Disabling UPnP in Windows Pidgin 2.3.0

[Daniel Atallah]

On Nov 29, 2007 7:11 PM, David F. Severski <davidski-pg at deadheaven.com>
wrote:

> On Thu, Nov 29, 2007 at 06:12:59PM -0500, Evan Schoenberg wrote:
> > On Nov 29, 2007, at 10:06 AM, <davidski-pg at deadheaven.com> wrote:
> >> Are there any existing or planned facilities to disable UPnP support in
> >> the
> >> Windows Pidgin port?  An old Gaim ticket to provide a config option for
> >> this
> >> seems to have gone stale.  The only way I've found to eliminate this
> >> unnecessary service has been to block it at the host firewall level.
> >
> > Out of curiosity, why would you want to disable UPnP?
>
> I, like many users, do not use UPnP.  In fact, given the history of UPnP
> on Windows, it's one of the first services I disable when hardening
> that OS.


Pidgin's functionality is in no way dependent on the win32 UPnP service, nor
does pidgin doesn't interact with it.


> In general, a fundamental security stance is to disable
> unnecessary services.  Doing so minimizes the amount of attack service
> presented to the outside world.  With the exception of DNS lookups, every
> other service or traffic sent out of Pidgin seems to be user
> controllable.  Only UPnP presents a hard coded service that is always on
> with no possibly to turn off.
>
> David
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://pidgin.im/pipermail/support/attachments/20071129/5b81f941/attachment.html>