Internet Gateway Device Protocol


Internet Gateway Device Standardized Device Control Protocol is a protocol for mapping ports in network address translation setups, supported by some NAT-enabled routers. It is a common communications protocol for automatically configuring port forwarding, and is part of an ISO/IEC Standard ISO/IEC 29341, http://www.iso.org/iso/home/news_index/news_archive/news.htm?refid=Ref1185 rather than an Internet Engineering Task Force standard.

Usage

Applications using peer-to-peer networks, multiplayer gaming, and remote assistance programs need a way to communicate through home and business gateways. Without IGD one has to manually configure the gateway to allow traffic through, a process which is error-prone and time-consuming. Universal Plug and Play comes with a solution for network address translation traversal that implements IGD.
IGD makes it easy to do the following:
The host can allow seeking for available devices on the network via Simple Service Discovery Protocol which can be controlled then with the help of a network protocol such as SOAP. A seek request is sent via HTTP and port 1900 to the multicast address 239.255.255.250:
M-SEARCH * HTTP/1.1
Host:239.255.255.250:1900
ST:urn:schemas-upnp-org:device:InternetGatewayDevice:1
Man:"ssdp:discover"
MX:3

Security risks

With the help of scripting on a web page new risks and dangers can be caused by the IGD protocol, assuming that the change of the configuration on the gateway device has been permitted. Thereby it would be possible to bring a computer or also an entire network under the control of a foreign user. This occurs often with criminal intention. Many DSL-Routers, for example FRITZ!Box, common in Europe, support this procedure; the change of the configuration must be mostly still released by the user specially via the web interface, provided that the access to the device is protected by means of a password.