prefixkit Ask an engineerAsk RU

Port 548 AFP

Apple Filing Protocol, file sharing on old macOS and NAS.

Protocol
TCP
Service
AFP
Category
File sharing
Exposing to the internet
Do not expose

Check if port 548 is open

Is it safe to open

File-sharing protocols are not designed for the internet: they leak data and spread ransomware. Keep them inside the LAN and give remote users a VPN or an HTTPS-based service instead.

How to open port 548

Open to everyone

# Linux iptables
iptables -A INPUT -p tcp --dport 548 -j ACCEPT
# Ubuntu ufw
ufw allow 548/tcp
# firewalld
firewall-cmd --permanent --add-port=548/tcp && firewall-cmd --reload
# MikroTik
/ip firewall filter add chain=input protocol=tcp dst-port=548 action=accept place-before=0 comment="port 548"
# Windows (PowerShell)
New-NetFirewallRule -DisplayName "Port 548 TCP" -Direction Inbound -Protocol TCP -LocalPort 548 -Action Allow

Only for your addresses

# allow only one address or network (replace 203.0.113.0/24)
iptables -A INPUT -p tcp --dport 548 -s 203.0.113.0/24 -j ACCEPT
iptables -A INPUT -p tcp --dport 548 -j DROP
ufw allow from 203.0.113.0/24 to any port 548 proto tcp
/ip firewall filter add chain=input protocol=tcp dst-port=548 src-address=203.0.113.0/24 action=accept
/ip firewall filter add chain=input protocol=tcp dst-port=548 action=drop

If the server is behind a router, you also need a port forward (dst-nat). Behind ISP CGNAT (100.64.0.0/10 on the WAN) forwarding will not help: you need a public IP or a VPN.

What is listening

Check on the server

# what listens on the port
ss -lntup | grep ':548 '
netstat -ano | findstr :548   # Windows
lsof -i :548   # macOS
# test from another machine
nc -vz example.com 548

Related ports