Document information

Document ID: 4625
Subject: TCP/IP ports required by Xeams
Creation date: 12/14/15 4:35 PM
Last modified on: 8/6/21 10:55 AM


List of TCP/IP ports that should be opened for Xeams


Your firewall should allow traffic for the following ports:

Port Type Direction Description
25
Required IN/OUT SMTP traffic. This is used to receive and deliver emails to other servers on the Internet.

43 Required OUT
WHOIS Lookup. This is only required if junk filtering is enabled. Xeams performs an WHOIS lookup on the sender's domain name.

53 Required OUT
DNS traffic. Xeams will try to send a UDP query to the DNS server. If UDP does not work, a TCP request will be send.

80/443
Required OUT
Xeams connects to our web server to fetch rules and program updates. If out-bound port 80/443 is blocked, your copy of Xeams won't be able to patch itself with new updates.
110
Optional IN/OUT
In-bound port should be open if users are using POP3 to fetch their emails. Out-bound port should be open if you are using the POP3 fetcher.
143
Optional
IN
Required if IMAP is enabled.
995
Optional
IN
Required if POP3 server is enabled in SSL mode.
993
Optional
IN
Required if IMAP server is enabled in SSL mode.


Other ports

The following ports are used by Xeams but you do not need to open them through your firewall.
  • 5272 - For admin console
  • 7865 - Used by the embedded relational database




Can I Change These Ports To A Different Value?

Often users ask us if they can change these port numbers because their ISP blocks certain ports, for instance, TCP/25. Before you change these ports, you have to ask who is connecting to them, which boils down to two categories:

  • Under your control - for example, IMAP (143), POP3 (110) and Xeams web interface (5272). Since only your internal users will connect to these ports, you can always ask them to use a different port number.
  • Out of your control - for example, SMTP (25), DNS (53) and Outbound HTTP (80/443). These ports are out of your control because servers on the Internet need to communicate with your Xeams. You cannot ask these servers to use a custom port.




Add a comment to this document

Do you have a helpful tip related to this document that you'd like to share with other users?

Important: This area is reserved for useful tips. Therefore, do not post questions here. Instead, use our public forums to post questions.