TCP 10025
Synopsis
- TCP port 10025 is commonly used by Postfix as an alternate SMTP listener for reinjecting mail after content filtering.
- In the standard amavisd-new + Postfix setup, amavisd listens on 127.0.0.1:10024 and returns scanned mail to Postfix on 127.0.0.1:10025; this is the default in many Debian/Ubuntu amavisd-new packages.
- iRedMail configures Postfix to accept amavis-scanned mail on port 10025.
- Zimbra Collaboration Suite uses Postfix/Amavis with port 10025 for reinjecting scanned messages.
- Proxmox Mail Gateway employs the same 10024/10025 amavis/Postfix flow for after-scan SMTP delivery.
- Modoboa (mail server bundle) also binds Postfix on 10025 for amavis reinjection.
- Security: attackers sometimes abuse an exposed 10025 because it often bypasses normal SMTP restrictions, enabling open-relay spam if misconfigured.
Observed activity
Last 30 days
Detailed chart