Port 67 (DHCP Server)

UDP

Dynamic Host Configuration Protocol Server — DHCP Server listens on port 67 by default.

What is Port 67?

Port 67 is used by DHCP (Dynamic Host Configuration Protocol) servers to listen for client requests. DHCP automates the assignment of IP addresses, subnet masks, default gateways, and other network parameters to devices joining a network.

When a device connects to a network, it broadcasts a DHCP Discover message. The DHCP server on port 67 responds with an offer containing network configuration. This process follows the DORA sequence: Discover, Offer, Request, Acknowledge. DHCP uses UDP for its connectionless, broadcast-based communication.

DHCP servers are essential in virtually every network, from home routers to enterprise infrastructure. Rogue DHCP servers can be used in man-in-the-middle attacks, so enterprise networks often implement DHCP snooping for protection.

Port 67 Security

DHCP Server on port 67 should be secured with appropriate access controls and monitoring. Ensure the service is only accessible from trusted networks by configuring firewall rules to restrict access. If the protocol supports encryption, enable TLS/SSL to protect data in transit.

Regularly update DHCP Server to the latest version to patch known vulnerabilities. Monitor port 67 for unauthorized access attempts and implement rate limiting where possible. Follow the principle of least privilege when configuring access permissions.

How to Check Port 67

To check if port 67 is open on a remote host, use nmap: 'nmap -p 67 hostname'. For a quick TCP connection test, use: 'telnet hostname 67' or 'nc -zv hostname 67'. On Windows PowerShell, use: 'Test-NetConnection -ComputerName hostname -Port 67'.

To check if port 67 is listening on your local machine, use: 'netstat -tlnp | grep 67' on Linux, or 'ss -tlnp | grep 67'. On Windows, use: 'netstat -an | findstr 67'. For a comprehensive scan, use: 'nmap -sV -p 67 hostname' to detect the service version running on the port.

Related Ports

Frequently Asked Questions

What is port 67 used for?

Port 67 is the default port for Dynamic Host Configuration Protocol Server (DHCP Server). It is used for dhcp server communication using the UDP protocol.

Is port 67 TCP or UDP?

Port 67 uses UDP. UDP is used because dhcp server requires fast, low-overhead communication.

Should port 67 be open?

Port 67 should only be open if you are actively running DHCP Server. Close unused ports to reduce your attack surface. If needed, restrict access to trusted IP addresses using firewall rules.

How do I check if port 67 is open?

Use 'nmap -p 67 hostname' to scan remotely, or 'netstat -tlnp | grep 67' to check locally on Linux. On Windows, use 'Test-NetConnection -Port 67 hostname' in PowerShell.

How do I secure port 67?

Secure port 67 by restricting access with firewall rules, using encryption (TLS/SSL) where supported, keeping DHCP Server updated, using strong authentication, and monitoring for unauthorized access attempts.

🔍 Check Your IP Address

While you're here, find out your public IP address, location, and ISP details instantly.

Check My IP →