[freenet-support] risk of UPnP

2015-03-13 Thread penda-uhura
Hi,

on vour Website https://freenetproject.org/faq.html#firewall I found
this: "Freenet should have forwarded them itself through Universal Plug
and Play, but this doesn't always work (and it never works if you don't
have the UPnP plugin loaded, or have one router behind another)."
without any hint for security problems of UPnP. This might deem as a
recommdation to users to activate UPnP in their routers. It would be
nice to implement some warning.

many thanks
penda uhura

-- 
Ich unterstütze durch meine Mitgliedschaft im SuMa e.V.die EINZIGE
wirklich datensichere Suchmaschine auf der Welt:
https://metager.de/tor/
___
Support mailing list
Support@freenetproject.org
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:support-requ...@freenetproject.org?subject=unsubscribe

Re: [freenet-support] risk of UPnP

2015-03-13 Thread Steve Dougherty
On 02/26/2015 05:43 PM, penda-uh...@posteo.de wrote:
> Hi,
> 
> on vour Website https://freenetproject.org/faq.html#firewall I found
> this: "Freenet should have forwarded them itself through Universal Plug
> and Play, but this doesn't always work (and it never works if you don't
> have the UPnP plugin loaded, or have one router behind another)."
> without any hint for security problems of UPnP. This might deem as a
> recommdation to users to activate UPnP in their routers. It would be
> nice to implement some warning.

What security problems do you mean? What warning would you recommend?

UPnP is for traversing NAT, and NAT is not a firewall. Many routers
enable UPnP by default, and using the plugin allows people who do not
understand how to forward ports to use Freenet. It is not intended for
those who know how to configure a firewall / NAT.

Is that what you were referring to?

> many thanks
> penda uhura




signature.asc
Description: OpenPGP digital signature
___
Support mailing list
Support@freenetproject.org
http://news.gmane.org/gmane.network.freenet.support
Unsubscribe at http://emu.freenetproject.org/cgi-bin/mailman/listinfo/support
Or mailto:support-requ...@freenetproject.org?subject=unsubscribe