Reflection attack via STUN/TURN

[romfeo]

Hello,

I got the following message from my host. In my knowledge, I dont use any apps that need turn. For the moment I have blocked udp port 3478 via ufw. Any ideas how could that happen?

Platform version v7.5.2 (Ubuntu 20.04.3 LTS)

it seems that your server was used for a reflection attack via STUN/TURN.

PORT STATE SERVICE
3478/udp open stun

https://github.com/coturn/coturn/pull/1588

Please check measures such as ACL and/or rate-limits or software which has already implemented measures to prevent abuse here.

[james]

Hello @romfeo and thanks for reporting.
I will look into it.

[girish]

Thanks for reporting. I have added a rule in the firewall for outbound turn - https://git.cloudron.io/platform/box/-/commit/83d7535d84791cf27e0d1ded5fe700233947a1d9