Hi, I upgraded to the latest miniupnpd recently, and I see it now has some feature which looks like support for port masquerading?
Config file requires you to specify a name for the new table and defaults to: MINIUPNPD-POSTROUTING # Chain names for netfilter (not used for pf or ipf). # default is MINIUPNPD for both #upnp_forward_chain=forwardUPnP #upnp_nat_chain=UPnP #upnp_nat_postrouting_chain=UPnP-Postrouting From the example iptables_init.sh #adding the MINIUPNPD chain for nat $IPTABLES -t nat -N MINIUPNPD-POSTROUTING $IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MINIUPNPD-POSTROUTING Examples of the contents of that table: $ iptables -t nat -L MINIUPNPD-POSTROUTING Chain MINIUPNPD-POSTROUTING (0 references) target prot opt source destination MASQUERADE udp -- XboxOne.wildgooses.lan anywhere udp spt:xbox masq ports: 3074 MASQUERADE udp -- XboxOne.wildgooses.lan anywhere udp spt:3075 masq ports: 3075 Do you see that this might be integrated into the internal miniupnpd function? Do you see a workaround in the meantime (I tried creating the extra chain in shorewall.init, but it gets deleted during subsequent startup?) Thanks for considering this Ed W ------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
