Linux firewall settings for Apple Airplay (Shairport / Shairtunes / Shairplay)

VS. 


The following has taken me an eternity to figure out. I use Airplay from a Linux server to Apple and other airplay devices on my network. Configuring the firewall properly for this to work has not been simple - many guides are vague and lack the specifics needed.

My actual configuration centres around Logitech's squeezeboxserver now known as logitechmediaserver 'LMS' whereby I use the following plugins:

AirPlay bridge - this enables Airplay devices to be used as if they were squeezebox devices, i.e. I can play my LMS stored music / radio / spotify on any of my Airplay devices

ShairTunes2 - this enables Squeezebox devices to be Airplayed to, i.e. I can Airplay from my iPhone/iPad/Mac etc. to any of my LMS squeezebox devices. This is an incarnation of shairplay / shairport .

For along time I have had to disable my firewall to enable my LMS device to connect to my Airplay devices and for music to flow. Once the connection is established I had to then re-enable my firewall - which is not ideal and very cumbersome. Whilst the Airplay devices always showed up in LMS and LMS client the music would just not stream. 

Here's how to configure a linux firewall with UFW to enable Airplay:



1. First avahi / mdns needs to be allowed through the firewall, this allows the Airplay devices to be advertised on the network:

ufw allow 5353/tcp

2. Configure the ports to enable Airplay to stream. This is not so simple as Airplay uses a dynamically assigned port on the server to stream from, so you cannot just open this port as it always changes. Matters are further complicated since linux by standard has no application level firewall - making it impossible to allow and whitelist the shairtunes 'shairport' application. 

Solution - from watching a packet sniffer it seems that the Airplay protocol commonly uses port 5000:5005 TCP to setup an Airplay connection. Typically Airplay uses 5000 but if there are other instances or issues locking the port it seems to try a higher port - so I allow 5 ports.

Once the connection is established by TCP, Airplay then uses UDP to stream the audio to destination ports in the range of 6000:6005 on the target device. To avoid the dynamic port issue on the server side I take the reverse approach - allowing in any packets that originate from ports 6000:6005 within my network and allowing out any packets to go out to destination 6000:6005 within my network.

This is a little more vulnerable than just opening a specific server port, as a result I restrict this to within my LAN by using 192.168.1.0/24 ** you should change this  ** to match your LAN IP range.

TCP settings

sudo ufw allow in from 192.168.1.0/24 port 5000:5005 proto tcp to any

sudo ufw allow out from any to 192.168.1.0/24 port 5000:5005 proto tcp

UDP settings


sudo ufw allow in from 192.168.1.0/24 port 6000:6005 proto udp to any

sudo ufw allow out from any to 192.168.1.0/24 port 6000:6005 proto udp

Et voila, done. This has literally taken me years to figure out - I should have opened up my packet sniffer sooner!! Hope this helps you.




92 comments:

  1. Thanks for sharing this marvelous post. I m very pleased to read this article.

    mcafee.com/activate
    office.com/setup
    mcafee.com/activate

    ReplyDelete
  2. He expounds on the most recent reports in regards to Microsoft office setup and how it can improve the work understanding of clients.
    His articles have been distributed in numerous mainstream e-magazines, online journals, and sites.

    He is a specialized master who expounds on profitability suites, for example, Microsoft Office.
    He composes blog entries, surveys, guidance manuals, news discharges, and specialized portrayals.


    https://www.setupoffice.co.uk/
    https://microsoftofficesetuponline.com/
    https://www.microsoft-office-setup-online.com/
    https://www.nortonsetuponline.com/
    https://www.purepva.com/buy-google-voice-account/
    https://www.microsoftofficeinstallonline.com
    https://www.offiecs.com/setup
    https://www.officesetup.online/
    https://office365setup.com/
    https://www.purepva.com/

    ReplyDelete
  3. Guarantee you have leap forward Operating System presented on your device. If your system has some different Antivirus or security structure presented then uninstall it. This can agitate while downloading and presenting Webroot.com/safe.
    visit:
    www.webroot.com/safe

    ReplyDelete
  4. Sign In to Norton. If you do not have a Norton account, click Create account and complete the sign up process. In the Norton Setup window, click norton.com/setup Enter a New Product Key.
    Norton.com/setup

    ReplyDelete
  5. I know the value of Garmin Update and keep reading good content about the same. I found this blog very informative and it increased my understanding about garmin update to a great extent. You can use Garmin Map to get Garmin lifetime maps update or call +1-888-309-0939 for instant help from Garmin GPS experts.

