Port 3478: STUN / TURN

NAT traversal for WebRTC calls and video. Needed for TURN servers. Misconfigured TURN servers can be used as open relays.

  • Free
  • No Sign-Up
  • Runs in Your Browser

Examples:

Ports

1 of 41

Port Lookup

Port 3478 at a glance

Port3478
ProtocolTCP/UDP
ServiceSTUN / TURN
Open to the Internet?Yes, if you run this service publicly
See What Is Listeningss -lntup | grep ':3478 '
Test From Outsidenc -zv your-server 3478
Block with UFWufw deny 3478/tcp; ufw deny 3478/udp
Block with nftablesnft add rule inet filter input meta l4proto { tcp, udp } th dport 3478 drop

STUN / TURN uses TCP/UDP port 3478. NAT traversal for WebRTC calls and video.

Needed for TURN servers. Misconfigured TURN servers can be used as open relays.

Open port 3478 only on servers that run STUN / TURN, and keep the software patched: public services are scanned within minutes of going online.

Questions

What is port 3478 used for?
STUN / TURN. NAT traversal for WebRTC calls and video.
Is it safe to open port 3478?
Yes, if you run this service publicly. Needed for TURN servers. Misconfigured TURN servers can be used as open relays.
How do I check if port 3478 is open?
On the server, ss -lntup | grep ':3478 ' shows what is listening. From another machine, nc -zv your-server 3478 shows whether the firewall lets it through.
How do I block port 3478?
With UFW: ufw deny 3478/tcp and ufw deny 3478/udp. With nftables, add a drop rule for dport 3478 in your input chain.

Abuse from open ports on your VMs?

Frabs spots amplification, scans and floods leaving any VM and stops them, without touching your firewall.