Jump to content

Open port

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Capi (talk | contribs) at 05:32, 13 December 2009 (major rewrite for technical accuracy). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

In security parlance, the term open port is used to mean a TCP/IP port number that is configured to accept packets. In contrast, a port which ignores all packets directed at it is commonly referred to as a "closed port".[1]

Ports are an integral part of the Internet's communication model โ€” they are the channel through which applications on the client computer can reach the software on the server. Services, such as web pages or FTP, require their respective ports to be open on the server in order to be publicly reachable.

The above use of the terms "open" and "closed" can sometimes be misleading, though; it blurs the distinction between a given port being reachable (unfiltered) and whether or not there is an application actually listening on that port. Technically, a given port being "open" (in this context, reachable) is not enough for a communication channel to be established. There needs to be an application (service) listening on that port, accepting the incoming packets and processing them. If there is no application listening on a port, incoming packets to that port will simply be rejected by the computer's operating system.

Ports can be "closed" (in this context, filtered) through the use of a firewall. The firewall will filter incoming packets, only letting through those packets for which it has been configured. Packets directed at a port which the firewall is configured to "close" will simply be dropped in transit, as though they never existed. It is common security practice to close unused ports in personal computers, so as to block public access to any services which might be running on the computer without the user's knowledge, whether due to misconfiguration, presence of malicious software, or simply the user not knowing about it.

Malicious hackers (or crackers) commonly use port scanning software to find which ports are "open" (unfiltered) in a given computer, and whether or not an actual service is listening on that port.


See also

References