Messaging Server Ports

From Messaging Server Technical Reference Wiki
Jump to: navigation, search


The Messaging Server uses different TCP (and UDP) Ports for different services. Some of these are intended for use by end-users, some for use by the deployment, and some for use only by the local host. This table lists the ports used by the product and their typical values. It's important to appropriately configure firewalls to only expose the intended ports.

Table of TCP/IP Ports used by Messaging Server
Service Port Usage Option Description
Cassandra client 9042 product deployment store.casconnectpoints Cassandra Query Protocol used by Cassandra Message Store.
Certificate Port 55443 product deployment http.cert_port Private certificate validation protocol for Convergence S/MIME client.
ClamAV Port 3310 product deployment PORT ClamAV plugin option Used to talk to ClamAV via libclamav.so spam filter plugin.
dbreplicate server & client 55000 product deployment store.dbreplicate.port Berkeley DB replication for classic store automatic failover.
DNS client 53 (UDP & TCP) nameserver in /etc/resolv.conf N/A DNS client used for MTA MX lookups, DNS RBL lookups, etc.
Elasticsearch client 9200 product deployment elasticsearch.port Port used to communicate with Elasticsearch.
ens 7997 product deployment ens.port Non-SSL product internal event notification service. Client port is specified via the ensport notifytarget option with ensusessl determining if SSL is used.
ens ssl 8997 product deployment ens.sslport SSL product internal event notification service.
icap client 1344 product deployment PORT ICAP plugin option Typically used to talk to Nortan AV via libicap.so spam filter plugin; RFC 3507.
imap 143 end-user (or product deployment with MMP) imap.port Non-SSL Internet Message Access Protocol (IMAP) RFC 3501.
imaps 993 end-user (or product deployment with MMP) imap.sslport SSL Internet Message Access Protocol (IMAP) RFC 8314, RFC 3501.
isc client 8070 product deployment isc_client.server_port Indexed search converter service used to support Elastic Search and Cassandra store search. Use isc_client.sslusessl to control SSL
isc server 8070 product deployment isc.server_port Indexed search converter service used to support Elastic Search and Cassandra store search. Use isc.sslusessl to control SSL
job controller 27442 host internal job_controller.tcp_ports Internal service used to notify job controller of message enqueues.
LDAP client 389 or 636 product deployment base.ugldapport Lightweight Directory Access Protocol (LDAPv3) RFC 4511 used for domain, user, and group lookups and authentication. Use 636 for SSL.
LMTP client 225 product deployment channel:tcp_lmtpcs.port Local Mail Transfer Protocol product interface based on RFC 2033.
LMTP server 225 product deployment dispatcher.service:LMTPSS.tcp_ports Local Mail Transfer Protocol product interface based on RFC 2033.
ManageSieve server 4190 end-user dispatcher.service:MANAGESIEVE.tcp_ports Protocol for managing Sieve scripts in RFC 5804.
memcache client 11211 product deployment mta.memcache_port A de-facto standard protocol used to talk to a fast key/value database typically used for deployment-wide tracking, metering, and rate-limiting.
metermaid client 63837 product deployment metermaid_client.server_port Product private RAM database similar to memcached. Use of memcached/Redis is recommended instead of metermaid for newer deployments.
metermaid server 63837 product deployment metermaid.port Product private RAM database similar to memcached. Use of memcached/Redis is recommended instead of metermaid for newer deployments.
mmp-imap 143 end-user imapproxy.tcp_listen:imapproxy1.tcp_ports Non-SSL MMP IMAP proxy RFC 3501.
mmp-imaps 995 end-user imapproxy.tcp_listen:imapproxy1.ssl_ports SSL MMP IMAP proxy RFC 8314, RFC 3501.
mmp-pop3 110 end-user popproxy.tcp_listen:popproxy1.tcp_ports Non-SSL MMP POP3 proxy RFC 1939.
mmp-pop3s 993 end-user popproxy.tcp_listen:popproxy1.ssl_ports SSL MMP POP3 proxy RFC 8314, RFC 1939.
mtqp client 1038 product deployment or intranet deployments mta.mtqp_port Message Tracking Query Protocol (RFC 3887) with private extensions for message recall.
mtqp server 1038 product deployment or external tracking/recall clients dispatcher.service:MTQP.tcp_ports Message Tracking Query Protocol (RFC 3887) with private extensions for message recall.
pop3 110 end-user (or product deployment with MMP) pop.port Non-SSL Post Office Protocol version 3 (POP3) RFC 1939.
pop3s 993 end-user (or product deployment with MMP) pop.sslport SSL Post Office Protocol version 3 (POP3) RFC 8314, RFC 1939.
Redis client 6379 product deployment redis.port Protocol used to talk to a Redis server key/value database typically used for deployment-wide tracking, metering, and rate-limiting.
Redis sentinel client 26379 product deployment TBD Protocol used to talk to a Redis sentinel server to determine the active Redis master host for a named Redis master/slave pool.
smpp client none product deployment sms_gateway.smpp_relay.server_port Relay port for SMS gateway via Short Message Peer-to-Peer (SMPP) service.
snmp server 161 (UDP) product deployment snmp.port SNMP monitoring port (RFC 2789, RFC 3411-3418).
smtp server 25 Internet MTAs dispatcher.service:SMTP.tcp_ports Simple Mail Transfer Protocol Relay Service (SMTP relay) RFC 5321.
Socks client 1080 product deployment socksport channel option Used to traverse a SOCKS 5 firewall (RFC 1928, RFC 1929).
Solr client 8983 product deployment store.solrconnectpoints Used by Cassandra store to bootstrap Datastax Solr search indexing. No longer used starting with Messaging Server 8.1.
Spamd client 783 product deployment PORT Spam Assassin plugin option Used to talk to Spam Assassin via libspamass.so spam filter plugin.
submission client 25 product deployment http.smtpport, alarm.noticeport Webmail & alarm SMTP Message Submission RFC 6409.
submission server 587 end-user dispatcher.service:SMTP_SUBMIT.tcp_ports Non-SSL Message Submission (SMTP submission) RFC 6409.
submissions server 465 end-user dispatcher.service:SMTP_SUBMIT.ssl_ports SSL Message Submission (SMTP submission) RFC 8314, RFC 6409.
watcher 49994 host internal watcher.port Private service to detect stressed and crashed processes for self-repair.
wmap / mshttpd 8990 product deployment http.port Non-SSL private webmail proxy layer between Convergence and IMAP, based on HTTP.
wmaps / mshttpd 8991 product deployment http.sslport SSL private webmail proxy layer between Convergence and IMAP, based on HTTP.


See also: