HTTPfy

Port 5349 (STUN / TURN over TLS)

TURN over TLS or DTLS, used when networks block plain UDP media.

Registered (user) port, 1024-49151 TCPUDP Voice, video and chat Meant to face the internet

What port 5349 is used for

TURN over TLS or DTLS, used when networks block plain UDP media.

Security: should port 5349 be open?

Meant to face the internet. Same rules as 3478: authenticate and block relaying to internal addresses.

IANA assignment

Service nameProtoDescriptionAssigneeReference
stuns TCP Session Traversal Utilities for NAT (STUN) port IESG RFC 8489
turns TCP TURN over TLS - RFC 8656
stun-behaviors TCP STUN Behavior Discovery over TLS - RFC 5780
stuns UDP STUN over DTLS
This service name was initially created by [RFC 5389]. IESG RFC 7350
turns UDP TURN over DTLS
This service name was initially created by [RFC 8656]. IESG RFC 7350
stun-behaviors UDP Reserved for a future enhancement of STUN-BEHAVIOR - RFC 5780

Registry dates for this port: last modified 2019-08-02.

Check what is listening on port 5349

Linux: is anything listening on TCP 5349?
sudo ss -tlnp 'sport = :5349'
Linux: UDP 5349
sudo ss -ulnp 'sport = :5349'
Linux / macOS: which process owns the port
sudo lsof -nP -i :5349
Older Linux / BSD (net-tools)
sudo netstat -tlnp | grep ':5349 '
Windows (Command Prompt)
netstat -ano | findstr :5349
Windows (PowerShell)
Get-NetTCPConnection -LocalPort 5349 -State Listen | Select LocalAddress,OwningProcess

Test it from outside

From another machine
nc -vz -w 5 HOST 5349
From Windows
Test-NetConnection HOST -Port 5349
UDP probe (no reply does not prove it is closed)
nc -vzu -w 5 HOST 5349

Open port 5349 in the firewall

ufw
sudo ufw allow 5349/tcp
iptables
sudo iptables -A INPUT -p tcp --dport 5349 -j ACCEPT
nftables
sudo nft add rule inet filter input tcp dport 5349 accept
Windows Firewall
New-NetFirewallRule -DisplayName 'Allow TCP 5349' -Direction Inbound -Protocol TCP -LocalPort 5349 -Action Allow
ufw
sudo ufw allow 5349/udp
iptables
sudo iptables -A INPUT -p udp --dport 5349 -j ACCEPT
nftables
sudo nft add rule inet filter input udp dport 5349 accept
Windows Firewall
New-NetFirewallRule -DisplayName 'Allow UDP 5349' -Direction Inbound -Protocol UDP -LocalPort 5349 -Action Allow

Related ports

3478STUN / TURN443HTTPS5343kfserver5344xkotodrcp5350pcp-multicast5351pcp

All port numbers · Open port checker
Assignment data: IANA port number registry (public domain), retrieved 2026-11-10.