Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteTo make a self-hosted FiveM server reachable over the internet, forward the server’s actual game port—typically TCP 30120 and UDP 30120—from your router to the computer running FXServer, allow the same protocols through that computer’s firewall, and test from a different internet connection. Confirm the values in server.cfg first: a custom endpoint port replaces 30120 everywhere in the setup. The txAdmin panel normally uses TCP 40120 and is a separate administration service; opening its page does not prove that players can reach the game server.
What you are forwarding
FiveM has two different network services that are easy to confuse:
As an Amazon Associate I earn from qualifying purchases.
| Service | Typical port | Protocols | Purpose |
|---|---|---|---|
| FXServer game endpoint | 30120 by default | TCP and UDP | Player connections to the FiveM server |
| txAdmin panel | 40120 by default | TCP | Web-based administration and monitoring |
The game endpoint is the port players need. txAdmin is only the control panel. Keep the panel reachable only from your private network, or expose it through a deliberately protected access method; do not use a working txAdmin page as evidence that the game endpoint is configured correctly.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
The examples below use 30120 because it is the usual FXServer value. Your server can use another port. The authoritative value is the endpoint in your server configuration, not a number copied from another setup.
#1 Best Overall
- 𝐅𝐮𝐭𝐮𝐫𝐞-𝐑𝐞𝐚𝐝𝐲 𝐖𝐢-𝐅𝐢 𝟕 - Designed with the latest Wi-Fi 7 technology, featuring Multi-Link Operation (MLO), Multi-RUs, and 4K-QAM. Achieve optimized performance on latest WiFi 7 laptops and devices, like the iPhone 16 Pro, and Samsung Galaxy S24 Ultra.
- 𝟔-𝐒𝐭𝐫𝐞𝐚𝐦, 𝐃𝐮𝐚𝐥-𝐁𝐚𝐧𝐝 𝐖𝐢-𝐅𝐢 𝐰𝐢𝐭𝐡 𝟔.𝟓 𝐆𝐛𝐩𝐬 𝐓𝐨𝐭𝐚𝐥 𝐁𝐚𝐧𝐝𝐰𝐢𝐝𝐭𝐡 - Achieve full speeds of up to 5764 Mbps on the 5GHz band and 688 Mbps on the 2.4 GHz band with 6 streams. Enjoy seamless 4K/8K streaming, AR/VR gaming, and incredibly fast downloads/uploads.
- 𝐖𝐢𝐝𝐞 𝐂𝐨𝐯𝐞𝐫𝐚𝐠𝐞 𝐰𝐢𝐭𝐡 𝐒𝐭𝐫𝐨𝐧𝐠 𝐂𝐨𝐧𝐧𝐞𝐜𝐭𝐢𝐨𝐧 - Get up to 2,400 sq. ft. max coverage for up to 90 devices at a time. 6x high performance antennas and Beamforming technology, ensures reliable connections for remote workers, gamers, students, and more.
- 𝐔𝐥𝐭𝐫𝐚-𝐅𝐚𝐬𝐭 𝟐.𝟓 𝐆𝐛𝐩𝐬 𝐖𝐢𝐫𝐞𝐝 𝐏𝐞𝐫𝐟𝐨𝐫𝐦𝐚𝐧𝐜𝐞 - 1x 2.5 Gbps WAN/LAN port, 1x 2.5 Gbps LAN port and 3x 1 Gbps LAN ports offer high-speed data transmissions.³ Integrate with a multi-gig modem for gigplus internet.
- 𝐎𝐮𝐫 𝐂𝐲𝐛𝐞𝐫𝐬𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐂𝐨𝐦𝐦𝐢𝐭𝐦𝐞𝐧𝐭 - TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
Before you change the router
Find the configured endpoint
Open the server.cfg used by the instance you actually launch. Look for both endpoint directives:
endpoint_add_tcp '0.0.0.0:30120'
endpoint_add_udp '0.0.0.0:30120'Official examples bind both protocols to all local interfaces on port 30120. Your file may use a different port or a more specific address. The netPort command also controls the primary server port, so check for that setting as well. Record the exact TCP and UDP values before creating a forwarding rule. If the two endpoint lines do not match, follow the configuration that your running instance reports and correct the mismatch rather than forwarding only one of them.
Identify the server computer’s private address
Port forwarding sends traffic to a private LAN address such as 192.168.x.x or 10.x.x.x. That address must remain stable. Create a DHCP reservation in the router for the server computer’s network adapter, or configure a static private address on the host using a value appropriate for your LAN. A reservation is usually simpler because the router continues to provide the gateway and DNS settings while consistently assigning the same address.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Write down the reserved address, for example 192.168.1.50. Do not use 127.0.0.1 or the word localhost in a router rule; those refer to the router or the local machine, not a reachable LAN destination.
