Skip to content

Commit

Permalink
ejabberd.yml.example: Use non-standard STUN port
Browse files Browse the repository at this point in the history
STUN via UDP can easily be abused for reflection/amplification DDoS
attacks.  Suggest a non-standard port to make it harder for attackers to
discover the service.

Modern XMPP clients discover the port via XEP-0215, so there's no
advantage in sticking to the standard port.
  • Loading branch information
weiss committed Nov 14, 2024
1 parent c7d967a commit 18c54f4
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion ejabberd.yml.example
Original file line number Diff line number Diff line change
Expand Up @@ -67,7 +67,7 @@ listen:
/admin: ejabberd_web_admin
/.well-known/acme-challenge: ejabberd_acme
-
port: 3478
port: 5478
ip: "::"
transport: udp
module: ejabberd_stun
Expand Down

0 comments on commit 18c54f4

Please sign in to comment.