Disabling UPnP in Windows Pidgin 2.3.0

[Billy Crook]

And for that matter, no destruction of your current computer's UPnP
capabilities will slow down a virus that uses UPnP to upen your NAT router
up.  That virus, willcery its own UPnP client that you won't be allowed to
close.  The place to disable it if you are going to at all, is in your NAT
routers.

On Nov 29, 2007 6:22 PM, Daniel Atallah <daniel.atallah at gmail.com> wrote:

>
> On Nov 29, 2007 7:11 PM, David F. Severski <davidski-pg at deadheaven.com>
> wrote:
>
> > On Thu, Nov 29, 2007 at 06:12:59PM -0500, Evan Schoenberg wrote:
> > > On Nov 29, 2007, at 10:06 AM, <davidski-pg at deadheaven.com> wrote:
> > >> Are there any existing or planned facilities to disable UPnP support
> > in
> > >> the
> > >> Windows Pidgin port?  An old Gaim ticket to provide a config option
> > for
> > >> this
> > >> seems to have gone stale.  The only way I've found to eliminate this
> > >> unnecessary service has been to block it at the host firewall level.
> > >
> > > Out of curiosity, why would you want to disable UPnP?
> >
> > I, like many users, do not use UPnP.  In fact, given the history of UPnP
> > on Windows, it's one of the first services I disable when hardening
> > that OS.
>
>
> Pidgin's functionality is in no way dependent on the win32 UPnP service,
> nor does pidgin doesn't interact with it.
>
>
> > In general, a fundamental security stance is to disable
> > unnecessary services.  Doing so minimizes the amount of attack service
> > presented to the outside world.  With the exception of DNS lookups,
> > every
> > other service or traffic sent out of Pidgin seems to be user
> > controllable.  Only UPnP presents a hard coded service that is always on
> > with no possibly to turn off.
> >
> > David
>
>
>
> _______________________________________________
> Support mailing list
> Support at pidgin.im
> http://pidgin.im/cgi-bin/mailman/listinfo/support
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://pidgin.im/pipermail/support/attachments/20071129/eb5eb717/attachment.html>