Determine the public address you will test
Remote players connect to your internet-facing public IPv4 address, followed by the game port. The address shown by a device on your LAN can differ from the address visible to the internet, especially when an ISP gateway, a second router, or carrier-grade NAT (CGNAT) is involved. Record the current public address immediately before testing and expect it to change if your ISP uses a dynamic assignment.
Create the port-forwarding rules
Router interfaces use different names—Port Forwarding, NAT, Virtual Server, or Inbound Rules—but the required fields are generally the same. Sign in to the router that is directly connected to the internet and open that section.
Rank #2
- Beyond-fast WiFi 7 (802.11be) with new 320MHz channels in the 6 GHz band and 4096-QAM significantly increases network capacity and throughput, with speeds of up to 30 Gbps
- Multi-link Operation links to multiple bands at the same time to ensure stable internet connections and efficient data transfers
- Cutting-edge external dual-feeding antennas boost coverage by providing high efficiency and significantly enhanced signal strength
- Maximized wired connectivity and flexibility with dual 10G ports and quad 2.5G ports
- Triple-Level Game Acceleration - The GT-BE98 Pro boosts your PC gaming traffic every step of the way, from your PC gaming port all the way to the game server.
- Add a game-port rule for TCP. Set the external or public port to the configured game port (30120 in the typical example), choose TCP, and set the destination or internal host to the server’s reserved private address, such as 192.168.1.50. Use the same internal port unless your router explicitly supports a different mapping and you understand the consequence.
- Add a second rule for UDP. Use the same external port, destination address, and internal port, but select UDP.
- Use a combined rule only when the firmware supports it. Some routers offer an “TCP/UDP” or “Both” choice. That is equivalent to two separate rules when it genuinely creates both protocol entries.
- Save and apply. A few routers require a reboot or a separate Apply button. Wait for the configuration to take effect before testing.
Forward only the game endpoint unless you have a specific, protected reason to make another service public. Do not forward txAdmin’s default TCP 40120 merely because the panel works locally.
Example rule set
| Rule name | Protocol | Public port | Private host | Private port |
|---|---|---|---|---|
| FiveM game TCP | TCP | 30120 | 192.168.1.50 | 30120 |
| FiveM game UDP | UDP | 30120 | 192.168.1.50 | 30120 |
Replace every 30120 in this table if your server.cfg specifies another game port. The router’s destination must be the current address of the FXServer machine, not the address of a different computer running the browser or txAdmin.
Allow the same traffic through the host firewall
A router rule can deliver a packet to the server computer, but the operating-system firewall can still discard it. Create inbound permissions for both TCP and UDP on the configured game port and apply them to the network profile used by the server. If the firewall asks for an application, permit the FXServer executable; if it asks for a port, create separate TCP and UDP allowances when the interface does not offer a combined choice.
- Use the exact game port from
server.cfg. - Allow both protocols; allowing TCP alone can produce partial or failed connectivity.
- Keep the rule limited to the game port rather than disabling the entire firewall.
- After changing the rule, restart FXServer or reload its configuration if your setup requires it.
txAdmin’s web page uses a different service and port. A firewall exception that makes the panel load does not automatically permit the game endpoint.
Start FXServer and verify the running configuration
Launch FXServer through your normal FXServer or txAdmin workflow. Inspect the existing or generated server.cfg and the startup output to confirm that the process is listening on the endpoint you intended. If you changed the port, make sure the change reached the instance that is actually running; editing an unused configuration file has no effect.
When the server binds to 0.0.0.0:30120, it is listening on the host’s interfaces, including its LAN interface. That is necessary, but it is not proof that the router forwards internet traffic or that the firewall permits it.
Rank #3
- Please update the firmware upon initial setup of the router, as it greatly enhances the device's performance and ensures a superior user experience.*** 【WiFi 6 Standard with ultra-low latency】Wi-Fi 6 speeds up to 6 Gbps to let you enjoy smoother 4K streaming, gaming, video calls and more, DDR4 1GB / eMMC 8GB
- 【High Speed Gaming Router】Dominate with uninterrupted performance with the ultimate MT6000 gaming internet router, equipped with 8-stream Wi-Fi 6 technology, the Flint 2 delivers blazing speeds, ensuring a stable and high-speed connection during intense multiplayer battles.
- 【Rapid OpenVPN & Wireguard speed】Wireguard VPN and OpenVPN speeds up to 900Mbps and 880Mbps respectively, giving you complete control over your gaming, streaming and working bandwidth. Actual speed may differ depending on internet service provider, network environment, VPN server location, VPN service provider, etc.
- 【AdGuard Home Supported】Enabling the use of a DNS server for blocking unwanted tracking and offers a convenient web interface for filtering selected digital advertisements. Users can take full control of their online experience and enjoy a clutter-free browsing environment with ease.
