ZyXEL Communications P-335WT Instrukcja Użytkownika Pobierz pdf (Strona 8)

the ﬁrewall to other machines. Any host on the internal network can ask for any

portmapping it desires, so the machine on 10.0.0.152 could execute the following

Python code to send a SOAP packet to the Internet Gateway Device to ask for a

portforward to 10.0.0.151, without 10.0.0.151 even knowing about it:

soapaction2 = "urn:schemas-upnp-org:service:WANPPPConnection:1#AddPortMapping"

server._sa(soapaction2).AddPortMapping(NewRemoteHost="",

NewExternalPort=22,

NewProtocol="TCP",

NewInternalPort=22,

NewInternalClient="10.0.0.151",

NewEnabled=1,

NewPortMappingDescription="ev1l h4x0r",

NewLeaseDuration=0)

WAN

10.0.0.151

10.0.0.152

AddPortMapping on port 22

to 10.0.0.151 port 22

Telco/LAN Router

It is up to the Internet Gateway Device to fullﬁll (or refuse) these requests. Nearly

all Internet Gateway Device will happily comply with such requests.

In the speciﬁcation the speciﬁcations are vague about that an Internet Gateway

Device should honour requests for portforwardings other than to the machine that

made the request.

On page 12 of the speciﬁcation of the WANIPConnection proﬁle (UPnP IGD WANIPConnection

1.0.pdf, available from the website of the UPnP forum[4]) it says:

“This variable represents the IP address or DNS host name of an internal

client (on the residential LAN).”

On page l3 of that same document it says:

“Each 8-tuple conﬁgures NAT to listen for packets on the external in-

terface of the WANConnectionDevice on behalf of a speciﬁc client and

dynamically forward connection requests to that client.”

1 2 3 4 5 6 7 8 9 10 11 12 13 ... 17 18

Brak uwag

ZyXEL Communications P-335WT Instrukcja Użytkownika Strona 8