Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
To open SMTP port 25 on Ubuntu, make sure an SMTP service is listening, permit TCP/25 in every firewall between the Internet and the server, and test from a different machine. On the server, verify a listener with sudo ss -utlnp | grep ':25', allow the port with sudo ufw allow 25/tcp, check the policy with sudo ufw status verbose, and test remotely with nc -vz server.example.com 25 or telnet mail.example.com 25. A UFW rule alone does not create an SMTP service or make an upstream provider firewall allow the traffic.
What “open port 25” actually means
Ubuntu security documentation defines an open port as “a network port bound to a service and actively listening for incoming connections or packets.” That definition matters because three separate conditions must be true:
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minute- An SMTP daemon, such as Postfix, must be running and listening on TCP port 25.
- The Ubuntu host firewall must permit incoming TCP traffic to port 25.
- Any upstream firewall, cloud security group, hosting policy, router, or network provider must also permit the connection.
Port 25 is traditionally used for server-to-server SMTP delivery. Opening it is an inbound-access decision. It is not required merely because software on the server needs to send outbound mail, and it is different from authenticated mail submission, which is commonly handled on another port under a separate policy.
Decide whether port 25 should be exposed
Receiving mail directly
If this server is intended to receive mail for a domain, it normally needs an SMTP listener reachable by other mail servers. Install and configure an SMTP service, publish the appropriate mail DNS records, and make sure the service is prepared to accept only the domains and recipients it is responsible for.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Sending mail through a relay
If the server only sends application notifications through a managed or organizational relay, direct Internet ingress on port 25 may be unnecessary. A relay can accept authenticated submissions on another port and deliver the messages on your behalf. Do not expose port 25 simply to make outbound mail work; outbound and inbound traffic are separate directions and separate security decisions.
Limiting access to a known sender
When only one relay, monitoring host, or partner should connect, a source-restricted UFW rule is safer than allowing every Internet address. You can replace the example address below with the actual trusted source:
Free tools Windows power users keep installed
One-click scans. No signup required.
sudo ufw allow from 203.0.113.10 to any port 25 proto tcpSource restriction reduces the attack surface, but the SMTP service must still enforce relay restrictions and authentication. A firewall rule does not prevent a misconfigured mail daemon from becoming an open relay.
Check the server before changing UFW
Confirm that an SMTP daemon is listening
Run this command locally:
sudo ss -utlnp | grep ':25'The output should identify a process bound to TCP port 25. If there is no output, no local service is listening on that port, so a firewall change cannot make the port reachable. Start or configure the SMTP service first.
Pay attention to the address shown in the result. A service listening only on a loopback address accepts connections from the same machine but not from the network. For Internet delivery, the daemon must be configured to listen on the server address or addresses intended for mail traffic. Do not expose an address or protocol that the mail service is not configured to handle.
Inspect UFW’s current state
sudo ufw status verbose
sudo ufw status numberedstatus verbose shows whether UFW is active and displays the effective default policies. status numbered lists rules with numbers, which is useful when you later need to insert, review, or delete a specific rule.
Protect remote administration before enabling UFW
If you are connected over SSH and UFW is inactive, allow SSH before enabling the firewall. Otherwise, enabling UFW can remove your management access:
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
sudo ufw allow ssh
sudo ufw enableVerify the result immediately with sudo ufw status verbose. If an existing firewall or provider security group is already enforcing policy, document its rules before adding another layer.
Install and configure an SMTP service
Install Postfix when the server needs a local SMTP daemon
Postfix is Ubuntu’s documented SMTP-server option. On a current Ubuntu system, install the package with:
sudo apt update
sudo apt install postfixThe package setup asks how the server should operate. Select the mode that matches the server’s role, then set the system’s mail name and destination domains deliberately. A server receiving Internet mail should be configured for its own domains and recipients, not for arbitrary destinations. A server that only relays application mail should use an authenticated relay and restrictive recipient or relay rules instead.
