Re: UPNP/SSDP
From: CZ (CZ_at_no99spam.com)
Date: 07/19/04
- Next message: Bruce Hagen: "Re: RED X instead of graphic image"
- Previous message: ¹©¤¤ Ben: "Re: about the multiple internet windows"
- In reply to: Jotenko: "UPNP/SSDP"
- Next in thread: francis gerard: "Re: UPNP/SSDP"
- Reply: francis gerard: "Re: UPNP/SSDP"
- Messages sorted by: [ date ] [ thread ]
Date: Sun, 18 Jul 2004 19:53:01 -0700
Re: UPnP
From:
http://techupdate.zdnet.com/techupdate/stories/main/Linksys_routers_and_DDoS.html
"I asked Gibson whether UPnP-compliance could be the answer to the sort of
on-the-fly port adjustments that he likes. Gibson responded,
"Firewall/routers with UPnP enabled by default will be the next major
security problem." Why? Systems on the inside of a UPnP-compliant firewall
are given the authority to dynamically change a port's status. However, the
difference between UPnP and the ZoneAlarm-sort of flexibility that Gibson
likes is that in the latter situation, the flexibility is hardwired to some
known problems. With UPnP, the dynamism is more encompassing of all ports.
Firewalls aren't simply for keeping the bad stuff out, but also for keeping
both bad and confidential stuff from getting out. Gibson cites the example
of e-mail borne viruses. "Once a virus is inside the firewall, nothing
prevents it from using UPnP to open up a port in your firewall and exposing
your network."
- Next message: Bruce Hagen: "Re: RED X instead of graphic image"
- Previous message: ¹©¤¤ Ben: "Re: about the multiple internet windows"
- In reply to: Jotenko: "UPNP/SSDP"
- Next in thread: francis gerard: "Re: UPNP/SSDP"
- Reply: francis gerard: "Re: UPNP/SSDP"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|