Common network ports
What each port is for and whether it should face the internet. Use the port checker to test whether one of yours is reachable.
| Port | Service | Protocol | Exposure |
|---|---|---|---|
| 20 | FTP data | TCP | Do not expose to the internet |
| 21 | FTP control | TCP | Do not expose to the internet |
| 22 | SSH | TCP | Expose only with access controls |
| 23 | Telnet | TCP | Do not expose to the internet |
| 25 | SMTP | TCP | Expose only with access controls |
| 53 | DNS | TCP/UDP | Expose only with access controls |
| 67 | DHCP server | UDP | Do not expose to the internet |
| 68 | DHCP client | UDP | Do not expose to the internet |
| 69 | TFTP | UDP | Do not expose to the internet |
| 80 | HTTP | TCP | Normal to expose |
| 88 | Kerberos | TCP/UDP | Do not expose to the internet |
| 110 | POP3 | TCP | Do not expose to the internet |
| 123 | NTP | UDP | Expose only with access controls |
| 137 | NetBIOS name service | UDP | Do not expose to the internet |
| 139 | NetBIOS session | TCP | Do not expose to the internet |
| 143 | IMAP | TCP | Expose only with access controls |
| 161 | SNMP | UDP | Do not expose to the internet |
| 162 | SNMP trap | UDP | Do not expose to the internet |
| 179 | BGP | TCP | Expose only with access controls |
| 389 | LDAP | TCP/UDP | Do not expose to the internet |
| 443 | HTTPS | TCP | Normal to expose |
| 445 | SMB | TCP | Do not expose to the internet |
| 465 | SMTPS | TCP | Expose only with access controls |
| 500 | IKE (IPsec) | UDP | Expose only with access controls |
| 514 | Syslog | UDP | Do not expose to the internet |
| 587 | SMTP submission | TCP | Expose only with access controls |
| 636 | LDAPS | TCP | Do not expose to the internet |
| 853 | DNS over TLS | TCP | Expose only with access controls |
| 990 | FTPS | TCP | Expose only with access controls |
| 993 | IMAPS | TCP | Expose only with access controls |
| 995 | POP3S | TCP | Expose only with access controls |
| 1433 | Microsoft SQL Server | TCP | Do not expose to the internet |
| 1521 | Oracle listener | TCP | Do not expose to the internet |
| 1723 | PPTP | TCP | Do not expose to the internet |
| 2049 | NFS | TCP/UDP | Do not expose to the internet |
| 3306 | MySQL / MariaDB | TCP | Do not expose to the internet |
| 3389 | RDP | TCP | Do not expose to the internet |
| 4500 | IPsec NAT-T | UDP | Expose only with access controls |
| 5060 | SIP | TCP/UDP | Expose only with access controls |
| 5061 | SIP over TLS | TCP | Expose only with access controls |
| 5432 | PostgreSQL | TCP | Do not expose to the internet |
| 5900 | VNC | TCP | Do not expose to the internet |
| 6379 | Redis | TCP | Do not expose to the internet |
| 8080 | HTTP alternate | TCP | Expose only with access controls |
| 8443 | HTTPS alternate | TCP | Expose only with access controls |
| 9200 | Elasticsearch | TCP | Do not expose to the internet |
| 11211 | Memcached | TCP/UDP | Do not expose to the internet |
| 27017 | MongoDB | TCP | Do not expose to the internet |