[24194] in bugtraq
Re: MSN Messenger and UDP 1900
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Fri Feb 8 13:59:59 2002
Message-Id: <200202080700.g1870vqI010300@foo-bar-baz.cc.vt.edu>
To: Dustin Miller <dustin@fusewerx.com>
Cc: "'Louie Martinez'" <louie@kopykake.com>, bugtraq@securityfocus.com
In-Reply-To: Your message of "Wed, 06 Feb 2002 10:21:33 CST."
<!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAdYQwPrEE6Uib+Hz0W5HktuKCAAAQAAAAbVvTfofa1UOqYP8iiJEZsQEAAAAA@fusewerx.com>
From: Valdis.Kletnieks@vt.edu
Mime-Version: 1.0
Content-Type: multipart/signed; boundary="==_Exmh_-581979554P";
micalg=pgp-sha1; protocol="application/pgp-signature"
Content-Transfer-Encoding: 7bit
Date: Fri, 08 Feb 2002 02:00:57 -0500
--==_Exmh_-581979554P
Content-Type: text/plain; charset=us-ascii
On Wed, 06 Feb 2002 10:21:33 CST, Dustin Miller <dustin@fusewerx.com> said:
> MSN Messenger communicates using UPNP to try to auto-detect any
> UPNP-compliant firewalls/routers you may have. Ostensibly, NAT/Firewall
> devices that support UPNP will allow file transfers, voice and audio
> communications so MSN Messenger polls for them to autoconfigure itself
> and the NAT/Firewall device to support these transfer types.
So MSN Messenger thinks that a properly configured firewall would
configure itself to let arbitrary connections to the outside world
through just because a UPnP device asked it to?
Gaak. Trying to get my mind around that concept is making my brain hurt.
--
Valdis Kletnieks
Computer Systems Senior Engineer
Virginia Tech
--==_Exmh_-581979554P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQE8Y3epcC3lWbTT17ARAuDhAKC9W2IY6hUtaQfJpfRe4yYYYXAPzQCgh+/S
wr4RtXXvEFYLqCw8MCX9ID8=
=GKia
-----END PGP SIGNATURE-----
--==_Exmh_-581979554P--
