Which ports should be opened in the firewall on a Plesk server

Question

Which ports should be opened in the firewall on a Plesk server?

Answer

The list of ports that need to be opened in the firewall depend on the services that are running on a Plesk server.

Plesk interface uses port 8443 for HTTPS connections and 8880 for HTTP connections.

Other ports that are used by Plesk and related services:

• 20 – ftp-data (TCP)

• 21 – ftp (TCP)

• 22 – ssh (TCP)

• 25 – smtp (TCP)

• 53 – dns (TCP and UDP)

• 80 – http (Web server and Plesk updater) (TCP)

• 106 – poppassd (for localhost only) (TCP)

• 110 – pop3 (TCP)

• 113 – auth (TCP)

• 143 – imap (TCP)

• 443 – https (TCP)

• 465 – smtps (TCP)

• 587 – mail message submission (TCP)

• 953 – rndc (TCP)

• 990 – ftps (TCP)

• 993 – imaps (TCP)

• 995 – pop3s (TCP)

• 1433 – mssql (TCP) – Windows Only

• 3306 – mysql (TCP)

• 3389 – rdp (TCP) – Windows Only

• 5224 – (outgoing connections only) plesk-license-update (TCP)

• 5432 – postgres (TCP) – Linux Only

• 8401 – sqladmin (TCP) – Windows Only

• 8443 – plesk-https (TCP)

• 8447 – autoinstaller (TCP)

• 8880 – plesk-http (TCP)

• 12768 – psa-pc-remote (for localhost only) (TCP) – Linux only, Postfix

• 135, 139, 445 – (TCP) ports for migration – Windows Only

• 137, 138 – (UPD) ports for migration – Windows Only

• 10155 – (TCP) for a custom Plesk Migrator service performing miscellaneous tasks – Windows Only

• 10156 – (TCP) for rsync server (migration) – Windows Only

• 49152-65535 – (TCP) for passive mode (incoming connections only)