What network ports are used by DSM services?
Details
The operations of DSM services require specific ports to be opened to ensure normal functionality. In this article, you can find the network ports and protocols required by DSM services for operations.
Resolution
Setup Utilities
| Type | Port Number | Protocol |
| Synology Assistant | 9999, 9998, 9997 | UDP |
Backup
| Type | Port Number | Protocol |
| Active Backup for Business | 5510 (Synology NAS)1 | TCP |
| 443 (vCenter Server and ESXi host), 902 (ESXi host), 445 (SMB for Hyper-V host), 5985 (HTTP for Hyper-V host), 5986 (HTTPS for Hyper-V host) |
TCP | |
| Data Replicator, Data Replicator II, Data Replicator III | 9999, 9998, 9997, 137, 138, 139, 445 | TCP |
| DSM 5.2 Data Backup, rsync, Shared Folder Sync, Remote Time Backup | 873, 22 (if encrypted over SSH) | TCP |
| Hyper Backup (backup destination) | 22 (rsync with transfer encryption enabled), 873 (rsync without transfer encryption), 5005 (WebDAV), 5006 (WebDAV with HTTPS) | TCP |
| Hyper Backup Vault for DSM 7.0 and above | 6281, 5000 (HTTP), 5001 (HTTPS) | TCP |
| Hyper Backup Vault for DSM 6.0 | 6281 | TCP |
| LUN Backup | 3260 (iSCSI), 873, 22 (if encrypted over SSH) | TCP |
| Snapshot Replication | 5000 (HTTP), 5001 (HTTPS) | TCP |
| 5566 (Advanced LUNs and shared folders) | TCP | |
| 3261 (Legacy Advanced LUNs) | TCP |
Download
| Type | Port Number | Protocol |
| BT | For DSM 2.0.1 or above: 16881, For DSM 2.0.1-3.0401 or below: 6890-6999 |
TCP/UDP |
| eMule | 4662 | TCP |
| 4672 | UDP |
Web Applications
| Type | Port Number | Protocol |
| DSM | 5000 (HTTP), 5001 (HTTPS) | TCP |
Mail Service
| Type | Port Number | Protocol |
| IMAP | 143 | TCP |
| IMAP over SSL/TLS | 993 | TCP |
| POP3 | 110 | TCP |
| POP3 over SSL/TLS | 995 | TCP |
| SMTP | 25 | TCP |
| SMTP-SSL | 465 | TCP |
| SMTP-TLS | 587 | TCP |
File Transferring
| Type | Port Number | Protocol |
| AFP | 548 | TCP |
| CIFS/SMB | smbd: 139 (netbios-ssn), 445 (microsoft-ds) | TCP/UDP |
| Nmbd: 137, 138 | UDP | |
| FTP, FTP over SSL, FTP over TLS | 21 (command), 20 (data connection in Active Mode), 1025-65535 (data connection in Passive Mode)2 |
TCP |
| iSCSI | 3260, 3263, 3265 | TCP |
| NFS | 111, 892, 2049 | TCP/UDP |
| TFTP | 69 | UDP |
| WebDAV | 5005, 5006 (HTTPS) | TCP |
Packages
| Type | Port Number | Protocol |
| Audio Station | 1900 (UDP), 5000 (HTTP), 5001 (HTTPS), 5353 (Bonjour service), 6001-6010 (AirPlay control/timing) | TCP/UDP |
| Active Backup for Google Workspace | 443 (API) 3 | TCP |
| Active Backup for Microsoft 365 | 443 (API)4 | TCP |
| C2 Identity Edge Server | 389 (LDAP), 7712 (HTTP), 8864 | TCP |
| 53 | UDP | |
| Central Management System | 5000 (HTTP), 5001 (HTTPS) | TCP |
| CIFS Scale-out Cluster | 49152-49252 | TCP/UDP |
| 17909, 17913, 19998, 24007, 24008, 24009-24045, 38465-38501, 4379 | TCP | |
| Cloud Station | 6690 | TCP |
| DHCP Server | 53, 67, 68 | TCP/UDP |
| DNS Server | 53 (named) | TCP/UDP |
| LDAP Server (formerly Directory Server) | 389 (LDAP), 636 (LDAP with SSL) | TCP |
| Download Station | 5000 (HTTP), 5001 (HTTPS) | TCP |
| File Station | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Hybrid Share | 50051 (catalog), 443 (API), 4222 (NATS) | TCP |
| iTunes Server | 3689 | TCP |
| Log Center (syslog server) | 514 (additional port can be added) | TCP/UDP |
| Logitech® Media Server | 3483, 9002 | TCP |
| MailPlus Server | 1344, 4190, 5000 (HTTP), 5001 (HTTPS), 5252, 8500-8520, 8893, 9526-9529, 10025, 10465, 10587, 11211, 11332-11334, 12340, 24245, 24246 | TCP |
| MailPlus web client | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Mail Station | 80 (HTTP), 443 (HTTPS) | TCP |
| Media Server | 1900 (UPnP), 50001 (content browsing), 50002 (content streaming) | TCP/UDP |
