How to Set Up a Router's Port Forwarding for a Nintendo Switch Console

Re:How to Set Up a Router's Port Forwarding for a Nintendo S... by kelnos on Thursday January 13, 2022 @12:15PM (#29923439)

UPnP is a security risk (as is forwarding all UDP ports to a single device). Nintendo should set up STUN servers so the Switch can do UDP hole punching.

[ Parent | on HN ]

Re:How to Set Up a Router's Port Forwarding for a Nintendo S... by WolfRazu on Friday January 14, 2022 @05:47AM (#29932885)

How is hole punching more secure than UPnP? They both achieve exactly the same thing.

[ Parent | on HN ]

Re:How to Set Up a Router's Port Forwarding for a Nintendo S... by kelnos on Saturday January 15, 2022 @02:13AM (#29944383)

Enabling UPnP on your router enables a malicious app to permanently forward ports from the outside to the inside. The malicious app could also forward ports to other devices on your network. For example, installing a bit of malware on your laptop could set up a port forwarding rule from the internet to your NAS's web interface.

UDP hole punching via STUN requires continuous work on the part of a malicious app to keep that port open. Work that could be noticed much easier than a rogue UPnP-using bit of malware. And it can't open ports to other devices on your network.

[ Parent | on HN ]