JDownloader Community - Appwork GmbH
 

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 03.08.2013, 07:08
rrogntudjû
Guest
 
Posts: n/a
Exclamation SSDP Discovery Service

Hi,

SSDP Discovery Service: under Windows 7 if this service is activated (manual) each time i launch JD2 i have a firewall alert, if this service is deactivated no alert. Please can you explain to me since few updates why JD2 needs to use this dangerous service??? thanks in advance.

PS: with JD2 not updated since few weeks this problem does not exist...

Last edited by rrogntudjû; 03.08.2013 at 08:00.
Reply With Quote
  #2  
Old 03.08.2013, 08:58
raztoki's Avatar
raztoki raztoki is offline
English Supporter
 
Join Date: Apr 2010
Location: Australia
Posts: 17,611
Default

Say it has to do with the Streaming addon, it has a DLNA functions with UPnP support.

Need some feed back from Jiaz/Coalado,
__________________
raztoki @ jDownloader reporter/developer
http://svn.jdownloader.org/users/170

Don't fight the system, use it to your advantage. :]
Reply With Quote
  #3  
Old 03.08.2013, 09:16
rrogntudjû
Guest
 
Posts: n/a
Default

First i do not need this addon so it would be nice if i could disable it somewhere... Second i'll wait a better explanation from developers but i think its not a good thing at all to use a service well known with ports usually used by trojans.

"Famous sadly service" - ports 1900 and 5000
assiste.com.free.fr/p/services_windows/service_de_decouvertes_ssdp.html

Justify:
"It is about the famous sadly service called " UPnP " (Universal Plug and Play) used to make it possible to the private individuals to build a small home network by simple connection and Windows deals with the remainder! Deactivate this service and close ports 1900 and 5000. See the page UPnP on the Gibson site, the program of deactivation, the UPnP page on the site Assiste.com, the alarm bulletin of the Certa, the alarm bulletin of the FBI, articles 262458 and 323713 in the knowledge base of Microsoft (links on UPnP et contre-mesures). The 2 services, this one and "Universal Plug and Play Device Host" must be deactivated (or activated) together. Even in a home network, test the deactivated mode."

Last edited by rrogntudjû; 03.08.2013 at 10:54. Reason: Grammatical error
Reply With Quote
  #4  
Old 03.08.2013, 14:26
pspzockerscene's Avatar
pspzockerscene pspzockerscene is offline
Community Manager
 
Join Date: Mar 2009
Location: Deutschland
Posts: 70,922
Default

Ticket:


GreeZ psp
__________________
JD Supporter, Plugin Dev. & Community Manager

Erste Schritte & Tutorials || JDownloader 2 Setup Download
Spoiler:

A users' JD crashes and the first thing to ask is:
Quote:
Originally Posted by Jiaz View Post
Do you have Nero installed?
Reply With Quote
  #5  
Old 03.08.2013, 15:55
coalado's Avatar
coalado coalado is offline
JD Manager
 
Join Date: Feb 2009
Posts: 1,980
Default

This is probably caused by the new cling library we use for the UPNP Reconnect.


If you don't use UPNP Reconnect an the (Pre alpha) streaming extension, this library should not get used. I will check this.
__________________
Reply With Quote
  #6  
Old 03.08.2013, 15:57
coalado's Avatar
coalado coalado is offline
JD Manager
 
Join Date: Feb 2009
Posts: 1,980
Default

btw. please give me more details about the firewall alert you get.
__________________
Reply With Quote
  #7  
Old 03.08.2013, 18:07
rrogntudjû
Guest
 
Posts: n/a
Default

Under Windows 7 like probably also under all Microsoft OS this service is on manual by default, that's why i think its really annoying... If i do not deactivate it as it is highly recommended when JD2 start my firewall warns me it blocks incoming packets from the local IP 239.255.255.250 on port 1900 which correspond to the SSDP Discovery Service. I am not a specialist in networks but i suppose its because your new addon needs to use it otherwise my firewall would remain quiet as usual. So i think at the installation of JD2 you should warn people if they agree that your addon use this service which it is not recommended for their security, or you use your own service with another port not listed by the FBI, but i am not developer i don't know if its possible this one.

Quote:
Originally Posted by coalado View Post
This is probably caused by the new cling library we use for the UPNP Reconnect. If you don't use UPNP Reconnect an the (Pre alpha) streaming extension, this library should not get used. I will check this.
Precision: i do not use UPNP Reconnect and for the "(Pre alpha) streaming extension" i do not even know what it is and where it is to delete it?

Last edited by rrogntudjû; 03.08.2013 at 19:37.
Reply With Quote
  #8  
Old 04.08.2013, 14:02
coalado's Avatar
coalado coalado is offline
JD Manager
 
Join Date: Feb 2009
Posts: 1,980
Default

Are you 100% sure that this is jdownloader related?


Please give me more details about the firewall alert.
As much as possible. Which Firewall do you use?


