Arch Linux

IrvineHimself

Member

From: Scotland

Registered: 2016-08-21

Posts: 275

UFW and WebRTC stun

Noting that this is above my paygrade and I may have it completely wrong, I believe it is possible to set up netfilter rules to drop WebRTC stun requests:

# drop STUN (WebRTC) requests
-A OUTPUT -p udp --dport 3478 -j DROP
-A OUTPUT -p udp --dport 3479 -j DROP
-A OUTPUT -p tcp --dport 3478 -j DROP
-A OUTPUT -p tcp --dport 3479 -j DROP

All my browsers have add-ons to disable WebRTC stun, which, using this guidethis guide, seem to work. However, I am not so sure about my bit-torrent client, curl, wget, rsstail, .... etc, etc.

So, have I got this correct, and, if so, would implementing the above netfilter rules in UFW be as simple as blocking ports 3478 and 3479 for both tcp and udp traffic?

Irvine

---

Et voilà, elle arrive. La pièce, le sous, peut-être qu'il arrive avec vous!