Required outgoing ports?

[Andre39]

Hi,

which ports are required for nextcloud to work at https (443)?

Open are at the router via port forwarding 443 (incoming) for https.
[nextcloud] <— [router] ← Port 443

The outgoing ports from the nextcloud, which port is required?
[nextcloud] —> [router] → Ports ??
Port 80,443 are open and some other standard ports, but this apparently not enough.
nextcloud is not reachable, if I remove block for outgoing ports, it is reachable.

I found an old Post here:

Protocol and port number from the server to the clients?

Dear Colm, Nextcloud serves as a “Web-Service”: If not changed from your side (or proxied through e.g. NGINX) then port 80 for http, port 443 for https and as well port 22 for ssh (please change if port 22 is still in use for SSH!) are used. Inbound 80,443, (22) Outbound: ANY That is sufficient from Nextcloud perspective. Cheers, Carsten

Could someone explain why outbound is ANY ?
It should be at least some port range?

[KarlF12]

@Andre39

The outgoing ports from the nextcloud, which port is required?
[nextcloud] —> [router] → Ports ??
Port 80,443 are open and some other standard ports, but this apparently not enough.
nextcloud is not reachable, if I remove block for outgoing ports, it is reachable.

The source port will be 443 or 80. The destination port will be whatever ephemeral port was used by the client. When a firewall does not specify which it means, they are usually referring to the destination port and ignoring the source port.

A stateful firewall would normally take care of this automatically unless you have told it to block traffic leaving your network which is generally not necessary.