Re: uPnP ... MSN Messenger

chris_at_nospam.com
Date: 10/28/04

  • Next message: Tx2: "Re: uPnP ... MSN Messenger"
    Date: Thu, 28 Oct 2004 05:46:31 GMT
    
    

    On Wed, 27 Oct 2004 10:25:32 -0400, Lars M. Hansen
    <badnews@hansenonline.net> wrote:

    >On Sun, 24 Oct 2004 19:16:01 +0100, Tx2 spoketh
    >
    >>
    >>The only way i can get MSN Messenger audio to work via my Draytek 2600,
    >>is to turn on uPNP services in WinXP
    >>
    >>AIUI, uPnP is not such a good idea to have switched on? Being on ADSL, i
    >>have a fixed IP, if that is relevant to my concerns.
    >>
    >>I am firewalled up to the eyeballs, insofar as i have my hardware
    >>firewall (aka NAT router) and also run software firewalls on the local
    >>network machines.
    >>
    >>I use MSN Messenger a lot to communicate with family abroad, and not
    >>having audio is a nuisance.
    >>
    >>Should i accept the situation, and have no audio, or could i
    >>'cautiously' turn uPnP services on?
    >
    >Since you have a NAT router, the UPnP piece won't be exposed to the
    >internet, and that's really the biggest concern. So, if enabling UPnP is
    >necessary to solve this audio problem, then turn it on... As long as you
    >don't forward any ports related to the UPnP service to this computer,
    >nobody from the outside will be able to connect to your computer through
    >the UPnP service.

    Scroll down to the uPNP description
    http://www.draytek.co.uk/products/vigor2600.html

    Essentially, the Windows uPNP service is taking control of your DSL
    router and punching holes in the firewall configuration as it deems
    necessary. Personally I don't trust Windows that much and would
    manually configure it as needed. I'd probably also disable the uPNP
    support on the router.

    It just aint a good idea letting the clients arbitrarily reconfigure
    the firewall. That defeats the purpose of a seperate firewall dontcha
    think? Pretty soon, some spyware or virus is going to figure out how
    to use uPNP. There have already been a few security issues with the
    protocol.

    -Chris


  • Next message: Tx2: "Re: uPnP ... MSN Messenger"

    Relevant Pages

    • Re: WMFSDK attempting to map ports through UPnP?
      ... However, if the UPnP service is enabled, it will map this ... if it is the local UPnP ... AFAIK, the local UPnP service is exposed through an API to map ports, ...
      (microsoft.public.windowsmedia.sdk)
    • Re: UPnp and Windows 2000?
      ... have you checked to see if the upnp service is running? ... Is there any configuration the end user has to perform for enabling ... Is there any known problems w/ windows machines and MSN service pac's? ...
      (microsoft.public.win2000.general)
    • Re: Turning on Media Sharing in WMP11
      ... I believe it forms quite a reasonable network media device. ... Turning on SSDP (it was disabled as was uPnP) to Manual and then UPnP ... If there is a firewall, or NAT, built into your ... You need to open port s: ...
      (microsoft.public.windowsmedia.player)
    • Re: Turning on Media Sharing in WMP11
      ... picture frame to my server and the frame could view the pictures remotely. ... Turning on SSDP (it was disabled as was uPnP) to Manual and then UPnP also ... If there is a firewall, or NAT, built into your router, ... You need to open port s: ...
      (microsoft.public.windowsmedia.player)
    • Re: UPNP/SSDP
      ... > Re: UPnP ... > all ports. ... a firewall and a NAT-based UPnP-compliant router are distinctly different ... the NAT router is a packet filter that routes packets b/w the LAN ...
      (microsoft.public.windowsxp.general)