Port 25 — SMTP
TCP well-known
What runs on port 25
Server-to-server mail transfer.
Security considerations
Most residential ISPs and cloud providers block outbound 25 to limit spam. For sending mail from an application use port 587 with authentication.
Checking whether something is listening
# Linux / macOS — what is bound to the port
sudo lsof -i :25
sudo ss -lntp | grep :25
# Windows
netstat -ano | findstr :25
Get-NetTCPConnection -LocalPort 25
# is it reachable from outside?
nc -zv example.com 25
curl -v telnet://example.com:25
Freeing the port
# find the process, then stop it
sudo lsof -ti :25 | xargs kill # Linux / macOS
netstat -ano | findstr :25 # note the PID, then:
taskkill /PID <pid> /F # Windows
Should this port be open to the internet?
Only on a mail server. If this port is open on something that is not intentionally handling mail, you may be running an open relay — which will get the IP blacklisted quickly.
Quick reference
| Port | 25 |
| Protocol | TCP |
| Service | SMTP |
| Range | Well-known (0–1023) — binding requires root on Unix |
Frequently asked questions
What is port 25 used for?
Server-to-server mail transfer.
Is it safe to open port 25?
Most residential ISPs and cloud providers block outbound 25 to limit spam. For sending mail from an application use port 587 with authentication.
How do I check if port 25 is open?
Locally, sudo lsof -i :25 on macOS or Linux, or netstat -ano | findstr :25 on Windows. From outside, nc -zv host 25 tells you whether anything answers.
Why do I get "address already in use" on port 25?
Another process is bound to it — often a previous run of your own program that did not exit cleanly. Find it with lsof -ti :25 and stop it, or configure your application to use a different port.
Can I change the port this service uses?
Almost always yes, in the service's configuration. Moving off a default port reduces automated scan noise, but it is obfuscation rather than security — a real attacker scans all 65,535.