- 【Mass device connectivity】Experience enhanced online connectivity with our higher storage capacity, catering to over a hundred devices and fulfilling the requirements of DIY users seeking to install additional plugins. Enjoy stable and reliable connections, ensuring seamless performance and accommodating a wide range of digital needs.
Test from outside your LAN
A test from the same computer using localhost proves only that the process is running locally. A test from another device on the same LAN can prove local routing, but some routers do not support hairpin NAT, so it still cannot prove that an internet player can connect.
Use a different internet connection—such as a friend’s connection or a phone hotspot—and test direct connection in FiveM:
- Start FiveM on the remote connection.
- Open the FiveM console with the F8 key.
- Run
connect PUBLIC_IP:30120, replacingPUBLIC_IPwith your current public address and replacing 30120 if your endpoint uses another port. - Observe whether the client reaches the server, receives a connection error, or times out.
Test direct connection before judging server-list visibility. A successful direct connection shows that the endpoint is reachable even if listing metadata has a separate problem.
If friends cannot connect: troubleshoot in this order
1. Confirm the router target address
Check the server computer’s current private address and compare it with the destination in both forwarding rules. A DHCP lease may have changed if no reservation was created. If the rule points to an old address, the router sends packets to the wrong device and the server never sees them.
2. Confirm both protocols and the exact port
Verify that TCP and UDP entries exist for the same configured game port. Forwarding only TCP or only UDP can prevent a complete connection. Also check that the external port, internal port, and server.cfg value agree. A custom endpoint such as 30125 requires TCP 30125 and UDP 30125 in the router and firewall; forwarding 30120 will not reach it.
3. Check the host firewall
Temporarily compare the result with the firewall rule state, then restore a narrowly scoped rule. Ensure the permission applies to the active network profile and to the FXServer process or game port. Do not infer firewall correctness from txAdmin access, because the panel and game endpoint use separate ports.
Rank #4
- DUAL-BAND WIFI 6 ROUTER: Wi-Fi 6(802.11ax) technology achieves faster speeds, greater capacity and reduced network congestion compared to the previous gen. All WiFi routers require a separate modem. Dual-Band WiFi routers do not support the 6 GHz band.
- AX1800: Enjoy smoother and more stable streaming, gaming, downloading with 1.8 Gbps total bandwidth (up to 1200 Mbps on 5 GHz and up to 574 Mbps on 2.4 GHz). Performance varies by conditions, distance to devices, and obstacles such as walls.
- CONNECT MORE DEVICES: Wi-Fi 6 technology communicates more data to more devices simultaneously using revolutionary OFDMA technology
- EXTENSIVE COVERAGE: Achieve the strong, reliable WiFi coverage with Archer AX1800 as it focuses signal strength to your devices far away using Beamforming technology, 4 high-gain antennas and an advanced front-end module (FEM) chipset
- OUR CYBERSECURITY COMMITMENT: TP-Link is a signatory of the U.S. Cybersecurity and Infrastructure Security Agency’s (CISA) Secure-by-Design pledge. This device is designed, built, and maintained, with advanced security as a core requirement.
4. Verify the public address
Make sure the remote tester is using the address currently assigned by the ISP. If the address changed after the router was configured, the old address will fail even though forwarding is correct. Test from outside the LAN every time you change the address or router.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →5. Look for a second NAT device
Many homes have an ISP gateway in front of a personal router. If both devices perform NAT, the outer gateway must forward the game port to the inner router, which then forwards it to the server. Alternatively, place the personal router in the gateway’s supported bridge or passthrough arrangement. The exact labels vary by equipment; the key requirement is that inbound traffic crosses every NAT layer.
6. Consider CGNAT or an ISP gateway restriction
With carrier-grade NAT, the address shown by your router may be shared with other customers and is not directly assigned to your connection. In that situation, you cannot create a normal inbound rule on the public internet edge, so local forwarding will not make the server reachable. Ask the ISP whether inbound connections are available and whether a publicly routable IPv4 address or an appropriate alternative can be provided. A gateway may also block unsolicited inbound traffic even when it appears to have a public address.
7. Separate direct-connect failures from listing failures
If connect PUBLIC_IP:PORT fails, concentrate on the endpoint, forwarding, firewall, and NAT path. If direct connection succeeds but the server does not appear in the public list, inspect server configuration and listing-related settings separately. NAT or gateway behavior that masks UDP source ports can prevent listing while direct access still works.
Why a working txAdmin page can mislead you
txAdmin normally listens on TCP 40120, while players use the FXServer game endpoint, normally TCP and UDP 30120. A browser reaching the panel confirms that the administration service is running and reachable through whatever local path you used. It does not test UDP, the game TCP listener, the router’s game-port rules, or the public internet path. Treat these as independent checks:
Recommended Free Tools
- Panel check: the txAdmin service responds on its configured web port.
- Game check: a remote FiveM client completes a direct connection to the configured game endpoint.
