D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Router vulnerability

 

On Friday 25 January 2008, Chris Smith wrote:
> Grant Sewell wrote:
> > I've said for many years now that UPnP is an abomination of
> > networking.  Pretty much any application running on a host PC can
> > request that the router opens up and forwards incoming traffic
> > arbitrarily.  What's the point in having a firewall if you go and
> > invent and widely implement a technology that circumvents it without
> > the need for authorisation?!
>
> Yup, stupid really. The SOHO routers are just doing what they are being
> told by this inherently insecure protocol.
>
> Anybody got any ideas if it will allow you to forward privileged ports?
> I expect that it probably depends on vendor implementation.

My nice shiny new Buffalo router has UPnP switched off by default. There's 
sensible now Boyo.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/linux_adm/list-faq.html