If you can install wireshark, you can listen to the SSDP Packets and see where the are coming from.
__________________
Reply With Quote
  #9  
Old 04.08.2013, 16:39
rrogntudjû
Guest
 
Posts: n/a
Default

No more details sorry, i think what i already reported is good enough. Each time i launch JD2 i have a firewall alert (incoming packets blocked from the local IP 239.255.255.250 on port 1900), if the SSDP discovery service is deactivated no alert, so i am 100% sure it is something new used by JDownloader, you say it can be a streaming addon but when i ask where it is to test it i have no response. So you make as you want but for me the two UPnP services are definitively deactivated, no more alerts like that.

Edit: bwt its not really important for me cause i do not need streaming function and i do not use UPNP Reconnect!
And anyway my firewall could not agree to open these ports even for a new feature, i have nothing to regret

Last edited by rrogntudjû; 04.08.2013 at 18:10.
Reply With Quote
  #10  
Old 04.08.2013, 19:09
coalado's Avatar
coalado coalado is offline
JD Manager
 
Join Date: Feb 2009
Posts: 1,980
Default

239.255.255.250 not even a "real" device in your LAN. this is a multicast adress.



The streaming addon is not part of jd2 beta yet. That's why I cannot tell you how to disable it. It is not enabled, and not distributed. It's only available for developers in their IDE. I'm pretty sure that you did not install it, so we should not waste time discussing about the streaming extension.

So there is only UPNP reconnect. The UPNP reconnect uses a SEARCH multicast like this if you click the Setup Assistent in the reconnect configs, or the Choose Device Button. It is not used on jd startup at all. I doubt that this could trigger any firwall issues.


Both do not use the ssdp search from windows. I guess the ssdp service is used by windows to show you all upnp devices in the windows network view.


So.. I really have no idea what could cause your problem. I cannot reproduce it, and since you do not want to tell me what firewall you use, I
is pretty hard to search for the problem.



One thing I could imagine, is a feature called "samba prefetch".
Since a few weeks, JDownloader tries to Scan the local Network folder. This is a list on all network devices. If the ssdp service is enabled, this could force windows to search for new devices - and thus trigger a Search Broadcast on 239.255.255.250:1900


This Sambaprefetch is a workaround for a bug in the filechooser dialog. If we disable this workarond, the filechooser dialog might freeze for a few seconds if you open it the first time.

All this is a pretty rough guess of what could happen.


Please try to disable this advanced option: "GeneralSettings: Samba Prefetch" and check if this solves your problem.

The only withdraw of this is, that it might take a few seconds longer for you to open a file chooser dialog in jd. (and you should get your firewall alert then :()

I would say it's worth a try
__________________
Reply With Quote
  #11  
Old 04.08.2013, 20:01
rrogntudjû
Guest
 
Posts: n/a
Default

First it was a java, after a tango and now a samba, finally a serious track it seems... ok i'll test this tomorrow, i give you the feedback later...
Reply With Quote
  #12  
Old 04.08.2013, 22:55
rrogntudjû
Guest
 
Posts: n/a
Default

Bingo for samba, effectively if i deactivate it no more alerts.

You said "Since a few weeks, JDownloader tries to Scan the local Network folder" but in general settings you just added this line "samba prefetch" with the last update, so to avoid alerts i am obliged to update all my JD2 now because on others not freshly updated i have not this line??? Please can you explain better because i do not understand. Also it proof sometimes bugs can also render services, now i know you tried via a "famous sadly service" to scan my computer without my permission... but with no success sorry. Hope you'll find a better workaround soon!
Reply With Quote Received Infraction
  #13  
Old 04.08.2013, 23:22
pspzockerscene's Avatar
pspzockerscene pspzockerscene is offline
Community Manager
 
Join Date: Mar 2009
Location: Deutschland
Posts: 70,922
Default

No double posts please, read the forum rules!!

GreeZ psp
__________________
JD Supporter, Plugin Dev. & Community Manager

Erste Schritte & Tutorials || JDownloader 2 Setup Download
Spoiler:

A users' JD crashes and the first thing to ask is:
Quote:
Originally Posted by Jiaz View Post
Do you have Nero installed?
Reply With Quote
  #14  
Old 05.08.2013, 08:47
rrogntudjû
Guest
 
Posts: n/a
Default

Quote:
Originally Posted by pspzockerscene View Post
No double posts please, read the forum rules!!
Ok sorry, but about the rules in the French forum it would be great if you add a post to warn people that there is no moderators now to answer to their threads, because for most of them they do not understand and they think it is not polite.
Reply With Quote
  #15  
Old 05.08.2013, 09:55
coalado's Avatar
coalado coalado is offline
JD Manager
 
Join Date: Feb 2009
Posts: 1,980
Default

Calm down.. a UPNP search request is nothing special, and nothing to warn about at all.


Windows scans your network anyway if you enable this service. Just because that's what the service is for.

WIndows can display UPNP devices like the FritzBox or the Multimedia Devices for you. (BTW. By default each WIndows PC is an UPNP Control Point as well and can serve as a Media streaming server



Quote:
now i know you tried via a "famous sadly service" to scan my computer without my permission...
OMG. We use a command:
Quote:
ShellFolder.get("fileChooserComboBoxFolders")
This command should return a list of folders that should be visible in a FileChooser Dialogs Combobox:



It seems that windows does a ssdp search to look for further devices that should be in that list.

