issue.

[Charles_Snider (Chas Sniding)]

There’s something with my Android and UFW. When I turn UFW on, Roon app on Android can’t find my Roon Server.