From: "Gary Britt" 

Yes you are describing what I was speaking about.  My 1 to 2 year old
netgear 801.1 "b" router came with UPnP and it is turned on by
default.  I believe the same is true for XP's Firewall, its turned on by
default and so is its use of UPnP to take over control of the router to
which it may be attached.

When I noticed this one day while looking at something on my wife's XP box,
I turned off her software firewall and went to the router and turned off
UPnP at the router as well.

Gary

"Hrvoje Mesing"  wrote in
message news:41d1a1e8{at}w3.nls.net...
>
> "Glenn Meadows"  wrote in message
> news:41d19910{at}w3.nls.net...
> > No, I wasn't aware of that, and haven't read anything along those
> > lines...I
> > would think you'd also have to enter the username and password of the
> > firewall into the XP firewall for it to gain access...heck, a default
> > backdoor into the firewalls?  YIKES, if true.
>
>
> ---
>
> Think that if You are using UPnP, You can get controlled, meaning, XP FW
> could take control of the router (if router and XP FW have built-in UPnP
> controlls). So depends on SoftW. and HardW. Also, think that MS has
> everything "generic" weired in the system for UPnP. Still,
You should have
> installed the support from Add/Removes ...
> Also, there are certain "trusts" where "auth" is present.
> In theory, things work that way.
>
>
> ---
> M.
>
>

--- BBBS/NT v4.01 Flag-5