    ReplyDelete
  6. Visit www.office.com/setup, enter the unique product key, download and install Microsoft Office setup. For activation, go to www.office.com/setup.

    https://bit.ly/37DAfy9
    https://bit.ly/2AoX64k
    https://bit.ly/3cYZlZk
    https://bit.ly/37sIKf3
    https://bit.ly/2XX9LEs

    ReplyDelete
  7. Official QuickBooks updates and new features, expert tips, and videos. Get news, learn about QuickBooks Online, and access the QuickBooks Resource Center and accountant advice. If you are looking for direct product support for QuickBooks, get connected by clicking here or call our Quickbooks expert now.

    Quickbooks Support Phone Number | Quickbooks Enterprise Support Phone Number | Quickbooks Payroll Support Phone Number

    ReplyDelete
  8. Such a great post as you share it & That really helps me because a knowledgeable and informative articles have their importance thanks for sharing.

    ReplyDelete
  9. We provide Essay Writing service and each esssay is written by a fully qualiified essay writer. At fullassignment.com Online Assignment Help are available 24/7 to help and more. try it for free If you need for Law Essay Help service than go through our website fullassignment.com . We Offer Custom Essay Help service for so than can complete their homework.
    We write papers on all topics such as :-
    1. Nursing Essay help
    2. Business Essay help
    For more info please visit our website: https://fullassignment.com/
    WhatsApp : +1-6692714848

    ReplyDelete
  10. Bedankt voor je fantastische post! Ik geniet van het lezen van je bericht, je bent toevallig een geweldige auteur. Als ik vrij ben, lees dan je blog.
    Youtube bellen

    ReplyDelete
  11. Ik wil je bedanken voor de inspanningen die je hebt geleverd bij het schrijven van deze blog.
    Bellen Outlook nummer

    ReplyDelete
  12. Positieve webpagina-bron, waar heb je de informatie over dit bericht gevonden? Bedankt voor het delen.
    Bellen Paypal

    ReplyDelete
  13. Ik ben altijd online op zoek naar artikelen die mij kunnen helpen. Hierover valt natuurlijk veel te weten. Ik denk dat je ook in Features een aantal goede punten hebt gemaakt. Blijf werken, geweldig werk
    Bellen Instagram

    ReplyDelete
  14. Thank you so much for sharing this valuable information with us. keep sharing this type of stuff.car rental services

    ReplyDelete
  15. Door-step Service at Whirlpool Washing Machine Service Centre in Mumbai will arrive at your place and fix your damaged Whirlpool Washing Machine into a new one. good Whirlpool Washing Machine comes with lots of high-end features such as top load, front load, child door lock, air dry function, memory wash, reload function, etc.

    ReplyDelete
  16. Thanks for sharing this amazing article, it is very informative post good work keep it up best courier service

    ReplyDelete
  17. Visit roku.com/link & roku.com/link/activation and enter the link code shown on your display to connect Roku with your account and device as well. webroot.com/safe Install webroot on new computer-Activate highly rated Webroot antivirus in your PC, Andriod or Laptops and protects them from the virus, spam, spyware, and malware.


    ReplyDelete
  18. trend micro geek squad is the antivirus that is virus scan software program. 123.hp.com/laserjet Printer is capable of delivering high-quality text and graphic outputs through the wireless and Wi-Fi connections. 123.hp.com/setup Printers are one of the best printing machines available in the market which is Well compatible with PC.


    ReplyDelete
  19. Hp has added one great feature with their Hp printers which is known as Hp printer assistant whose work is to manage the printing tasks of the machine. It also helps you to print and scan the documents.

