D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Router vulnerability

 

Grant Sewell wrote:
> I've said for many years now that UPnP is an abomination of
> networking.  Pretty much any application running on a host PC can
> request that the router opens up and forwards incoming traffic
> arbitrarily.  What's the point in having a firewall if you go and
> invent and widely implement a technology that circumvents it without
> the need for authorisation?!

Yup, stupid really. The SOHO routers are just doing what they are being
told by this inherently insecure protocol.

Anybody got any ideas if it will allow you to forward privileged ports?
I expect that it probably depends on vendor implementation.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html