Ubuntu’s Postfix packaging installs the service in a chroot by default as a security measure. Treat the package’s defaults as a starting point, not proof that the configuration is safe for public Internet traffic. Before allowing unknown hosts to connect, review relay restrictions, authentication settings, recipient handling, logging, and the interfaces on which Postfix listens.
Restart or start the service after configuration
After making a valid Postfix configuration change, restart or start the service using the service-management command appropriate to the installed Ubuntu release. Then run the ss command again. The important check is not merely that the package is installed; it is that a process is actively listening on TCP/25 on the intended address.
Allow TCP port 25 in UFW
Allow port 25 for all source addresses
For a server that must accept SMTP from arbitrary Internet mail systems, add the TCP rule:
sudo ufw allow 25/tcpThis permits TCP port 25 to any address on the Ubuntu host. The service-name equivalent is:
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
sudo ufw allow smtpUse the explicit port and protocol form when you want the rule to be obvious in scripts and audits.
Preview a rule without applying it
Use UFW’s dry-run mode to inspect the generated change before committing it:
sudo ufw --dry-run allow 25/tcpA dry run is useful on production systems or when you are unsure which profile or rule syntax UFW will generate. It does not open the port.
Allow only a trusted source
For a private relay or a known partner, use a source-specific rule instead:
sudo ufw allow from 203.0.113.10 to any port 25 proto tcpThis limits the rule to TCP/25 connections originating from 203.0.113.10. Confirm that the source address is stable and is actually the address presented to your server; NAT or an intermediate relay can change it.
Confirm the effective rule
sudo ufw status verbose
sudo ufw status numberedLook for an allow rule covering TCP/25. If the policy still denies the connection, inspect rule ordering and any other host firewall mechanism running alongside UFW. A rule displayed by UFW does not override a provider-level deny or a service that is not listening.
Check provider and network firewalls
Many hosted servers have a second firewall outside Ubuntu. Cloud security groups, virtual network ACLs, hosting-control panels, dedicated-server filters, and office routers can all block TCP/25. Some providers also restrict port 25 by default to limit spam, and their policy can vary by account, region, or request status.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Check the provider’s inbound rules for the server’s public interface and allow TCP/25 there if direct delivery is permitted. If the provider blocks the port at the network edge, changing UFW cannot fix it. Ask the provider whether port 25 is filtered, whether an account review is required, and whether the restriction applies to inbound traffic, outbound traffic, or both.
Recommended Free Tools
For a server behind a router or NAT, forward TCP/25 to the Ubuntu host and ensure the public DNS name resolves to the correct public address. Test from outside the local network; a connection that works internally can still fail at the edge.
Test port 25 from another machine
Use netcat for a TCP reachability test
From a different networked machine, run:
nc -vz server.example.com 25A successful result confirms that a TCP handshake reached a listener. It does not prove that DNS records are correct, TLS is configured, authentication works, relay restrictions are safe, or the server has acceptable mail reputation.
Use telnet to inspect the SMTP banner
Ubuntu’s Postfix documentation uses this form:
telnet mail.example.com 25If the connection succeeds, an SMTP server normally presents a banner. You can issue a harmless protocol greeting such as EHLO test.example and then close the session with QUIT. Do not submit a real message during a connectivity test.
