[p2p-hackers] Real-world UPnP stats

David Barrett dbarrett at quinthar.com
Tue Jun 20 00:44:25 UTC 2006


> -----Original Message-----
> From: Alex Pankratov
> 
> David Barrett wrote:
> > On the topic of UPnP, does anyone have any advice on whether to use the
> > IUPnPNAT interface in Win32 versus going straight to the UPnP layer?
> 
> Stay as far away from IUPnPNAT as possible. This bundle of joy tends
> to randomly fail perfectly valid requests with undocumented return
> codes. It also depends on SSDP service, which is frequently painted
> as a major security hole and therefore scares users off.

Did you skip SSDP and just send UPnP requests straight to the gateway?  This
seems reasonable, given that DHCP has already done all the hard work of
locating it.

-david





More information about the P2p-hackers mailing list