Re: Protocol found in webcams and DVRs is fueling a new round of big DDoSes

Lawrence D'Oliveiro <[email protected]> Thu, 19 Sep 2019 12:02:48 +1200

Newsgroups	gmane.org.user-groups.linux.waikato
Organization	Geek Central
Message-ID	<[email protected]>

On Thu, 19 Sep 2019 11:34:19 +1200, Peter Reutemann wrote:

> '... the protocol lets devices send user datagram
> protocol packets that describe the device capabilities and
> requirements over port 3702. Devices that receive the probes can
> respond with replies that can be tens to hundreds of times bigger.'

General pitfall with UDP, that a packet can claim to come from any
source address, and so the reply can be directed anywhere. Such
protocols need to be carefully constrained. I think in this case they
should only be responding to requests coming from the LAN, not from
anywhere on the entire Internet.
_______________________________________________
wlug mailing list -- [email protected] | To unsubscribe send an email to [email protected]
Unsubscribe: https://list.waikato.ac.nz/postorius/lists/wlug.list.waikato.ac.nz