Interpret common results
| Result | What it usually indicates | Next check |
|---|---|---|
| Connection succeeds and a banner appears | TCP/25 is reachable and an SMTP service answered. | Validate DNS, TLS, authentication, recipient policy, relay restrictions, and mail logs. |
| Connection refused | The host is reachable, but no service is accepting the connection on that address and port, or an active reject is being returned. | Run sudo ss -utlnp | grep ':25' and inspect the SMTP service configuration. |
| Connection times out | Traffic is being dropped somewhere, commonly by UFW, a provider firewall, a router, or an upstream port-25 policy. | Check each firewall layer and test from a second external network. |
| IPv4 works but IPv6 fails | The hostname may resolve to both address families while the service or firewall is configured for only one. | Test each address explicitly and configure only the addresses you intend to publish. |
Why port 25 is still closed after allowing it in UFW
No SMTP process is listening
UFW controls packets; it does not launch Postfix or any other daemon. An empty result from ss means the service is stopped, failed during startup, bound to another port, or listening only on an unintended address. Correct the service configuration, start it, and repeat the local listener check.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsThe service listens on the wrong address
A listener restricted to localhost cannot accept Internet connections. Compare the address shown by ss with the server interface and the address returned by DNS. Correct the SMTP daemon’s interface settings rather than broadening firewall rules indiscriminately.
UFW is inactive, overridden, or ordered unexpectedly
sudo ufw status verbose reveals whether UFW is active. If it is active, review status numbered for conflicting rules and confirm that the rule uses TCP, not a different protocol. Also check whether another firewall framework, container network, or host policy is filtering traffic independently.
A provider or network edge blocks port 25
When local checks are correct but external tests time out, investigate the upstream firewall and provider policy. An external test from a machine on the same private network may bypass the very control that is blocking Internet traffic, so test from an unrelated network.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
DNS points somewhere else
A successful test against the server’s numeric address but a failed test against its hostname usually indicates DNS, not UFW. Verify the hostname’s A and, if used, AAAA records and wait for intended DNS changes to propagate according to their TTL.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Secure an Internet-facing SMTP listener
Ubuntu warns that open ports on untrusted networks create risk when the listening service is vulnerable or misconfigured. Port 25 should therefore be opened only for a defined mail role.
- Keep Ubuntu and the SMTP package updated.
- Configure Postfix relay restrictions before accepting Internet connections. A receiving server must not relay arbitrary mail for unauthenticated strangers.
- Use authenticated submission on an appropriate submission port for applications and users that send through your infrastructure.
- Use TLS where required by your mail policy and verify certificate and protocol settings independently of the TCP reachability test.
- Monitor mail logs, queue growth, authentication failures, and unusual connection volume.
- Restrict ingress to known sources when the server is a private relay or partner endpoint.
- Close port 25 if the service is retired or the server no longer receives mail.
A successful TCP handshake says nothing about sender reputation, reverse DNS, SPF, DKIM, DMARC, recipient acceptance, or delivery rates. Those are separate mail-system concerns that must be configured after network reachability is established.
Remove or revise the firewall rule
Delete an unrestricted allow rule
sudo ufw delete allow 25/tcpUbuntu documents this deletion syntax. If you created the rule with the service name, delete the matching service-name rule instead, or use the numbered-rule method after reviewing sudo ufw status numbered.
Replace broad access with a source restriction
First remove the broad rule, then add the source-specific rule:
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →sudo ufw delete allow 25/tcp
sudo ufw allow from 203.0.113.10 to any port 25 proto tcpCheck the numbered policy afterward so you do not leave both the unrestricted and restricted rules in place.
Quick Recap
End-to-end checklist
- Decide whether the server truly needs inbound SMTP or whether an authenticated relay is sufficient.
- Install and configure an SMTP daemon such as Postfix for the server’s exact role.
- Run
sudo ss -utlnp | grep ':25'and confirm the daemon listens on the intended address. - Ensure SSH access is allowed before enabling UFW on a remote machine.
- Run
sudo ufw allow 25/tcp, or use a source-restricted rule when only known senders need access. - Review
sudo ufw status verboseandsudo ufw status numbered. - Allow TCP/25 in the provider firewall, security group, router, or network ACL when applicable.
- From another network, run
nc -vz server.example.com 25ortelnet mail.example.com 25. - After reachability works, validate SMTP authentication, TLS, DNS, relay restrictions, logging, and mail-delivery policy.
- Delete the rule with
sudo ufw delete allow 25/tcpwhen the inbound service is no longer required.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
