firewall ports for direct connection

[jasonafriedman]

I am trying to get a direct connection to work. Right now, it connects using DERP and is slower than a direct connection. Enabling UPnP works, but that is insecure. Here are the the relevant docs:

https://tailscale.com/kb/1181/firewalls/
https://tailscale.com/kb/1082/firewall-ports/

Tailscale needs the following firewall rules:

• Let your internal devices initiate TCP connections to *:443
• Let your internal devices initiate UDP from :41641 to :
• Let your internal devices initiate UDP to *:3478

Do you know which commands to use for this? I tried forwarding ports using the GUI but really don't know what I'm doing.

[jamesog]

Unless you're restricting what connections can be made outbound, you shouldn't need to do anything. It's hard to say without knowing more about your setup.