How to Open Port 25 (SMTP) on Any Version of Windows

PDF download Download Article
Allow outbound connections on TCP port 25 in Windows
PDF download Download Article

Are you hosting a mail server on your Windows PC? If you want to allow users to send mail through a mail server like Exchange, Docker, or hMail, you'll need to make sure the SMTP port, port 25, is open. [1] Because port 25 is often exploited by spammers, it's closed by default in Windows Firewall. Fortunately, it's easy to open port 25 on any version of Windows—just make sure to only allow connections from users you trust. This wikiHow article will teach you how to open port 25 on Windows Firewall using Window 11, Windows 10, Windows Server 2019, and virtually any other version of Windows.

Things You Should Know

  • Open Windows Defender Firewall from the Control Panel.
  • Go to Advanced Settings > Inbound Rules > New Rule.
  • Select "Port," enter 25, click "Next," and choose your preferences.
Method 1
Method 1 of 2:

Windows Vista and Later

PDF download Download Article
  1. If you're using a modern version of Windows like Windows 11, Windows 10, or even Windows 8.1, type control panel into the Windows Search bar, then click Control Panel in the search results. If you have Windows Vista, click Control Panel in the Start menu.
    • This method will work for Windows 11, 10, 8.1, 7, and Vista. It will also work for Windows Server 2012, 2016, 2019, and 2022.
  2. If you're using an older version of Windows, this will be called Windows Firewall instead.
    • If you don't see this option, click the drop-down menu and select Small icons first.
    Advertisement
  3. This is in the left panel.
  4. It's at the top of the left panel. This displays your current firewall rules pertaining to inbound connections.
  5. It's at the upper-right corner of the window under "Actions."
  6. This tells the New Inbound Rule Wizard that you want to make changes to a port.
  7. Select "TCP" at the top, select "Specific local ports" in the second section, and then type 25 into the "Specific local ports" box.
  8. On the next screen, choose one of the two "Allow" options that best fits how accessible you want to make port 25 to other users.
    • Choose Allow the connection to allow any connection, even if they're not protected by IPsec. This is not the safest option, as you won't be able to limit connections by authenticated users or systems on the network.
    • Choose Allow the connection if it is secure to allow only IPsec authenticated connections. If you choose this option, you can click Customize… to select security options, such as requiring incoming connections to be encrypted.
    • Alternatively, if you wanted to block access to port 25, you could choose Block connections .
  9. The next screens will be a little different depending on which options you selected earlier. If you're allowing all unsecured connections on port 25, just skip to the next step.
    • To only allow users with accounts on this system to connect, check the box under "Authorized users," and then add the users who should be able to send mail through port 25 on this server.
    • To block certain users from port 25, check the box under "Exceptions," then add the users you want to block.
    • When you're finished, click Next .
    • On the next screen, you can authorize access to port 25 from specific devices on your network, or block certain devices. If you chose authorized users, it's not required that you specify specific computers.
    • Click Next to continue.
  10. Whether you're opening port 25 to secure connections only or all connections, you'll now see the "Where does this rule apply?" screen. You can choose to only keep the port open when the PC is on a specific domain, a private network, a public network, or any/all of the above.
  11. Type a name like "SMTP" or "Outbound mail" so you can easily find the rule on the "Inbound Rules" list later. Then, click Finish to finish opening port 25.
  12. To make sure the port is open and accessible from within your network, use telnet .
    • First, make sure your mail server is open and ready to accept connections.
    • Open the Command Prompt as an administrator .
    • If you're using Windows 10 or Windows 11, run this command to enable telnet: dism /online /Enable-Feature /FeatureName:TelnetClient .
    • Type telnet yourservername.yourserver.com 25 (replace the hostname with your server's hostname or IP address) and press Enter .
    • Right-click Windows Defender Firewall with Advanced Security at the top-left corner of your Firewall settings and choose Properties. Select your profile, set inbound connections to "Allow," and save your changes.
    • If you still can't connect, you may have another firewall rule that overrides this one, or you need to set up port forwarding for port 25 on your router.
    13. Advertisement
Method 2
Method 2 of 2:

Windows XP

PDF download Download Article
  1. You can do so by clicking the Start menu and selecting Control Panel .
  2. If you don't see this option, click Switch to Classic View in the left panel first.
  3. It's at the top of the Windows Firewall window.
  4. This button is below the list.
  5. Type a "25" into the port number field. You'll also want to give this port a name, such as SMTP or Outbound Mail. Click OK to save the rule.
    • "TCP" is selected by default. Don't change this setting.
    • If the port is not working, return to Windows Firewall, click the General tab, and remove the checkmark from "Don't allow exceptions."
    7. Advertisement

Community Q&A

Search
Add New Question
  • Question
    How do I open port 25 on a macOSX?
    Community Answer
    Run an email server, and open it in any firewalls. Go into your cable modem/dsl modem and find 'NAT' which is Network Address Translation, and set it up to forward port 25 externally to port 25 internally to the IP address of your computer.
    Thanks! We're glad this was helpful.
    Thank you for your feedback.
    If wikiHow has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission. Support wikiHow
    Yes No
    Not Helpful 5 Helpful 13
Ask a Question
200 characters left
Include your email address to get a message when this question is answered.
Submit
      Advertisement

      Video

      Tips

      • If your organization uses Microsoft Exchange alongside Microsoft 365 as a hybrid deployment, you will also need to open ports 443 (HTTPS) and port 80 (HTTP). [2]
        Thanks
        Helpful 0 Not Helpful 0
      • If you're using a home internet service provider instead of one for businesses, your ISP may be blocking port 25. Contact your ISP if you've opened port 25 on both Windows Firewall and your router and still cannot relay mail through the port.
        Thanks
        Helpful 0 Not Helpful 0
      Submit a Tip
      All tip submissions are carefully reviewed before being published
      Name
      Please provide your name and last initial
      Submit
      Thanks for submitting a tip for review!
      Advertisement

      You Might Also Like

      How to
      Open a Port to Allow Connections Through Your Firewall
      How to
      Find the MAC Address of Your Computer
      How to
      Check if a Port is Open: 5 Quick Ways
      How to
      Forward a Port on Any Router: Easy Guide
      Connect Two Computers: Microsoft Windows & Mac OS X
      How to
      Flush DNS (Clear the Cache) in All Major Operating Systems
      3 Ways to Change a Computer's Mac Address in Windows
      How to
      Get a MAC Address from an IP Remotely
      How to
      Create a Local Area Network (LAN)
      How to
      Join a Domain on a Windows Computer or Mac
      Easy Ways to Set Up and Connect to a Local Area Network (LAN)
      How to
      Connect One Router to Another to Expand a Network
      How to
      Set up a Shared Network Drive
      How to
      Bypass a Firewall or Internet Filter
      Advertisement

      References

      1. ↑ https://learn.microsoft.com/en-us/exchange/plan-and-deploy/deployment-ref/network-ports?view=exchserver-2019
      2. ↑ https://learn.microsoft.com/en-us/exchange/hybrid-deployment-prerequisites

      About This Article

      In other languages
      Thanks to all authors for creating a page that has been read 340,658 times.

      Is this article up to date?

      Advertisement