LILiK
/
openwrt-packages-dist
5
0
Fork 0
Code Issues 0 Pull Requests 0 Projects 0 Releases 0 Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
10377 Commits
1 Branch
46 MiB
Tree: be02307bae
Branches Tags
${ item.name }
Create branch ${ searchTerm }
from 'be02307bae'
${ noResults }
openwrt-packages-dist/net/miniupnpd/files/upnpd.config

28 lines
695 B
Raw Normal View History

miniupnpd: Import release 20180422 to repo Import miniupnpd from routing repo and bump to 20180422. Drop 102-ipv6-ext-port.patch as this looks upstreamed in the pinhole code to me. Consolidate all other patches & update with a view to sending upstream. Add support for runtime IGDv1 mode switch (default to IGDv2) (not extensively) Tested-on: ar71xx Archer C7 v2 in IGDv1 compatibility mode. A variety of devices/applications appear to be able to create mappings. Have an attempt at resolving https://github.com/openwrt-routing/packages/issues/286 TL;DR miniupnpd rules get processed before fw3 rules and thus can override existing/intended redirects. Ideally the miniupnpd rules would be last in the relevant chains, unfortunately fw3 can sometimes use the last rule as a REJECT. Put miniupnpd rules as penultimate. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
7 years ago
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
 
  1. config upnpd config
  2. 	option enabled		0
  3. 	option enable_natpmp	1
  4. 	option enable_upnp	1
  5. 	option secure_mode	1
  6. 	option log_output	0
  7. 	option download 	1024
  8. 	option upload   	512
  9. #by default, looked up dynamically from ubus
  10. #	option external_iface	wan
  11. 	option internal_iface	lan
  12. 	option port		5000
  13. 	option upnp_lease_file	/var/upnp.leases
  14. 	option igdv1		0
  15. 

  16. config perm_rule
  17. 	option action		allow
  18. 	option ext_ports	1024-65535
  19. 	option int_addr		0.0.0.0/0	# Does not override secure_mode
  20. 	option int_ports	1024-65535
  21. 	option comment		"Allow high ports"
  22. 

  23. config perm_rule
  24. 	option action		deny
  25. 	option ext_ports	0-65535
  26. 	option int_addr		0.0.0.0/0
  27. 	option int_ports	0-65535
  28. 	option comment		"Default deny"