    ReplyDelete
  20. Documents, Quizzes, and Surprise Tests avalable on Assignment Help . This is the main reason why most students search for Assignment Help Online over the internet and choose only the most non-plagiarized and trusted Finance Assignment Help .

    ReplyDelete
  21. MS Office is the amazing software which you can easily download by going to its official website through www.office.com/setup. This software is compatible with all the devices and consists of several apps. https://sites.google.com/view/activateoffice365setup/

    ReplyDelete
  22. Webroot antivirus is the great security program which gives protection when you are away from your device and it also does not allow hackers to access your gadget.
    https://sites.google.com/view/web-rootsafecom/

    ReplyDelete
  23. AVG antivirus is the effective security program which protects your gadget from emerging threat and unauthorized access. It can be easily installed through avg.com/retail.
    https://sites.google.com/view/avgcomretailcom/

    ReplyDelete
  24. Thanks for sharing the information
    online payday loans is a short terms loan with high rate of interest. We also called payday loans as (payday advance, salary loan, payroll loan, small dollar loan, short term, or cash advance loan)


    payday loans bad credit

    ReplyDelete
  25. Thanks for sharing the information
    online payday loans is a short terms loan with high rate of interest. We also called payday loans as (payday advance, salary loan, payroll loan, small dollar loan, short term, or cash advance loan)


    payday loans bad credit

    ReplyDelete
  26. Aol mail login - START HERE - Sign in to you Aol mail account to check your inbox, write messages securely and quickly via www.aol.com.

    ReplyDelete
  27. norton.com/setup | Enter the Norton product key at www.norton.com/setup to install and download Norton Antivirus.

    ReplyDelete
  28. Get Ignou synopsis, project and solved assignment at one place. Our firm is one of the trustable and largest who is dealing in Ignou books and project from last 8 years. Our writers are experienced and always write projects on unique topic. Contact us for Ignou solved assignments.

    ReplyDelete
  29. Thanks for writing this informative blog. I really enjoyed it and trying to write mlis related blog

    ReplyDelete
  30. Wow, Very effective tips. Thanks for sharing this wonderful and helpful material.
    This is such a great resource that you are providing really found interesting and helpful firewall setting .Thanks once again Keep shine..

    ReplyDelete
  31. Linux is the open source operating system. installing Linux on mac book will be the new experience.

    office.com/setup

    ReplyDelete
  32. You might have an internet connectivity issue that can cause error while opting for forgot Facebook password option. Therefore, to deal with such an issue you can navigate to customer care where you can put forward your query to the tech support team or you can also navigate to the tech consultancies that can help you with the error that you’re facing.

    ReplyDelete
  33. Yeah, Facebook help number offers you chat support to settle down your queries in a faster manner as well as grab more information about any features or services. So, to access it, you have to access its official site on your device and look on the right pane of the screen to get live chat support.

    ReplyDelete
  34. When you try to contact Facebook through an offline process, you will not get an immediate response as offline processes can also be time consuming and annoying. This process can frustrate you if you are dealing with an emergency problem. Facebook also does not have offices for offline support. But there are other ways to connect with Facebook Netherlands. You can call their emergency phone number, or you can contact their customer service number.Facebook Nederland

    ReplyDelete
  35. 123.hp.com/laserjet | hp123.com/setup you can print high-quality documents and graphic outputs using the wireless connection. This is one way that allows allowed devices such as your PIXMA printers to connect to your network without needing to enter a password and allow a quick and easy method to connect your device.
    ij.start canon |
    ij.start.canon |
    ij.start canon |
    ij.start canon | ij.start.canon | ij start canon

    ReplyDelete
  36. The blogger shares that configure linux firewall properly for Apple Airplay for better navigation experience.

    ReplyDelete
  37. Pt Maneshwar Maharaj ji is not the specialist in astrology, in fact, much another part of astrology, prediction, and Numerology too.
    So if you ever go through any kind of issues, where you feel compelled then, as my personal opinion, you should have to make a consult with a kala jadu specialist. He is only the one, who can provide a solution in a few times as you actually want it to be.

