> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://helping.alive-pic.com/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Firewall Configuration for ALIVE Magic Print

ALIVE Magic Print needs to communicate over your local network so your iPad can discover it and send print jobs. If your firewall is blocking that communication, your iPad won't find the print server — and your guests won't get their prints.

---

## Why Firewall Configuration Matters

ALIVE Magic Print uses network ports to:

* **Advertise itself** on the local network (so your iPad can find it)
* **Receive print jobs** from the ALIVE app on your iPad
* **Stream connection status** in real time

If a firewall blocks these ports, the iPad and your computer can't talk to each other — even though they're on the same Wi-Fi network.

---

## Ports Used

| Port | Purpose |
| --- | --- |
| **4004** | Print server port |
| **47653** | Print server port |
| **4000** | Print server port |

ALIVE Magic Print binds to port 4004 first, then tries 47653 (and ports above it), then 4000. All three ports can be active simultaneously, so all three need to be allowed through your firewall.

---

## Windows

Windows is the most common platform for booth operators, and also the most likely to block ALIVE Magic Print by default.

**On first run**, ALIVE Magic Print runs a PowerShell-based firewall check and attempts to add itself to the Windows Firewall exceptions list. The system will prompt you for **administrator elevation** — click **Yes** to allow it.

[screenshot: Windows UAC prompt for ALIVE Magic Print firewall rule]

If the automatic setup didn't work, you can add the exception manually:

1. Open **Windows Defender Firewall** (search for it in the Start menu)
2. Click **Allow an app or feature through Windows Defender Firewall**
3. Click **Change settings**, then **Allow another app**
4. Browse to the ALIVE Magic Print executable and add it
5. Make sure both **Private** and **Public** network boxes are checked

||| Windows Firewall blocking ALIVE Magic Print is the number one reason iPads can't find the print server. If your iPad isn't discovering the printer, check your firewall first.

---

## macOS

macOS is generally more permissive with local network communication. In most cases, ALIVE Magic Print works out of the box without any firewall changes.

If you've enabled the macOS firewall and connections aren't working:

1. Open **System Preferences** (or **System Settings** on newer macOS)
2. Go to **Security & Privacy** (or **Network** > **Firewall**)
3. Click the **Firewall** tab
4. Click the lock icon to make changes
5. Click **Firewall Options**
6. Add ALIVE Magic Print to the list and set it to **Allow incoming connections**

[screenshot: macOS Firewall Options with ALIVE Magic Print allowed]

|| macOS usually prompts you to allow or deny incoming connections the first time you launch a new app. If you clicked "Deny" by mistake, follow the steps above to fix it.

---

## Linux

Linux firewall configuration depends on your distribution and firewall tool. The most common tools are `ufw` (Ubuntu/Debian) and `iptables`.

**Using ufw:**

```
sudo ufw allow 47653/tcp
sudo ufw allow 4000/tcp
sudo ufw allow 4004/tcp
```

**Using iptables:**

```
sudo iptables -A INPUT -p tcp --dport 47653 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 4000 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 4004 -j ACCEPT
```

After adding the rules, restart ALIVE Magic Print to ensure the ports are open.

---

## Troubleshooting

If your iPad still can't find the print server after configuring your firewall:

* **Verify both devices are on the same network** — The iPad and your computer must be on the same Wi-Fi network or subnet
* **Check third-party security software** — Antivirus suites like Norton, McAfee, and Kaspersky often include their own firewalls. You may need to add exceptions there too.
* **Temporarily disable the firewall** — As a diagnostic step, try disabling the firewall entirely. If the iPad finds the server, you know the firewall is the issue. Re-enable it and add the proper exceptions.
* **Restart ALIVE Magic Print** — After changing firewall rules, restart the app so it can re-bind to the ports

| Test your firewall configuration at your studio before heading to an event. Venue networks can add their own firewall layers, so knowing your computer side is clean saves troubleshooting time on site.

---

## What's Next?

* [Network Discovery (Bonjour/mDNS)](/en/article/network-discovery-bonjourmdns-1bvbch1) — How your iPad finds ALIVE Magic Print on the network
* [Printer Not Found Troubleshooting](/en/article/printer-not-found-troubleshooting-network-discovery-rq132b) — More steps if discovery isn't working