# Why are ports 53 and 5353 opened? (security context)

**URL:** https://forum.yunohost.org/t/why-are-ports-53-and-5353-opened-security-context/40902
**Category:** Discuss
**Tags:** english
**Created:** [November 20, 2025, 10:19am UTC](https://forum.yunohost.org/t/why-are-ports-53-and-5353-opened-security-context/40902 "2025-11-20T10:19:06Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![rds13](https://forum.yunohost.org/letter_avatar_proxy/v4/letter/r/73ab20/32.png) [@rds13](https://forum.yunohost.org/u/rds13)
#### Post date: [November 20, 2025, 10:19am UTC](https://forum.yunohost.org/t/why-are-ports-53-and-5353-opened-security-context/40902/1 "2025-11-20T10:19:06Z")

</div>

**What type of hardware are you using** : VPS bought online  
**What YunoHost version are you running** : 12.1.29  
**How are you able to access your server** : SSH  
**Are you in a special context or did you perform specific tweaking on your YunoHost instance ?** : No tweaking

### Describe your issue

Hello,  
This subject has been discussed in … 2020! ([Why are ports 53 and 5353 opened?](https://forum.yunohost.org/t/why-are-ports-53-and-5353-opened/12770))  
The discussion was on the functional aspects.  
Today I want to discuss the security motivations.  
To my understanding using the yunohost server as a DNS server is not mainstream. The people that use Yunohost in that way need to have some technical knowledge.  
That’s why I think in the default configuration ports 53 and 5353 should be closed.  
For the port 5353 the default could be opened only if a .local domain has be configured as the main domain.  
The default configuration should focus on security.

What do you think?

### Share relevant logs or error messages

No relevant.

---

<div class="post-metadata">

### Author: ![Aleks](https://forum.yunohost.org/user_avatar/forum.yunohost.org/aleks/32/1704_2.png) [@Aleks](https://forum.yunohost.org/u/Aleks)
#### Post date: [November 20, 2025, 1:07pm UTC](https://forum.yunohost.org/t/why-are-ports-53-and-5353-opened-security-context/40902/2 "2025-11-20T13:07:47Z")

</div>

Yeah, port 53 should probably be closed and port 5353 only avalable on local network IP ranges

---

<div class="post-metadata">

### Author: ![jarod5001](https://forum.yunohost.org/user_avatar/forum.yunohost.org/jarod5001/32/5323_2.png) [@jarod5001](https://forum.yunohost.org/u/jarod5001)
#### Post date: [November 20, 2025, 1:29pm UTC](https://forum.yunohost.org/t/why-are-ports-53-and-5353-opened-security-context/40902/3 "2025-11-20T13:29:24Z")

</div>

They are closed unless you install adguard home for example

---

<div class="post-metadata">

### Author: ![system](https://forum.yunohost.org/uploads/default/original/2X/f/f59fe8e3ee6b100b4f574d30d6e30479c68b89f0.png) [@system](https://forum.yunohost.org/u/system)
#### Post date: [December 20, 2025, 1:29pm UTC](https://forum.yunohost.org/t/why-are-ports-53-and-5353-opened-security-context/40902/4 "2025-12-20T13:29:44Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.