XEROX WorkCentre 6400 Information Assurance Disclosure Paper
18
Ver. 1.00, May 2010
Page
18 of 44
device-initiated operations (like scanning) cannot assume the existence of the tunnel unless a print job (or other
client initiated action) has been previously run since the last boot at either end of the connection.
2.8.2.
Ports
The following table summarizes all potential open ports and subsequent sections discuss each port in more detail.
Default
Port #
Type
Service name
25 TCP SMTP
53 UDP DNS
68 UDP BOOTP/DHCP
80 TCP HTTP
88 UDP Kerberos
110 TCP POP-3
client
137
UDP
NETBIOS- Name Service
138
UDP
NETBIOS-Datagram Service; SMB filing and Scan template retrieval
139
TCP
NETBIOS; SMB filing and Scan template retrieval
161 UDP SNMP
162 UDP SNMP
trap
389 UDP LDAP
396 TCP Netware
427 UDP SLP
443 TCP SSL
515 TCP LPR
631 TCP IPP
1900 UDP SSDP
3003 TCP http/SNMP
reply
9100 TCP raw
IP
Please note that there is no ftp port in this list. ftp is only used to export scanned images and to retrieve Scan Job
Templates, and will open port 21 on the remote device. An ftp port is never open on the controller itself.
2.8.2.1.
Port 25, SMTP
This unidirectional port is open only when Scan to E-mail or Internet Fax (I-Fax) is exporting images to an SMTP
server, or when email alerts are being transmitted. SMTP messages & images are transmitted to the SMTP server
from the device.
2.8.2.2.
Port 53, DNS
Designating a DNS server will allow the device to resolve domain names. This can be configured via the LocalUI or
WebUI.
2.8.2.3.
Port 68, DHCP
This port is used only when performing DHCP, and is not open all of the time. To permanently close this port, DHCP
must be explicitly disabled. This is done in User Tools via the Local User Interface or via the TCP/IP page in the
Properties tab on the WebUI.
2.8.2.4.
Port 80, HTTP