Document information
| Document ID: | 4625 |
|---|---|
| Subject: | TCP/IP ports required by Xeams |
| Creation date: | 12/14/15 4:35 PM |
| Last modified on: | 8/6/21 10:55 AM |
List of TCP/IP ports that should be opened for Xeams
Your firewall should allow traffic for the following ports:
| Port | Type | Direction | Description |
|---|---|---|---|
| 25 |
Required | IN/OUT | SMTP traffic. This is used to receive and deliver emails to other servers on the Internet. |
| 53 | Required | OUT |
DNS traffic. Xeams will try to send a UDP query to the DNS server. If UDP does not work, a TCP request will be send. |
| 80/443 |
Required | OUT | Xeams connects to our web server to fetch rules and program updates. If out-bound port 80/443 is blocked, your copy of Xeams won't be able to patch itself with new updates. |
| 110 | Optional | IN/OUT | In-bound port should be open if users are using POP3 to fetch their emails. Out-bound port should be open if you are using the POP3 fetcher. |
| 143 | Optional | IN | Required if IMAP is enabled. |
| 995 | Optional | IN | Required if POP3 server is enabled in SSL mode. |
| 993 | Optional | IN | Required if IMAP server is enabled in SSL mode. |
Other ports
The following ports are used by Xeams but you do not need to open them through your firewall.- 5272 - For admin console
- 7865 - Used by the embedded relational database
Can I Change These Ports To A Different Value?
Often users ask us if they can change these port numbers because their ISP blocks certain ports, for instance, TCP/25. Before you change these ports, you have to ask who is connecting to them, which boils down to two categories:
- Under your control - for example, IMAP (143), POP3 (110) and Xeams web interface (5272). Since only your internal users will connect to these ports, you can always ask them to use a different port number.
- Out of your control - for example, SMTP (25), DNS (53) and Outbound HTTP (80/443). These ports are out of your control because servers on the Internet need to communicate with your Xeams. You cannot ask these servers to use a custom port.