    To get further details and take avail of services, let’s make a consult with a kala jadu specialist and enjoy your rest of life with joy.

    <a href="https://powerfulblackmagicspecialist.com/kala-jadu-specialist.php
    >Kala Jadu Specialist</a>

    ReplyDelete
  38. Pt Maneshwar Maharaj ji is not the specialist in astrology, in fact, much another part of astrology, prediction, and Numerology too.
    So if you ever go through any kind of issues, where you feel compelled then, as my personal opinion, you should have to make a consult with a kala jadu specialist. He is only the one, who can provide a solution in a few times as you actually want it to be.

    To get further details and take avail of services, let’s make a consult with a kala jadu specialist and enjoy your rest of life with joy.Kala Jadu Specialist

    ReplyDelete
  39. In addition, webroot deployments in minutes, and updates are automatically deployed. All things considered; it's an excellent antivirus solution. to guard your device with Webroot, visit www.webroot.com/safe.
    www.webroot.com/safe
    install webroot antivirus
    download and install webroot antivirus

    ReplyDelete
  40. Your content helped me a lot to take my doubts, thank you very much.

    ReplyDelete
  41. Very valuable information, it is not at all blogs that we find this, congratulations I was looking for something like that and found it here.

    ReplyDelete
  42. I think this is one of the most significant information for me. And i’m glad reading your article. Thank for sharing!

    ReplyDelete
  43. I really like your blog commenting tips thank you very much.

    ReplyDelete
  44. Thanks for sharing such an amazing article, really informative

    ReplyDelete
  45. webroot.com/safe – As people all around the world carry out their everyday work on their official and personal computers, they require total security against all kinds of threats that these virus files can cause. Using webroot.com/safe as an anti-virus make you feel safe and provides you the safety shields to stop malicious files from entering in the Desktop, laptop, smartphone via malware, , rootkit, spyware and Trojan horses.

    These viruses are originated randomly from old PC-stuck files or suspicious Trojan horse, spyware and malware online websites. So protect your device with www.webroot.com/safe. This antivirus software scans every website and blocks the access to the malicious and damaging websites of the browser.

    Webroot Inc. a private American company that provides Internet security for consumers as well as businesses. In US headquartered is located at Broomfield and international headquarter is at Dublin, Ireland.

    ReplyDelete
  46. DO Photograph or Scan Your Artwork

    The quickest and easiest way (if you're handy with a camera) to digitise your artwork is to take a photograph. You'll want to take a clear, evenly lit photo with no flashes or shadows that could impact the quality of your work.embroidery digitizing

    ReplyDelete
  47. Microsoft 365 setup offers Office apps and additional Microsoft services. offers access to the Microsoft 365 software product. This portal allows downloading office apps on your 32 or http://123.hp.com/laserjet64-bit system. In addition, you can activate the Microsoft services using a product key, and so a Microsoft account will be needed
    Microsoft365.com/setup,
    123.hp.com/laserjet

    ReplyDelete
  48. I have to search website with relevant topic information and, This is very useful and so helpful to everyone, although it will be important to help simply. Thanks for this information and Please sharing others topics with us. We are all waiting your next blogs. Good luck. Online Assignment Help - auditing assignment - Assignment Help - university assignment help australia

    ReplyDelete
  49. Hotmail sign in: This service is a mailbox where you are able to send and receive emails. A tool called Windows Live Messenger allows you to link your account to an instant messenger. So you have a program to install and chat.Hotmail login


    Most importantly, switch in your SMART-TV. Simple procedure to activate your Amazon prime video onto your own smartphone or device. Go to www.amazon.com/mytv input and click the enter button.
    amazon.com/code

    Omegle (oh·meg·ull) is a great way to meet new friends, even while practicing social distancing. When you use Omegle, you are paired randomly with another person to talk one-on-one. If you prefer, you can add your interests and you’ll be randomly paired with someone who selected some of the same interests.
    omegle login

    ReplyDelete
  50. You will never get the good assignments from a bad company. As we all know that getting an assignment help service is very important to take at this era and searching for that is almost impossible task. People used to find on the basis of the reviews, but GoAssignmentHelp has created a hype in this era by proving themselves as best assignment help company in Australia which is covering the whole globe for providing the assignment help services with the tools which help in providing 100% unique assignments. You can check out for the best plagiarism checker services provided by us.

