LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
21765 Commits
1 Branch
46 MiB
Tree: 07f8fa02f3
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from '07f8fa02f3'
${ noResults }
openwrt-packages-dist/net/miniupnpd/files/upnpd.config

28 lines
702 B
Raw Normal View History

miniupnpd: Import release 20180422 to repo Import miniupnpd from routing repo and bump to 20180422. Drop 102-ipv6-ext-port.patch as this looks upstreamed in the pinhole code to me. Consolidate all other patches & update with a view to sending upstream. Add support for runtime IGDv1 mode switch (default to IGDv2) (not extensively) Tested-on: ar71xx Archer C7 v2 in IGDv1 compatibility mode. A variety of devices/applications appear to be able to create mappings. Have an attempt at resolving https://github.com/openwrt-routing/packages/issues/286 TL;DR miniupnpd rules get processed before fw3 rules and thus can override existing/intended redirects. Ideally the miniupnpd rules would be last in the relevant chains, unfortunately fw3 can sometimes use the last rule as a REJECT. Put miniupnpd rules as penultimate. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
7 years ago
​
​
​
​
​
miniupnpd: convert to procd Massive cleanup of the shell script. Many issues were fixed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
5 years ago
​
miniupnpd: Import release 20180422 to repo Import miniupnpd from routing repo and bump to 20180422. Drop 102-ipv6-ext-port.patch as this looks upstreamed in the pinhole code to me. Consolidate all other patches & update with a view to sending upstream. Add support for runtime IGDv1 mode switch (default to IGDv2) (not extensively) Tested-on: ar71xx Archer C7 v2 in IGDv1 compatibility mode. A variety of devices/applications appear to be able to create mappings. Have an attempt at resolving https://github.com/openwrt-routing/packages/issues/286 TL;DR miniupnpd rules get processed before fw3 rules and thus can override existing/intended redirects. Ideally the miniupnpd rules would be last in the relevant chains, unfortunately fw3 can sometimes use the last rule as a REJECT. Put miniupnpd rules as penultimate. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
7 years ago
​
​
​
miniupnpd: change leasefile location Move default leasefile location from /var to /var/run. Also rename from upnp.leases to miniupnpd.leases Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
7 years ago
miniupnpd: default to IGDv1 It seems even modern stuff doesn't support v2 correctly. The miniupnp suite does but other stacks seem to lack support. Default to v1 to avoid the headache. Signed-off-by: Rosen Penev <rosenp@gmail.com>
4 years ago
miniupnpd: Import release 20180422 to repo Import miniupnpd from routing repo and bump to 20180422. Drop 102-ipv6-ext-port.patch as this looks upstreamed in the pinhole code to me. Consolidate all other patches & update with a view to sending upstream. Add support for runtime IGDv1 mode switch (default to IGDv2) (not extensively) Tested-on: ar71xx Archer C7 v2 in IGDv1 compatibility mode. A variety of devices/applications appear to be able to create mappings. Have an attempt at resolving https://github.com/openwrt-routing/packages/issues/286 TL;DR miniupnpd rules get processed before fw3 rules and thus can override existing/intended redirects. Ideally the miniupnpd rules would be last in the relevant chains, unfortunately fw3 can sometimes use the last rule as a REJECT. Put miniupnpd rules as penultimate. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
7 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
 
  1. config upnpd config
  2. 	option enabled		0
  3. 	option enable_natpmp	1
  4. 	option enable_upnp	1
  5. 	option secure_mode	1
  6. 	option log_output	0
  7. 	option download		1024
  8. 	option upload		512
  9. #by default, looked up dynamically from ubus
  10. #	option external_iface	wan
  11. 	option internal_iface	lan
  12. 	option port		5000
  13. 	option upnp_lease_file	/var/run/miniupnpd.leases
  14. 	option igdv1		1
  15. 

  16. config perm_rule
  17. 	option action		allow
  18. 	option ext_ports	1024-65535
  19. 	option int_addr		0.0.0.0/0	# Does not override secure_mode
  20. 	option int_ports	1024-65535
  21. 	option comment		"Allow high ports"
  22. 

  23. config perm_rule
  24. 	option action		deny
  25. 	option ext_ports	0-65535
  26. 	option int_addr		0.0.0.0/0
  27. 	option int_ports	0-65535
  28. 	option comment		"Default deny"