#1
|
|||
|
|||
SSDP Discovery Service
Hi,
SSDP Discovery Service: under Windows 7 if this service is activated (manual) each time i launch JD2 i have a firewall alert, if this service is deactivated no alert. Please can you explain to me since few updates why JD2 needs to use this dangerous service??? thanks in advance. PS: with JD2 not updated since few weeks this problem does not exist... Last edited by rrogntudjû; 03.08.2013 at 08:00. |
#2
|
||||
|
||||
Say it has to do with the Streaming addon, it has a DLNA functions with UPnP support.
Need some feed back from Jiaz/Coalado,
__________________
raztoki @ jDownloader reporter/developer http://svn.jdownloader.org/users/170 Don't fight the system, use it to your advantage. :] |
#3
|
|||
|
|||
First i do not need this addon so it would be nice if i could disable it somewhere... Second i'll wait a better explanation from developers but i think its not a good thing at all to use a service well known with ports usually used by trojans.
"Famous sadly service" - ports 1900 and 5000 assiste.com.free.fr/p/services_windows/service_de_decouvertes_ssdp.html Justify: "It is about the famous sadly service called " UPnP " (Universal Plug and Play) used to make it possible to the private individuals to build a small home network by simple connection and Windows deals with the remainder! Deactivate this service and close ports 1900 and 5000. See the page UPnP on the Gibson site, the program of deactivation, the UPnP page on the site Assiste.com, the alarm bulletin of the Certa, the alarm bulletin of the FBI, articles 262458 and 323713 in the knowledge base of Microsoft (links on UPnP et contre-mesures). The 2 services, this one and "Universal Plug and Play Device Host" must be deactivated (or activated) together. Even in a home network, test the deactivated mode." Last edited by rrogntudjû; 03.08.2013 at 10:54. Reason: Grammatical error |
#4
|
||||
|
||||
Ticket:
GreeZ psp
__________________
JD Supporter, Plugin Dev. & Community Manager
Erste Schritte & Tutorials || JDownloader 2 Setup Download |
#5
|
||||
|
||||
This is probably caused by the new cling library we use for the UPNP Reconnect.
If you don't use UPNP Reconnect an the (Pre alpha) streaming extension, this library should not get used. I will check this.
__________________
|
#6
|
||||
|
||||
btw. please give me more details about the firewall alert you get.
__________________
|
#7
|
|||
|
|||
Under Windows 7 like probably also under all Microsoft OS this service is on manual by default, that's why i think its really annoying... If i do not deactivate it as it is highly recommended when JD2 start my firewall warns me it blocks incoming packets from the local IP 239.255.255.250 on port 1900 which correspond to the SSDP Discovery Service. I am not a specialist in networks but i suppose its because your new addon needs to use it otherwise my firewall would remain quiet as usual. So i think at the installation of JD2 you should warn people if they agree that your addon use this service which it is not recommended for their security, or you use your own service with another port not listed by the FBI, but i am not developer i don't know if its possible this one.
Precision: i do not use UPNP Reconnect and for the "(Pre alpha) streaming extension" i do not even know what it is and where it is to delete it? Last edited by rrogntudjû; 03.08.2013 at 19:37. |
#8
|
||||
|
||||
Are you 100% sure that this is jdownloader related?
Please give me more details about the firewall alert. As much as possible. Which Firewall do you use? If you can install wireshark, you can listen to the SSDP Packets and see where the are coming from.
__________________
|
#9
|
|||
|
|||
No more details sorry, i think what i already reported is good enough. Each time i launch JD2 i have a firewall alert (incoming packets blocked from the local IP 239.255.255.250 on port 1900), if the SSDP discovery service is deactivated no alert, so i am 100% sure it is something new used by JDownloader, you say it can be a streaming addon but when i ask where it is to test it i have no response. So you make as you want but for me the two UPnP services are definitively deactivated, no more alerts like that.
Edit: bwt its not really important for me cause i do not need streaming function and i do not use UPNP Reconnect! And anyway my firewall could not agree to open these ports even for a new feature, i have nothing to regret Last edited by rrogntudjû; 04.08.2013 at 18:10. |
#10
|
||||
|
||||
239.255.255.250 not even a "real" device in your LAN. this is a multicast adress.
The streaming addon is not part of jd2 beta yet. That's why I cannot tell you how to disable it. It is not enabled, and not distributed. It's only available for developers in their IDE. I'm pretty sure that you did not install it, so we should not waste time discussing about the streaming extension. So there is only UPNP reconnect. The UPNP reconnect uses a SEARCH multicast like this if you click the Setup Assistent in the reconnect configs, or the Choose Device Button. It is not used on jd startup at all. I doubt that this could trigger any firwall issues. Both do not use the ssdp search from windows. I guess the ssdp service is used by windows to show you all upnp devices in the windows network view. So.. I really have no idea what could cause your problem. I cannot reproduce it, and since you do not want to tell me what firewall you use, I is pretty hard to search for the problem. One thing I could imagine, is a feature called "samba prefetch". Since a few weeks, JDownloader tries to Scan the local Network folder. This is a list on all network devices. If the ssdp service is enabled, this could force windows to search for new devices - and thus trigger a Search Broadcast on 239.255.255.250:1900 This Sambaprefetch is a workaround for a bug in the filechooser dialog. If we disable this workarond, the filechooser dialog might freeze for a few seconds if you open it the first time. All this is a pretty rough guess of what could happen. Please try to disable this advanced option: "GeneralSettings: Samba Prefetch" and check if this solves your problem. The only withdraw of this is, that it might take a few seconds longer for you to open a file chooser dialog in jd. (and you should get your firewall alert then :() I would say it's worth a try
__________________
|
#11
|
|||
|
|||
First it was a java, after a tango and now a samba, finally a serious track it seems... ok i'll test this tomorrow, i give you the feedback later...
|
#12
|
|||
|
|||
Bingo for samba, effectively if i deactivate it no more alerts.
