How to Open Port 25 (SMTP) on Any Version of Windows

Download Article

Allow outbound connections on TCP port 25 in Windows

Download Article

Windows Vista and Later

|

Windows XP

|

Video

|

Q&A

|

Tips

Are you hosting a mail server on your Windows PC? If you want to allow users to send mail through a mail server like Exchange, Docker, or hMail, you'll need to make sure the SMTP port, port 25, is open.^{[1]XResearch source} Because port 25 is often exploited by spammers, it's closed by default in Windows Firewall. Fortunately, it's easy to open port 25 on any version of Windows—just make sure to only allow connections from users you trust. This How.com.vn article will teach you how to open port 25 on Windows Firewall using Window 11, Windows 10, Windows Server 2019, and virtually any other version of Windows.

Things You Should Know

Open Windows Defender Firewall from the Control Panel.
Go to Advanced Settings > Inbound Rules > New Rule.
Select "Port," enter 25, click "Next," and choose your preferences.

Method 1

Method 1 of 2:

Windows Vista and Later

Download Article

1
Open the Control Panel. If you're using a modern version of Windows like Windows 11, Windows 10, or even Windows 8.1, type control panel into the Windows Search bar, then click Control Panel in the search results. If you have Windows Vista, click Control Panel in the Start menu.
- This method will work for Windows 11, 10, 8.1, 7, and Vista. It will also work for Windows Server 2012, 2016, 2019, and 2022.
2
Click Windows Defender Firewall. If you're using an older version of Windows, this will be called Windows Firewall instead.
- If you don't see this option, click the drop-down menu and select Small icons first.
Advertisement
This is in the left panel.
It's at the top of the left panel. This displays your current firewall rules pertaining to inbound connections.
It's at the upper-right corner of the window under "Actions."
This tells the New Inbound Rule Wizard that you want to make changes to a port.
Select "TCP" at the top, select "Specific local ports" in the second section, and then type 25 into the "Specific local ports" box.
8
Choose which connections to allow and click Next. On the next screen, choose one of the two "Allow" options that best fits how accessible you want to make port 25 to other users.
- Choose Allow the connection to allow any connection, even if they're not protected by IPsec. This is not the safest option, as you won't be able to limit connections by authenticated users or systems on the network.
- Choose Allow the connection if it is secure to allow only IPsec authenticated connections. If you choose this option, you can click Customize… to select security options, such as requiring incoming connections to be encrypted.
- Alternatively, if you wanted to block access to port 25, you could choose Block connections.
9
If only allowing secure connections, select who can connect. The next screens will be a little different depending on which options you selected earlier. If you're allowing all unsecured connections on port 25, just skip to the next step.
- To only allow users with accounts on this system to connect, check the box under "Authorized users," and then add the users who should be able to send mail through port 25 on this server.
- To block certain users from port 25, check the box under "Exceptions," then add the users you want to block.
- When you're finished, click Next.
- On the next screen, you can authorize access to port 25 from specific devices on your network, or block certain devices. If you chose authorized users, it's not required that you specify specific computers.
- Click Next to continue.
Whether you're opening port 25 to secure connections only or all connections, you'll now see the "Where does this rule apply?" screen. You can choose to only keep the port open when the PC is on a specific domain, a private network, a public network, or any/all of the above.
Type a name like "SMTP" or "Outbound mail" so you can easily find the rule on the "Inbound Rules" list later. Then, click Finish to finish opening port 25.
12
Test the port. To make sure the port is open and accessible from within your network, use telnet.
- First, make sure your mail server is open and ready to accept connections.
- Open the Command Prompt as an administrator.
- If you're using Windows 10 or Windows 11, run this command to enable telnet: dism /online /Enable-Feature /FeatureName:TelnetClient.
- Type telnet yourservername.yourserver.com 25 (replace the hostname with your server's hostname or IP address) and press Enter.
- Right-click Windows Defender Firewall with Advanced Security at the top-left corner of your Firewall settings and choose Properties. Select your profile, set inbound connections to "Allow," and save your changes.
- If you still can't connect, you may have another firewall rule that overrides this one, or you need to set up port forwarding for port 25 on your router.

Method 2

Method 2 of 2:

Windows XP

Download Article

You can do so by clicking the Start menu and selecting Control Panel.
If you don't see this option, click Switch to Classic View in the left panel first.
It's at the top of the Windows Firewall window.
This button is below the list.
5
Open port 25 and click OK. Type a "25" into the port number field. You'll also want to give this port a name, such as SMTP or Outbound Mail. Click OK to save the rule.
- "TCP" is selected by default. Don't change this setting.
6
Click OK to save your changes.
- If the port is not working, return to Windows Firewall, click the General tab, and remove the checkmark from "Don't allow exceptions."

Community Q&A

Search

Add New Question

Question
How do I open port 25 on a macOSX?
Community Answer
Run an email server, and open it in any firewalls. Go into your cable modem/dsl modem and find 'NAT' which is Network Address Translation, and set it up to forward port 25 externally to port 25 internally to the IP address of your computer.
Thanks! We're glad this was helpful.
Thank you for your feedback.
If How.com.vn has helped you, please consider a small contribution to support us in helping more readers like you. We’re committed to providing the world with free how-to resources, and even $1 helps us in our mission.Support How.com.vn
Yes No
Not Helpful 4 Helpful 13

Ask a Question

200 characters left

Include your email address to get a message when this question is answered.

Submit

Video

Tips

If your organization uses Microsoft Exchange alongside Microsoft 365 as a hybrid deployment, you will also need to open ports 443 (HTTPS) and port 80 (HTTP).^{[2]XResearch source}
Thanks
Helpful0 Not Helpful0
If you're using a home internet service provider instead of one for businesses, your ISP may be blocking port 25. Contact your ISP if you've opened port 25 on both Windows Firewall and your router and still cannot relay mail through the port.
Thanks
Helpful0 Not Helpful0