Cheers for that Graham.
Simon, it was just covering off a very long shot. UPnP is used for various things, one of which, it can be used for "punching" holes in your firewall. Usually, most routers have this option turned on by default, and I always disable it. What it is designed for, is so that devices inside your network, for example, an Xbox, for the internet based services it uses to work (online gaming etc.), needs to be able to accept incoming connections from the internet. By default, your router (the Firewall part of it) will decline all incoming connections from the Internet to protect you. Using UPnP to do this is bad design, because, any device inside your network, can automatically connect outbound to the internet, usually, unless you expressly opt to disable that ability. The reason this is popular, is because it's convenient and means the user doesn't have to do any networking setup to enable things like Xbox/PS4 networking to work out of the box. Unfortunately, convenience is usually at the expense of security. If they designed the service better, they wouldn't need to initiate inbound connections to each unit anyway!
I would never allow devices inside my network to randomly, and without my control or knowledge, open up random inbound ports on my Firewall! (after all, who knows what some programmer somewhere, might chose to do if he has UPnP available to him (the recent malware problems with IoT devices highlights this problem nicely)).
Anyway, as the HDR is listening on port 53 (usually used for DNS), I was wondering if it used UPnP to enable for some weird reason, that I cannot think of, it to receive inbound DNS packets from the Internet. As my unit ran for a couple of years with this effectively disabled, without any obvious problems, I was wondering if this might be part of the problem now. However, Graham has (mostly had a working box (until this morning)), and as he also has UPnP not enabled, so it can't be that.
It was always a long shot, but worth ruling out (which I think I have now done).
Sorry for the long post, but you did ask!
Cheers,
Matt.
| Fri 9 Dec 2016 12:40:46
#224 |