| Migration Assistant | 7400-7499 (DRBD), 22 (SSH)5 | DRBD |
| Note Station | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Photo Station, Web Station | 80 (HTTP), 443 (HTTPS) | TCP |
| Presto File Server | 3360, 3361 | TCP/UDP |
| Proxy Server | 3128 | TCP |
| RADIUS Server | 1812, 18120 | UDP |
| SMI-S Provider | 5988 (HTTP), 5989 (HTTPS) | TCP |
| Surveillance Station | 5000 (HTTP), 5001 (HTTPS), 1935 (RTMP) | TCP |
| Synology Calendar | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Synology CardDAV Server | 8008 (HTTP), 8443 (HTTPS) | TCP |
| Synology Chat | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Synology Contacts | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Synology Directory Server | 88 (Kerberos), 389 (LDAP), 464 (Kerberos password change) | TCP/UDP |
| 135 (RPC Endpoint Mapper), 636 (LDAP SSL), 1024 (RPC), 3268 (LDAP GC), 3269 (LDAP GC SSL), 49152 (RPC)6, 49300-49320 (RPC) | TCP | |
| Synology Drive Server | 80 (link sharing), 443 (link sharing), 5000 (HTTP), 5001 (HTTPS), 6690 (file syncing/backup) | TCP |
| Synology High Availability (HA) | 123 (NTP), ICMP, 5000 (HTTP), 5001 (HTTPS), 1234, 9997, 9998, 9999 (Synology Assistant), 874, 5405, 5406, 7400-7999 (HA) |
TCP/UDP |
| Synology Moments | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Synology Photos | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Video Station7 | 1900 (UDP), 5000 (HTTP), 5001 (HTTPS), 9025-9040, 5002, 5004, 65001 (for using the HDHomeRun network tuner) | TCP/UDP |
| Virtual Machine Manager | 2379-2382 (cluster network), ICMP, 3260-3265 (iSCSI), 5000 (HTTP), 5001 (HTTPS), 5566 (replication), 16509, 16514, 30200-30300, 5900-5999 (QEMU), 2385 (Redis Server) | TCP |
| VPN Server (OpenVPN) | 1194 | UDP |
| VPN Server (PPTP) | 1723 | TCP |
| VPN Server (L2TP/IPSec) | 500, 1701, 4500 | UDP |
Mobile Applications
| Type | Port Number | Protocol |
| DS audio | 5000 (HTTP), 5001 (HTTPS) | TCP |
| DS cam | 5000 (HTTP), 5001 (HTTPS) | TCP |
| DS cloud | 6690 | TCP |
| DS file | 5000 (HTTP), 5001 (HTTPS) | TCP |
| DS finder | 5000 (HTTP), 5001 (HTTPS) | TCP |
| DS get | 5000 (HTTP), 5001 (HTTPS) | TCP |
| DS note | 5000 (HTTP), 5001 (HTTPS) | TCP |
| DS photo | 80(HTTP), 443 (HTTPS) | TCP |
| DS video | 5000 (HTTP), 5001 (HTTPS) | TCP |
| MailPlus | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Synology Drive | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Synology Moments | 5000 (HTTP), 5001 (HTTPS) | TCP |
| Synology Photos | 5000 (HTTP), 5001 (HTTPS) | TCP |
Peripheral Equipment
| Type | Port Number | Protocol |
| Bonjour | 5353 | UDP |
| LPR | 515 | UDP |
| Network Printer (IPP)/CUPS | 631 | TCP |
| Network MFP | 3240-3259 | TCP |
| UPS | 3493 | TCP |
System
| Type | Port Number | Protocol |
| LDAP | 389, 636 (SLAPD) | TCP |
| MySQL | 3306 | TCP |
| NTP | 123 | UDP |
| Resource Monitor/SNMP | 161 | TCP/UDP |
| SSH/SFTP | 22 | TCP |
| Telnet | 23 | TCP |
| WS-Discovery | 3702 | UDP |
| WS-Discovery | 5357 (Nginx) | TCP |
Notes:
- For the backup destination of Synology NAS, Hyper-V, or physical Windows/Linux/macOS devices.
- The default range varies according to your Synology product models.
- Allow access to the following websites: synology.com, googleapis.com, google.com, and googleusercontent.com.
- Allow access to the following websites: synology.com, synooauth.synology.com, sy.to, kb.synology.com, microsoft.com, microsoftonline.com, office365.com, sharepoint.com, chinacloudapi.cn (China only), and outlook.cn (China only).
- For the SSH service that runs on a customized port, make sure the port is accessible.
- Only Synology Directory Server version 4.10.18-0300 requires port 49152.
- Video Station has been discontinued since DSM 7.2.2. Refer to the recommended alternative solutions.
