UPnP security options?

[psherman]

UPnP/miniupnpd in 2024

I'll add a bit of what I know, although I don't use upnp and wouldn't recommend it. The original upnp implementations would allow a device to request ports to be opened/forwarded to any address that they specified. This meant that a compromised computer could, in theory, poke holes in the router's firewall and have that traffic forwarded to any other device on the network. This obviously presents a major attack vector within a network that could silently compromise many other hosts. Later imp…