Subnet and PortsPort 53: DNS
The domain name system: turns names into addresses.
Registry entry
| Port | Protocols | Registered name | IANA description | Assignee | Reference | Note |
|---|---|---|---|---|---|---|
| 53 | tcp, udp | domain | Domain Name Server | Paul Mockapetris | n/a |
What it is used for
The domain name system: turns names into addresses.
The risk
Open resolvers are used for amplification attacks; poisoned answers can redirect users.
What to do
Allow queries only from your own network. Use DNSSEC-validating, trusted resolvers.
In the registry
Port 53 is a system port (0 to 1023), the range for standard services. The registry lists one service for this number. Its main entry is domain, "Domain Name Server", registered for tcp, udp.
How to find out whether it is open on your computer
On your own computer or server, ask the operating system which programs are listening for connections, and look for port 53 in the list. If a program you do not recognise listens on it, find out what it is before you close it. From outside, test only networks that you own or have permission to test: scanning other people's networks can be treated as an attack.
Is port 53 safe to leave open?
It depends on what is listening and who can reach it. Open only what you need, restrict by address where possible, keep the software updated, and use encryption and strong authentication. The advice above applies to this port.
Does the registered name prove what runs on port 53?
No. Programs can use any port. The registry tells you what the number was reserved for.
This is an independent guide. It is not connected with IANA, the IETF or any network equipment maker. Address and port data come from the IANA registries as fetched on 14 November 2026; RFC texts were read from rfc-editor.org. Check the originals for anything you rely on.