Changing the default port
There is no requirement to use 30120 if another application or policy requires a different port. Change the endpoint consistently:
Best Value
- WiFi 7 Gaming Router - WiFi 7 (802.11be) dual-band gaming router boosts speeds up to 6500 Mbps, with 4096-QAM increasing a single frequency band's transmission speed by 1.2 times.
- Game Tough with Stability & Low Latency - Multi-link operation (MLO) link up to multi-band at the same time to ensure the stable internet connection and increase the efficiency.
- Quad 2.5G Port - Traffic via 2.5G ports has top priority, supported by 1* WAN and 3* LAN port configurations to maximize wired internet connectivity.
- One Router. All Game Types - TUF Gaming BE6500 provides gamers with different features for different game types, including a one-tap mobile game packet prioritization, a dedicated Gaming Port that ensures your device remains at the front of the queue for optimal performance, and Open NAT that simplifies multiplayer setups with easy port forwarding in just 3 steps.
- Comprehensive Security System - Support the latest ASUS security system, give you a wonderful protection from any network threaten.
- Set the desired value in both
endpoint_add_tcpandendpoint_add_udp, or use the applicablenetPortconfiguration. - Restart FXServer and confirm the running output reflects the new value.
- Replace the old port in both router rules, or remove the old rules and create new TCP and UDP rules.
- Update the host firewall allowances.
- Give remote players the new value in
connect PUBLIC_IP:PORT.
Do not leave an old forwarding rule active simply because it is familiar. It sends traffic to a port on which the server may no longer listen and can make troubleshooting ambiguous.
Security and maintenance considerations
Opening an inbound game port makes the server available to untrusted internet clients. Keep the operating system, FXServer components, resources, and router firmware maintained. Use the narrowest firewall scope that supports the server and review forwarding rules after changing hardware or network layout.
Keep txAdmin private unless you have intentionally designed and secured remote administration. If you must administer remotely, use a protected access path and strong credentials rather than exposing the panel as an afterthought. The game port and management port serve different audiences and should not share the same exposure policy.
Document the following values so a future router restart or address change is easy to diagnose:
- The server computer’s reserved private IP address.
- The TCP and UDP game endpoint ports.
- The router rule names and destination.
- The host-firewall rules.
- The current public address and the date it was checked.
- Whether an ISP gateway, second router, or CGNAT is present.
Self-hosting versus managed hosting
If your ISP permits inbound connections and you control the router, self-hosting provides direct control over the machine, network rules, and port selection. It also leaves you responsible for firewall maintenance, updates, uptime, backups, and diagnosing NAT problems.
Managed FiveM hosting avoids most home-router work because the provider supplies an internet-reachable environment. Evaluate the choice using these practical axes:
For a managed FiveM environment, Godlike.Host offers FiveM servers with a Pterodactyl-based game panel, free DDoS protection, backups, and 24/7 support, so you can avoid home-router port forwarding. It is not on Cfx.re’s list of authorized FiveM hosts (fivem.net, 10 Oct 2026).
Free tools Windows power users keep installed
One-click scans. No signup required.
| Factor | Self-hosting | Managed hosting |
|---|---|---|
| Router and firewall control | You configure and maintain both. | The provider controls the infrastructure; you use its access tools. |
| Inbound connectivity | Depends on your public address, NAT layers, and ISP policy. | Usually supplied as part of the hosting environment, subject to the provider’s terms. |
| Recurring cost | Uses your existing connection and hardware, with any associated electricity or upgrade costs. | Requires a recurring hosting charge; the amount depends on the service and plan. |
| Setup complexity | Requires endpoint, router, firewall, and NAT configuration. | Typically less home-network configuration, but requires learning the provider’s panel. |
| Port changes | You can change the port if your router and ISP allow it. | Port choices depend on the host’s allocation and policy. |
| Security responsibility | You apply updates and protect the host and panel. | The provider secures its infrastructure, while you remain responsible for server configuration and account access. |
Managed hosting is particularly relevant when CGNAT or an ISP-controlled gateway prevents inbound forwarding, or when you cannot change router settings. It is not a fix for a misconfigured server.cfg; confirm the endpoint and connection requirements whichever deployment method you choose.
Quick Recap
Fast verification checklist
- The running
server.cfgshows the intended TCP and UDP endpoint. - The FXServer host has a DHCP reservation or static private address.
- The router forwards that exact port to that exact private address.
- Both TCP and UDP are present, either as separate rules or a verified combined rule.
- The host firewall permits both protocols on the game port.
- The public address used for testing is current.
- The test is performed from outside the LAN with
connect PUBLIC_IP:PORT. - No second NAT device or CGNAT blocks inbound traffic.
- txAdmin’s port is treated as administration, not as the player endpoint.
- Direct connection is tested before server-list visibility is investigated.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
