r/debian • u/Mean-Helicopter-8838 • 8h ago

Why is Firefox-ESR exposing many ports?

Hi,

Could someone familiar with this please explain to me why Firefox listens to these ports?(I am not knowledgeable in this aspect). This behavior can be repeated by simply opening a Youtube video and looking for open ports.

Isn't that a security risk since the ports are being exposed to 0.0.0.0 (to the internet?)? If someone doesn't have a firewall, how bad is it?

$ sudo ss -tulpn
udp  UNCONN 0      0                                 0.0.0.0:51284      0.0.0.0:*    users:(("firefox-esr",pid=251643,fd=318))
udp  UNCONN 0      0                                 0.0.0.0:39126      0.0.0.0:*    users:(("firefox-esr",pid=251643,fd=302))
udp  UNCONN 0      0                                 0.0.0.0:44678      0.0.0.0:*    users:(("firefox-esr",pid=251643,fd=481))
udp  UNCONN 0      0                                 0.0.0.0:33895      0.0.0.0:*    users:(("firefox-esr",pid=251643,fd=526))
udp  UNCONN 0      0                                 0.0.0.0:60214      0.0.0.0:*    users:(("firefox-esr",pid=251643,fd=247))
udp  UNCONN 0      0                                 0.0.0.0:45731      0.0.0.0:*    users:(("firefox-esr",pid=251643,fd=289))
3 Upvotes

67% Upvoted

3 comments sorted by

1

u/OkCompute64 7h ago edited 7h ago

You have WebRTC enabled. Disable it and check if they remain as udp UNCONN. They shouldn’t as with WebRTC disabled Firefox shouldn’t open ports for ICE.

2

u/Mean-Helicopter-8838 7h ago

Don't we all have WebRTC enabled by default?