Here's a thought (my prediction):

Someone is going to figure a way to connect uP&P routers to a Win XP
server (done) and have both talking uP&P over the internet to anything
that will listen.

One day some poor SOD will connect an XP workstation to the net and it
will say "Hello Mr. uP&P device(s), can I play with you"

I think you can all see where that will go.

Some "script kiddy" will do this and setup the server to take full admin
control over that box.

>From that point it is downhill!

Just a fantasy - That is what they said about "back-orifice".

Just a thought!

Danny

-----Original Message-----
From: Jared Corless [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, September 25, 2002 3:28 PM
To: [EMAIL PROTECTED]
Subject: RE: [gb-users] odd traffic...

It has something to do with the XP plug n play service. Here is some
information on it and a link to disable it on XP machines. Even after
disabling it this site still says.

"UnPnP says that UPnP is safely disabled, but my system's personal
firewall keeps reporting UPnP traffic on port 1900.
UnPlug and Pray shuts down the UPnP server services, but it does not
prevent Windows or its programs from acting as UPnP clients. Client
programs like Windows itself, and later versions of Windows Messenger,
periodically search the local network for a UPnP router to control. This
network noise is annoying, but it does not mean that Windows' UPnP
server is still active and insecure."

http://grc.com/unpnp/unpnp.htm


Jared Corless
SBR Technologies

-----Original Message-----
From: Cox, Danny H. [mailto:[EMAIL PROTECTED]] 
Sent: Wednesday, September 25, 2002 4:10 PM
To: [EMAIL PROTECTED]
Cc: IT
Subject: [gb-users] odd traffic...


I've been noticing a large amount of this garbage on my net - all from
an XP system.

 

Anyone know what XP would be using port 1900 for?

 

FILTER: RAF (default) block - warning UDP
[xxx.xxx.xxx.xxx/1057]->[2xx.xxx.xxx.xxx/1900] xl1 l=132

 

FYI: the source IP address is a PRO net address (XP workstation),
destination address is Firewall (PRO network) NIC address. 

 

Very odd.

 

Danny

 



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
 e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
 http://www.mail-archive.com/[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
 e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
 http://www.mail-archive.com/[email protected]

Reply via email to