You said "Since a few weeks, JDownloader tries to Scan the local Network folder" but in general settings you just added this line "samba prefetch" with the last update, so to avoid alerts i am obliged to update all my JD2 now because on others not freshly updated i have not this line??? Please can you explain better because i do not understand. Also it proof sometimes bugs can also render services, now i know you tried via a "famous sadly service" to scan my computer without my permission... but with no success sorry. Hope you'll find a better workaround soon! |
#13
|
||||
|
||||
No double posts please, read the forum rules!!
GreeZ psp
__________________
JD Supporter, Plugin Dev. & Community Manager
Erste Schritte & Tutorials || JDownloader 2 Setup Download |
#14
|
|||
|
|||
Ok sorry, but about the rules in the French forum it would be great if you add a post to warn people that there is no moderators now to answer to their threads, because for most of them they do not understand and they think it is not polite.
|
#15
|
||||
|
||||
Calm down.. a UPNP search request is nothing special, and nothing to warn about at all.
Windows scans your network anyway if you enable this service. Just because that's what the service is for. WIndows can display UPNP devices like the FritzBox or the Multimedia Devices for you. (BTW. By default each WIndows PC is an UPNP Control Point as well and can serve as a Media streaming server Quote:
Quote:
It seems that windows does a ssdp search to look for further devices that should be in that list. In easy words: 1. Windows screams into the network "HI GUYS - ANY NETWORK DEVICES IN HERE?" 2. Network Devices scream back: "HI WINDOWS - WHATSUUUUP" 3. Windows is happy If windows decides to use a ssdp search to give you a better/more complete list - I don't care. It's up to the Operating System. So should we ask you for a permission for every line of code? Seriously?:outch: There will not be a workaround.This is fine as it is. Disable the ssdp service if you do not want windows to search for upnp network devices or set up your firewall correctly, or block the calls. But honestly: it does not make any sense at all to enable the ssdp search service and block it's commands. One thing I did not understand: If you are soooo afraid of this bad bad evil service... why don't you just keep it disabled? Your situation in easy words: 1. Windows screams into the network "HI GUYS - ANY NETWORK DEVICES IN HERE?" 2. Your Firewall: 3. Window::confused:
__________________
Last edited by coalado; 05.08.2013 at 10:01. |
#16
|
|||
|
|||
I am really sorry if you find i am too suspicious, but i prefer to listen advices from professionals rather than people who have infested my computer in a recent past with their "bugs" in their unwanted toolbars with silent installations. And i know you are looking for another way to earn money! As i already said you make as you want, if you need to use this service its your problem but do not try to make people believe that this service is not dangerous. I have just installed Windows 7 and therefore i had not yet turned off this service, thanks to my firewall i have known that i had to.
UnPlug n' Pray empowers all Windows users with the means to shut down the dangerous and unnecessary UPnP Internet server running in their machines. Gibson Research Corporation: last modified: May 04, 2013: grc.com/unpnp/unpnp.htm |
#17
|
||||
|
||||
It's up to you if you disable this windows feature or not. But maybe you should look out for some more recent information about UPNP and especially about this ssdp service. Have there been any recent security problems with it? There have been a lot of changes since 2001!
Quote from your page: Quote:
Quote:
And it is ok to listen to advises. But what bad advise did I give you? I told you to disable the ssdp service. That's what grc.com says as well. I told you details about what this ssdp service does. I did a pretty good guess about what's "wrong" and what caused this kind of false positive alert, and I implemented an advanced option for you to bypass your problems within minutes. I did my very best to help you and to explain or solve your problems. So what? Maybe a "thank you" would be appropriate - instead of further trolling. But do not blame us for this service. This is a windows service! We do not use it, and we do not need it. If you would keep this service enabled, you would get firewall alerts from time to time even without JDownloader. For example if you try to access your network in your windows explorer - or use Windows Media Player, or,or,or...
__________________
|
#18
|
|||
|
|||
First as i already said i am not a specialist in networks, when i have this type of alert and especially when it is not normal like in this case with JDownloader which has never had my permission to use this kind of service and when before it do not ask to use it, i google it. I found a lot of web sites saying these two services can be used by trojans and by security their ports should be closed, nothing more. Second if your likeing toolbar had not installed on my computer a proxy package and changed my network settings everywhere to use a backdoor connection maybe it would be different. But now even if i know JD2 will be probably the best downloader in the world i have an eye on you sorry.
|
#19
|
||||
|
||||
...I accept this as a thank you
__________________
|
#20
|
|||
|
|||
La confiance c'est comme la patience, elle a ses propres limites, never forget this.
|
Thread Tools | |
Display Modes | |
|
|