HTTPfy

Port 4506 (SaltStack request server)

Salt master return/request port.

Registered (user) port, 1024-49151 TCP Network infrastructure Do not expose to the internet

What port 4506 is used for

Salt master return/request port.

Security: should port 4506 be open?

Do not expose to the internet. Same as 4505: minion networks only.

IANA assignment

Port 4506 is in the registered range and has no IANA assignment. The usage above is unofficial but widespread.

Check what is listening on port 4506

Linux: is anything listening on TCP 4506?
sudo ss -tlnp 'sport = :4506'
Linux / macOS: which process owns the port
sudo lsof -nP -i :4506
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':4506 '
Windows (Command Prompt)
netstat -ano | findstr :4506
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 4506 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 4506
From Windows
Test-NetConnection HOST -Port 4506

Block port 4506 in the firewall

ufw
sudo ufw deny 4506/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 4506 -j DROP
nftables
sudo nft add rule inet filter input tcp dport 4506 drop
Windows Firewall
New-NetFirewallRule -DisplayName 'Block TCP 4506' -Direction Inbound -Protocol TCP -LocalPort 4506 -Action Block

Related ports

4505SaltStack publisher8140Puppet server4502a25-fap-fgw4503m-bus-oms4534armagetronad4535ehs4536ehs-ssl

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.