# PC open to the world
**URL:** https://forum.syncthing.net/t/pc-open-to-the-world/13052
**Category:** Support
**Created:** [March 20, 2019, 2:33pm UTC](https://forum.syncthing.net/t/pc-open-to-the-world/13052 "2019-03-20T14:33:48Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@rene.labounek](https://forum.syncthing.net/u/rene.labounek)
#### Post date: [March 20, 2019, 2:33pm UTC](https://forum.syncthing.net/t/pc-open-to-the-world/13052/1 "2019-03-20T14:33:48Z")
Network administrators of University where I am working want for me to stop using syncthing for my file synchronizing. They write to me that my computer is open to the world and anyone can connect to my computer (University network respectivelly) via ports opened for syncthing on my laptop. I believe a bold highlighted rows (ports 8384 and 22000) are related to syncthing. Any other?
user@machine:~$ netstat -an | grep LISTEN tcp 0 0 0.0.0.0:139 0.0.0.0:\* LISTEN tcp 0 0 127.0.0.53:53 0.0.0.0:\* LISTEN tcp 0 0 127.0.0.1:631 0.0.0.0:\* LISTEN tcp 0 0 127.0.0.1:29754 0.0.0.0:\* LISTEN tcp 0 0 0.0.0.0:445 0.0.0.0:\* LISTEN _tcp 0 0 127.0.0.1:8384 0.0.0.0: LISTEN_\* tcp6 0 0 :::139 :::\* LISTEN _tcp6 0 0 :::22000 ::: LISTEN_\* tcp6 0 0 :::80 :::\* LISTEN tcp6 0 0 ::1:631 :::\* LISTEN tcp6 0 0 :::445 :::\* LISTEN
May I change a settings of my syncthing instalation somehow to make University network administrators satisfied?
I have found several threads but it did not help me very much. Certainly my low IT network knowledge.
> [@Safe to open port 22000 to public](https://forum.syncthing.net/t/safe-to-open-port-22000-to-public/2421):
>
> Hi i have Syncthing set up on my pc behind NAT with upnp, notebook and mobile and it works great. But i want to install and enable it on my remote VPS machine. Only way to make it work was to open port 22000 on my firewall. Is this the right way and is port 22000 safe to be open on my VPS with public IP address. Thanks
> [@WARNING: Don't leave your web GUI open to the world](https://forum.syncthing.net/t/warning-dont-leave-your-web-gui-open-to-the-world/6179):
>
> Dear users of Syncthing, By default, the web GUI only listens for connections from localhost (127.0.0.1 or ::1 for ipv6). If you decide to change this to make it listen to the whole world (for example, 0.0.0.0), then make sure you set up a username, password and HTTPS. Otherwise, anybody can connect to your server and do anything they want with your Syncthing. This includes editing or deleting your files, impersonating you to other Syncthing users in your network, filling up your computer’s s…
University network administrator message: “You’ll want to shut down syncthing, as it requires you to have a couple of open ports to the world. Syncthing has a couple of recent vulnerabilities, check the CVEs (cvedetails is down at the moment).”
Please any idea?
Kind regards, Rene
---
### Author:  [@imsodin](https://forum.syncthing.net/u/imsodin)
#### Post date: [March 20, 2019, 3:14pm UTC](https://forum.syncthing.net/t/pc-open-to-the-world/13052/2 "2019-03-20T15:14:58Z")
There’s one CVE I am aware of regarding Syncthing and it’s fixed since ages (it probably was filed due to/after the fix): [https://nvd.nist.gov/vuln/detail/CVE-2017-1000420](https://nvd.nist.gov/vuln/detail/CVE-2017-1000420)
You can talk and try to reason with the admin, but given this pretty weird and incorrect statement (you neither have to open a couple of ports to the internet, nor does it have a couple of recent vulnerabilities) reasons may not help with that person.
---
### Author:  [@calmh](https://forum.syncthing.net/u/calmh)
#### Post date: [March 20, 2019, 3:22pm UTC](https://forum.syncthing.net/t/pc-open-to-the-world/13052/3 "2019-03-20T15:22:16Z")
There was one CVE on Go as well that affected us, although it didn’t have security impact just the potential to cause high CPU.
As imsodin says you do not have to have any ports open to the world. Generally you _should_ have port 22000 open - which is safe, encrypted and certificate authenticated - but you don’t _have to_ as long as you can connect in the other direction instead. The GUI port 8384 should generally not be open to the world and is not, by default.
---
### Author:  [@system](https://forum.syncthing.net/u/system)
#### Post date: [April 19, 2019, 3:22pm UTC](https://forum.syncthing.net/t/pc-open-to-the-world/13052/4 "2019-04-19T15:22:17Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.