[mythtv] [mythtv-commits] Ticket #12333: SSDP (uPNP) requests ignored

[Gary Buhrmaster]

On Thu, Dec 11, 2014 at 5:31 AM,  <noreply at mythtv.org> wrote:
> #12333: SSDP (uPNP) requests ignored
....
>  I am running a system with mythtv 0.27.4. Also on my LAN are two DirecTV
>  satellite boxes and a PS3 which I use as a uPNP client. The DirecTV boxes
>  send a spew of IGMP reports, one of which is from a spoofed IP address
>  that's outside my LAN subnet.

Mitigations may be needed, but....

Have you opened a ticket with DirecTV to have them fix
address spoofing?  Address spoofing is always bad.
And if the IP address is "non-local" (and you route it
upstream without validation) it can result in you
spewing traffic out your internet connection to some
poor target victim (or, for the differently concerned,
announcing yourself to a 3rd party likely without
your authorization)

You can always enable address spoofing protection on
your switch port (either ACLs or IP source verification
(every switch/router calls it something different).  That
should solve it too.