U

Thursday, August 3rd, 2023 3:09 AM

Closed

Port 25

What is the magical incantation required to get port 25 unblocked?

I have run a personal email server.  For that machine to be able to receive mail, it has to be able to listen on port 25.  This can not be 587 or any other port, for it to work it must be port 25.  Abandoning the server and moving to a different solution is not a viable option at this time, neither is going without it.

That I absolutely must have this server online, and inter-server email operates solely on port 25, so I need it unblocked, is about as specific as I believe it is possible to go.

But if there are any details that I am lacking, I will gladly provide them.

Thank you

Expert

 • 

31.5K Messages

2 years ago

@user_365779 

A lot of people have asked for port 25 to be unblocked and a few have gotten it, but most people generally don't.  You can try calling Customer Security Assurance and asking them.

Customer Security Assurance
Business Hours: 8:00am - 12:00am EST, 7 days a week  
Contact: 1-888-565-4329 

Official Employee

 • 

3.1K Messages

2 years ago

Hey there, thanks for reaching out through Xfinity Forums! Email is used for important communications and Comcast wants to ensure that these communications are as secure and as private as possible. As such, Comcast does not support port 25 for the transmission of email by our residential Internet customers. Much of the current use of port 25 is by computers that have been infected by malware and are sending spam without the knowledge of the users of those computers.

 

Here is a link with more details on why Port 25 is not supported, https://www.xfinity.com/support/articles/email-port-25-no-longer-supported. Please let us know if you have any additional questions. 

 

3 Messages

@XfinityJeniece​ It is good to know that you are proficient at repeating the company line. Blocking port 25 due to the risk of potential abuse is kind of like blocking email because it is prone to phishing. I suspect that the policy is due to some other reason (perhaps Xfinity just doesn't want its customers operating mail servers) and the current policy is a cover up. In any case, it is impossible to operate a mail server without access to port 25. I have been operating a mail server for over 15 years. I know what I am doing. I will not set up an open relay. I probably won't even allow outgoing email. We know that it is possible to open port 25. The intent of my question was simply to find out what hoops I would have to jump through to get the port opened If worst comes to worst, I'm under no contract with Xfinty so I could presumably easily switch to a different internet provider. For now, I will simply contact the Customer Security Assurance team a few times each day until they get tired of hearing from me.

Problem Solver

 • 

1.5K Messages

@user_365779​ Or just pay a port redirect service $12/year, make them your primary MX and they'll sing mail to whatever port you want that isn't blocked.  Submit on 587, and you also won't run into that problem were the rest of us are all blocking all the ISP's consumer dhcp pools and rejecting your mail as spam.

Your mail will also queue up at the redirect when your IP address changes , so you won't loose anything while you fix your redirect IP address when that happens.

3 Messages

Great suggestion. Currently I have Namecheap forwarding email from my registered domain, but I didn't see any suggestion that they do port forwarding as well. Can you suggest the names of companies that do port forwarding?

Problem Solver

 • 

1.5K Messages

@user_365779​  Used dynu (dot) com in the past.  They're legit.  Just get a $25 prepaid visa card if you don't trust online folks, or don't want it tied to anything you have financially, and you're good to go.  I've moved on to just leasing rack space these days at decent hosting company with good reputation IP blocks in a bigger setup.

As far as the TOS goes and acceptable use policy, if you are running email hosting for yourself, that's fine.  Running email hosting for others, that's not.  A redirect service is the same thing as checking your email on another email provider.  You are authorized to send mail using Xfinity's email servers, and it is also acceptable to send email using some other email provider.  

Gold Problem Solver

 • 

26.4K Messages

2 years ago

... I have run a personal email server.  ...

Whatever the reason for the policy, Comcast's Internet AUP ( https://www.xfinity.com/Corporate/Customers/Policies/HighSpeedInternetAUP ) states:

... prohibited uses and activities include ... using the Service ... to ...

  • use or run dedicated, stand-alone equipment or servers from the Premises that provide network content or any other services to anyone outside of your Premises local area network (“Premises LAN”), also commonly referred to as public services or servers. Examples of prohibited equipment and servers include, but are not limited to, email, web hosting, file sharing, and proxy services and servers;
Please be aware that there are 2 kinds of responses in this Forum: Replies and Comments. When you Comment on a post by scrolling down to "Comment on this post here...", I am notified of your response. But if you select Reply, I am NOT notified and may not be aware of your response.
forum icon

New to the Community?

Start Here