Home > Ask the Security Experts > Network Security Questions & Answers > What are the security risks of opening port 110 and port 25?
Ask The Security Expert: Questions & Answers
EMAIL THIS

What are the security risks of opening port 110 and port 25?

Mike Chapple, featured expert EXPERT RESPONSE FROM: Mike Chapple, featured expert

Pose a Question
Other Security Categories
Meet all Security Experts
Become an Expert for this site


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


>
QUESTION POSED ON: 11 November 2008
We wish to allow an external manufacturer to remotely access the copiers that it leases to us, so it can obtain monthly meter readings. The company requires either port 110 or port 25. A free tool revealed that both of these ports are closed. We are an office with a small server. How do I open these ports, and will that have any security repercussions?

>
This is a common scenario: many organizations lease office equipment, and the companies providing that equipment often need access to the electronic meters for billing purposes. I'm not concerned about the type of information they're requesting.

On the other hand, this request sounds a little fishy from a technical perspective. Port 110 is used by the POP3 protocol for unencrypted access to electronic mail. The port is intended for end-users to connect to a mail server to retrieve messages. I can't imagine any reason that this port would be used in this case.

Port 25 is used by the SMTP protocol to send mail. The use of this port sounds a little more reasonable, but only if the request is that the copier be allowed to connect to your mail server on port 25. Port 25 would be used to send mail from the copier to the company, and there should be no reason you would have to allow inbound access to the copier on it.

The "how" part of your question depends upon your network topology. If the copier and your mail server are on the same network segment, you shouldn't need to change anything. If they're on different network segments, and those segments are separated by a firewall, you'll need to create a firewall rule that allows port 25 connections from the copiers to the mail server. See your firewall documentation for more on exactly how to do this.

More information:

  • Learn how open ports can increase LAN exposure.
  • Another reader asks Mike Chapple, "What is the relationship between open port range and overall security risk?"


  • BROWSE BY TAG
    Network Security,   Application and Platform Security,   Email Protection,   Email Security Guidelines, Encryption and Appliances,   VIEW ALL TAGS

    Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



    RELATED CONTENT
    Network Security
    How to set up a split-tunnel VPN in Windows Vista
    What is the difference between static and dynamic network validation?
    Port scan attack prevention best practices
    Securing the intranet with remote access VPN security
    How to prevent network sniffing and eavesdropping
    How to implement virtual firewalls in a complex network infrastructure
    How to manage network bandwidth with distributed ISP bandwidth
    How to edit group policy objects to give a user local admin rights
    How to prevent operating system cloning with AES 256-bit encryption
    How to securely connect a LAN POS to a remote point-of-sale device

    Email Security Guidelines, Encryption and Appliances
    How to confirm the receipt of an email with security protocols
    Best Email Security Products
    Can an IP spoofing tool be used to spam SPF servers?
    WatchGuard acquires email and Web security vendor BorderWare
    McAfee to acquire email SaaS vendor MX Logic
    What does 'invoked by uid 78' mean?
    How to configure firewall ports for webmail system implementation
    Fierce competition prompted new Cisco email security options
    Cisco brings email security appliances closer to SaaS
    Cisco offers more email security choices, but lacks vision

    RELATED GLOSSARY TERMS
    Terms from Whatis.com − the technology online dictionary
    asymmetric cryptography  (SearchSecurity.com)
    challenge-response system  (SearchSecurity.com)
    cryptographic checksum  (SearchSecurity.com)
    data encryption/decryption IC  (SearchSecurity.com)
    elliptical curve cryptography  (SearchSecurity.com)
    Escrowed Encryption Standard  (SearchSecurity.com)
    MPPE  (SearchSecurity.com)
    Quiz: Cryptography  (SearchSecurity.com)
    session key  (SearchSecurity.com)
    Twofish  (SearchSecurity.com)

    RELATED RESOURCES
    2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
    Search Bitpipe.com for the latest white papers and business webcasts
    Whatis.com, the online computer dictionary



    Search and Browse the Expert Answer Center
    Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.
    Browse our Expert Advice



    Find Security Solutions for Your Business
    TechTarget Security Media
    Information Security View this month\\'s issue and subscribe today.
    Information Security Decisions Apply online for free conference admission.
    SearchSecurity.com
    HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

    About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
    TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

    TechTarget Corporate Web Site  |  Media Kits  |  Site Map




    All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
      TechTarget - The IT Media ROI Experts