    ReplyDelete
  51. It is a great blog post. I am Always reading your blog. Helpful and Informative blog. Thanks for sharing this information with us.

    espn.com/activate
    www.espn.com/activate




    ReplyDelete
  52. Hey! I've read your blog; interestingly, you are covering your topics so well. I'm eager to see your following projects. Click here if you need more information about a child's horoscope by date of birth and time
    Baby horoscope
    Baby Name Prediction Astrology

    ReplyDelete
  53. Do not feel stressed as you feed your reliable knowledge in your subject field and I have got little bit idea how to address technical flaws. The proposal of Assignment Help is authentic to reduce your work load.

    ReplyDelete
  54. Very useful information. Thanks for sharing such an amazing information.
    Have you been looking Solution For How To Unblock On Cash App? If you want to unblock someone on the cash app, then you have to click on this link and you can easily unblock any person on the cash app, if you are not understanding how to do this, you can contact our Cash App Customer Service. They will give you possible guides related to your issues.

    ReplyDelete
  55. It’s really nice and meaningful. If you are looking for an ATT customer service phone number then it is the right place for you. At this place, you will get the customer service support and 24/7 helpline number of AT&T for this you just have to click on this link.

    ReplyDelete
  56. I got positive vibes , in this blog you have very knowledgeable blog and very helpful to others and you can check my blog too about printer and this printer ij.start.cannon
    is works on both operating system ios and android .

    ReplyDelete
  57. I feel great with this uploaded post and avail online to read out all information in this. Hey admin! I urge you to carry on this information as much as possible. Many teams I do not get the sufficient time to read out as I am surrounded with the accountability to do assignment instructed by the Qatar university expert. In the most suitable condition, you can rely on Qatar Assignment Help team for better performance. But, you have to continue for information sharing.



    ReplyDelete
  58. HBO Max is available on PlayStation 4 and other home devices through an update to the HBO Now app. However,Hbomax.com tvsignin currently, the HBO Max app does not allow users who have free access with their cable plan to connect with their TV provider's specs.Hbomax.com/tvsignin

    ReplyDelete

  59. HBO MAX lets you watch movies, exclusive tv shows and other videos at one place but it only works when it is activated. It is necessary for the activation purpose that you need to enter hbomax com tvsignin activation code which is a 6 digit in alphanumeric code. hbomax/tvsignin is an American OTT video streaming system that gives films, television shows, and sports on consumer demand. Get all the details about the hbomax.com/tvsignin Enter Code site in this article and stream HBO Max shows on your tv.

    ReplyDelete
  60. You have to get the Fubo TV connect enter code to activate Fubo Tv and signal in to your account. Once you get the enter code at fubotv/connect code, you will have 5 minutes for activation of your device.viewers can sign in to their Fubo TV account remotely on their smart TV by using Fubotv/connect code. fubo.tv/connect enter code

    ReplyDelete
  61. Even the entertainment world does not stay confined inside the boundaries of cable operations. With several streaming tools emerging at lightning speed, it has become of core value to embrace the newer technological adjustment and start learning different ways to remain dedicated to your favorite TV shows and movies without the need for cable connections. fubo.tv/activate enter code

    ReplyDelete
  62. How Do I Learn To Sell Goods on eBay Through EBay Customer Service?
    Approaching a good customer support service provider will provide you with the appropriate way to sell any kind of products on eBay account without any kind of glitches. So, if you are one of those who are facing any troubles regarding the same, you have to take EBay Customer Service without making any delay from your end.

    ReplyDelete
  63. Canon website provides you a safe, secure, and reliable platform for downloading the driver.
    canon ij setup

    ReplyDelete
  64. Hi, I am Sofi Hayat, I am working as a tech expert at Yahoo support. I have 3 years of experience in this field. you have any problems related to Yahoo Support, etc, then please contact me for instant help related to Yahoo email problems.

