Skip to content

miniupnpc: Add information about iptables settings into README

Thomas Bernard requested to merge pali:master into master

Created by: pali

Configuring iptables firewall for UPnP clients to not be too relax is not easy. This is because netfilter's conntrack module cannot track unicast UDP responses for UDP packets sent to multicast address. Most users either turn firewall off or accept any incoming UDP packets to have UPnP clients working.

But with introduction of ipset into Linux kernel >= 2.6.39 it is possible to have iptables set to fully restrictive mode (-P DROP) and allow UPnP clients working.

I think that it can be useful for miniupnp users, therefore I'm creating this pull request with iptables match rules for miniupnp project. Feel free to move it or drop if you think it is not useful at all.

Detailed description is available on: https://serverfault.com/a/911286 https://unix.stackexchange.com/a/444804

Merge request reports