In easy words:

1. Windows screams into the network "HI GUYS - ANY NETWORK DEVICES IN HERE?"
2. Network Devices scream back: "HI WINDOWS - WHATSUUUUP"
3. Windows is happy


If windows decides to use a ssdp search to give you a better/more complete list - I don't care. It's up to the Operating System.

So should we ask you for a permission for every line of code? Seriously?:outch:

There will not be a workaround.This is fine as it is. Disable the ssdp service if you do not want windows to search for upnp network devices or set up your firewall correctly, or block the calls. But honestly: it does not make any sense at all to enable the ssdp search service and block it's commands.

One thing I did not understand: If you are soooo afraid of this bad bad evil service... why don't you just keep it disabled?

Your situation in easy words:

1. Windows screams into the network "HI GUYS - ANY NETWORK DEVICES IN HERE?"
2. Your Firewall:
3. Window::confused:
__________________

Last edited by coalado; 05.08.2013 at 10:01.
Reply With Quote
  #16  
Old 05.08.2013, 10:48
rrogntudjû
Guest
 
Posts: n/a
Default

I am really sorry if you find i am too suspicious, but i prefer to listen advices from professionals rather than people who have infested my computer in a recent past with their "bugs" in their unwanted toolbars with silent installations. And i know you are looking for another way to earn money! As i already said you make as you want, if you need to use this service its your problem but do not try to make people believe that this service is not dangerous. I have just installed Windows 7 and therefore i had not yet turned off this service, thanks to my firewall i have known that i had to.

UnPlug n' Pray empowers all Windows users with the means to shut down the dangerous and unnecessary UPnP Internet server running in their machines.


Gibson Research Corporation: last modified: May 04, 2013: grc.com/unpnp/unpnp.htm
Reply With Quote
  #17  
Old 05.08.2013, 11:14
coalado's Avatar
coalado coalado is offline
JD Manager
 
Join Date: Feb 2009
Posts: 1,980
Default

It's up to you if you disable this windows feature or not. But maybe you should look out for some more recent information about UPNP and especially about this ssdp service. Have there been any recent security problems with it? There have been a lot of changes since 2001!

Quote from your page:

Quote:
Note: The FBI's NIPC (National Infrastructure Protection Center) has apparently reversed their original opinion. They no longer assert that Microsoft's Universal Plug & Play services should be disabled for extra protection. The most recent update to their previous two notices — which did advise users to disable the UPnP services — no longer includes this advice.
But:
Quote:
As you will see below, we believe that the FBI's original security advice was correct. Leaving unneeded and potentially vulnerable Internet services running makes no sense. Doing so is foolhardy, pointless, and insecure. Why would you?
And I agree with them. If you are sure that you don't need it - disable it. That's absolutely ok. But this service is not dangerous. Have you any prove? The latest information I can get from the page you gave us is from 2002!

And it is ok to listen to advises. But what bad advise did I give you? I told you to disable the ssdp service. That's what grc.com says as well. I told you details about what this ssdp service does. I did a pretty good guess about what's "wrong" and what caused this kind of false positive alert, and I implemented an advanced option for you to bypass your problems within minutes. I did my very best to help you and to explain or solve your problems. So what? Maybe a "thank you" would be appropriate - instead of further trolling.

But do not blame us for this service. This is a windows service! We do not use it, and we do not need it. If you would keep this service enabled, you would get firewall alerts from time to time even without JDownloader. For example if you try to access your network in your windows explorer - or use Windows Media Player, or,or,or...
__________________
Reply With Quote
  #18  
Old 06.08.2013, 12:24
rrogntudjû
Guest
 
Posts: n/a
Default

First as i already said i am not a specialist in networks, when i have this type of alert and especially when it is not normal like in this case with JDownloader which has never had my permission to use this kind of service and when before it do not ask to use it, i google it. I found a lot of web sites saying these two services can be used by trojans and by security their ports should be closed, nothing more. Second if your likeing toolbar had not installed on my computer a proxy package and changed my network settings everywhere to use a backdoor connection maybe it would be different. But now even if i know JD2 will be probably the best downloader in the world i have an eye on you sorry.
Reply With Quote
  #19  
Old 06.08.2013, 12:27
coalado's Avatar
coalado coalado is offline
JD Manager
 
Join Date: Feb 2009
Posts: 1,980
Default

...I accept this as a thank you
__________________
Reply With Quote
  #20  
Old 06.08.2013, 13:16
rrogntudjû
Guest
 
Posts: n/a
Default

La confiance c'est comme la patience, elle a ses propres limites, never forget this.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT +2. The time now is 21:36.
Provided By AppWork GmbH | Privacy | Imprint
Parts of the Design are used from Kirsch designed by Andrew & Austin
Powered by vBulletin® Version 3.8.10 Beta 1
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.