How to Allow Centova Cast Through a Firewall

Updated: 10 October 2026 · Applies to: Centova Cast v3

Centova Cast needs these TCP ports open in the server's firewall (and in any firewall in front of it).

Standard installation (web interface and streams on one server)

• 2199: the Centova Cast web interface. Must be reachable from the internet.
• 2197: content delivery (players, widgets). Must be reachable from the internet.
• 21: FTP, optional, for uploading AutoDJ media.
• 80: optional, for the port 80 proxy and for obtaining SSL certificates.
• Stream ports: one or more per station. SHOUTcast and Icecast usually use 8000 and up, so 8000-10000 covers most setups.

Web interface and streaming on separate servers

• Streaming server: 2197, 21 (optional), your stream ports, and 2198 for the control daemon, which should be open only to the web interface server's IP.
• Web interface server: 2199 (and 80 if used).

Examples

# firewalld (AlmaLinux / Rocky)
firewall-cmd --permanent --add-port={2197,2199,21,80}/tcp --add-port=8000-10000/tcp
firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="WEB-SERVER-IP" port port="2198" protocol="tcp" accept'
firewall-cmd --reload

# CSF: add to TCP_IN in /etc/csf/csf.conf, then csf -r
TCP_IN = "20,21,22,80,443,2197,2199,8000:10000"

Note: If you use passive FTP, also open the passive port range configured in your FTP server.