<story><title>Stupidly Simple DDoS Protocol (SSDP) Generates 100 Gbps DDoS</title><url>https://blog.cloudflare.com/ssdp-100gbps/</url></story><parent_chain><item><author>upofadown</author><text>&amp;gt;It&amp;#x27;s not a novelty that allowing UDP port 1900 traffic from the Internet to your home printer or such is not a good idea.&lt;p&gt;How would this even be possible? Home routers have to NAT everything. Normally you have to set up reverse NAT to get ports forwarded to the LAN.</text></item></parent_chain><comment><author>sebcat</author><text>You don&amp;#x27;t have to have a router. The apartment building where I live have fiber, with twisted pair to each apartment. DHCP leases from the apartment gives you an external IP. It&amp;#x27;s possible to hook up a switch and get DHCP leases for multiple devices. I assume there&amp;#x27;s an upper limit, I&amp;#x27;ve only tried it with two devices.&lt;p&gt;Now, let&amp;#x27;s say I hook up a printer to a switch in that configuration. Is it smart enough to not respond to UPnP coming from globally routable addresses?&lt;p&gt;This is why ingress filtering is important.</text></comment>
<story><title>Stupidly Simple DDoS Protocol (SSDP) Generates 100 Gbps DDoS</title><url>https://blog.cloudflare.com/ssdp-100gbps/</url></story><parent_chain><item><author>upofadown</author><text>&amp;gt;It&amp;#x27;s not a novelty that allowing UDP port 1900 traffic from the Internet to your home printer or such is not a good idea.&lt;p&gt;How would this even be possible? Home routers have to NAT everything. Normally you have to set up reverse NAT to get ports forwarded to the LAN.</text></item></parent_chain><comment><author>detaro</author><text>The printer is just an example - if you look at the tables with the collected data, the vast majority of devices they found are home routers.</text></comment>