firewall-port-troubleshooter

Diagnose port reachability and firewall issues between client and target host.

434|54|Updated May 1, 2026
One-click install
npx skills add https://github.com/ryantsai/KKTerm --skill firewall-port-troubleshooter
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: firewall-port-troubleshooter
Source: https://github.com/ryantsai/KKTerm/tree/main/assistant-skills/firewall-port-troubleshooter
Command: npx skills add https://github.com/ryantsai/KKTerm --skill firewall-port-troubleshooter

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Diagnose firewall, NAT, listener, and port reachability problems in KKTerm, including blocked SSH, RDP, VNC, HTTP(S), SFTP, custom ports, Windows Firewall, and remote service binding issues.

Core Features & Use Cases

  • Identify protocol and port, including defaults only when the user has not provided one: SSH/SFTP 22, RDP 3389, VNC 5900+, HTTP 80, HTTPS 443.
  • Distinguish timeout, connection refused, reset, TLS/application error, and authentication failure. They point to different layers.
  • Check both sides: client-to-target reachability and whether the target service is actually listening on the expected address and port.
  • Consider path controls: Windows Firewall, host firewall, router/NAT, VPN ACL, cloud security group, corporate proxy, and service allowlists.
  • Prefer targeted allow rules or service binding fixes. Do not recommend disabling a firewall globally except as a short, explicit, user-approved test in a controlled environment.
  • For NAT/port forwarding, verify public/private address, forward target, hairpin NAT expectations, and whether the service is bound to localhost only.
  • For "works locally but not remotely," inspect listen address, firewall profile, and network classification before changing application credentials.
  • Avoid port scans beyond the named target and small named port set unless the user explicitly authorizes broader discovery.

Quick Start

Describe the visible port issue to KKTerm and let this skill guide you through checks of protocol, port, and firewall settings.

Frequently Asked Questions about firewall-port-troubleshooter

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I troubleshoot a connection refused error versus a timeout when diagnosing port reachability?

Connection refused indicates the target host is reachable but the service port is closed or blocked by a firewall. A timeout suggests network routing, NAT, or host firewall issues preventing packets from reaching the destination entirely.

Why does my service work locally but fail when connecting remotely through NAT and port forwarding?

Remote connection failures despite local success often stem from the service binding to localhost only, incorrect public/private address mapping in NAT port forwarding, or hairpin NAT expectations not being met by the router configuration.

How do I check if Windows Firewall is blocking a specific port like RDP or SSH?

Check Windows Firewall rules by identifying the active network profile and verifying if targeted allow rules exist for the specific port. Inspect host firewall configurations and network classification before modifying application credentials.

What is the best way to resolve port reachability issues without disabling the firewall globally?

Prefer creating targeted allow rules in Windows Firewall or fixing the service listen address binding. Only disable the firewall globally as a short, explicit, user-approved test in a controlled environment to isolate the issue.

Can I use this approach to diagnose blocked HTTP and HTTPS ports across different networks?

Yes, you can diagnose blocked HTTP and HTTPS ports by checking both client-to-target reachability and whether the target service is listening on the expected address, while considering path controls like cloud security groups and corporate proxies.

Why does my port forwarding configuration fail to route external traffic to my internal service?

Port forwarding fails when the forward target is incorrect, the service is bound to localhost instead of a public interface, or path controls like VPN ACLs and cloud security groups block the traffic before it reaches the target host.