    ReplyDelete
  65. we bring you GIS assignment assist writing with overhauling that would assist you with scoring high in this subject. Assuming you are stressed over the accommodation, then, at that point, we guarantee you that you will get opportune conveyance. The following are a portion of the GIS assignment themes; you can go through every one and let us know your prerequisites. my assignment help

    ReplyDelete
  66. This comment has been removed by the author.

    ReplyDelete
  67. I'm appreciating you for the time and effort spent to provide this useful and meaningful to your readers. thank you for sharing. visit here bowen university departmental cut off mark

    ReplyDelete
  68. This comment has been removed by the author.

    ReplyDelete
  69. Microsoft365.com/setup is a setup procedure to install Microsoft Office 365 setup, i.e. the Office community online application. Microsoft was established in 1975 and came into action after the end of the 21st century, but now it is the hottest app in its field. Microsoft Office comes with various software packs including Word, Excel, Powerpoint, Access, Outlook and Reader. This software is used for various important works that are difficult for a human to perform.

    ReplyDelete
  70. If sexual problems aren't addressed immediately, they may cause major problems for you in both your professional and personal life. We are the leading sexologist in delhi ,Noida, Gurgaon, Faridabad, Ghaziabad to offer best Erectile.

    ReplyDelete
  71. A specialist in human sexuality is the best sexologist in Delhi. A sexologist can be described as a sexuality specialist, sex teacher, or sex analyst. Ghaziabad's sexologist can be skilled in all three, or have only one year of experience.

    ReplyDelete
  72. Let's be honest, toilet cubicle are ugly. They really are. You try making them look good, but all you end up with is a toilet cubicle that still looks like a toilet cubicle. How can we make them better.

    ReplyDelete
  73. Discover the Best Budget DSLR Camera In India From here
    It’s not easy to find the best budget DSLR camera in India. For people who are starting their photography journey, it’s a bit of a shocking truth. But to be honest, it’s also a bit of a relief too. Because starting a photography hobby doesn’t mean you have to empty your savings account on a camera. Hit the link here and get to

    ReplyDelete


  74. Because a happy consumer is a great source of bringing in more custom packaging expert customers that ultimately increases the sales and overall sustainability of the business

    ReplyDelete
  75. You have a fantastic blog here. This is very incredible. To be honest, this was my first visit to your blog, but I am now a fan of your writing. Like you, for example! I'm also here to discuss my nursing research topics website. We have a nursing research topics service that assists and guides students in completing their assignments or completing assignments correctly. We are solely here to assist you, so please contact us if you require assistance.

    ReplyDelete
  76. Great post! I like the way You wrote the blog. I must say the words that you choose are excellent. I am also here for the promotion of my Assignment help website. If you think you need help or information regarding online assignments then feel free to contact our experts.

    ReplyDelete
  77. What Is Cash App Business Account And Do I Need To Pay Any Charges?
    Cash App Business Account
    is a kind of Cash App account and you will able tocater to your business needs without having to confront any kind of technical or non-technical issues.So, if you get a Cash App business account and you would like toaccept the payments without confronting any kind of hassle, you will have to pay a 2.5% while accepting the payment on your Cash App business account. For the right guide and information, go to the official help section right now.

    ReplyDelete
  78. Great Post! Thank you For sharing this great information. Your article has proved the hard work and experience you have got in this field. I am always reading your all post. Keep Growing, congrats! i love it reading.

    ReplyDelete
  79. Great Post! Thank you For sharing this great information. Your article has proven the hard work and experience you have got in this field. I am always reading your all post. Keep Growing, congrats! I love it reading.

    ReplyDelete
  80. The Apple Airplay feature of macOS allows you to send your screen, audio, and video content to a device wirelessly. It is compatible with iOS, tvOS, and watchOS devices. In order to use this feature, you will need to enable your Linux firewall. In this guide, we will go over how to enable the firewall on Ubuntu and Debian Linux distributions.For more details or need more technical problem fix visit do my exams for me

    ReplyDelete

Note: only a member of this blog may post a comment.