From owner-freebsd-pf@FreeBSD.ORG Mon Aug 21 01:38:38 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7A10216A4DA for ; Mon, 21 Aug 2006 01:38:38 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.174]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8C9DE43D46 for ; Mon, 21 Aug 2006 01:38:37 +0000 (GMT) (envelope-from sullrich@gmail.com) Received: by ug-out-1314.google.com with SMTP id m2so1535051uge for ; Sun, 20 Aug 2006 18:38:36 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:mime-version:content-type:content-transfer-encoding:content-disposition; b=VvbmkN5y1BAwF3Mr0vm43lZisrOHIy1aNcJ9QYDosQl5+/ID3EnsnkmjC70sBnwwCjuRI6jLlYdq4EPmPQEGovJtyyCu9rE1H+93QkWtbtmDbvsUedrw97UZuy7WgR+oP+J2GBsSSwdI5iZ0pUvHLz0RGoMZNYwRgZRzdZa3PHs= Received: by 10.67.101.8 with SMTP id d8mr3272182ugm; Sun, 20 Aug 2006 18:38:36 -0700 (PDT) Received: by 10.67.28.14 with HTTP; Sun, 20 Aug 2006 18:38:36 -0700 (PDT) Message-ID: Date: Sun, 20 Aug 2006 21:38:36 -0400 From: "Scott Ullrich" To: "freebsd-pf@freebsd.org" MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Subject: miniupnp port for FreeBSD-PF X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2006 01:38:38 -0000 Hello! Thanks to Seth Mos of the pfSense project and http://miniupnp.free.fr/ we would like to present the first draft of a enhanced miniupnpd port. This ports extends the version found http://miniupnp.free.fr/ to automatically install pf rules for the opened upnp rdr ports. In addition I have added a -o switch allowing a user to override the wan ip so that CARP can work correctly. The port skeleton can be found at http://www.pfsense.com/~sullrich/ports/net/miniupnpd.tgz ... Simply extract it to /usr/ports/net/ To start miniupnpd simply run something similar to this: miniupnpd -i fxp0 -a 10.0.250.2 -o X.X.X.X -p 2689 -i = wan interface -a = lan ip to listen on -o = desired wan ip to listen on (optional) -p = port to listen on Things that need to be done still: * Manual page Thanks to Andrew Thompson for helping me with the -o option when I was having brain issues and to Seth Mos for adding the additional firewall rule support. Also thanks to Thomas Bernard who created miniupnpd. Comments, questions, please! Scott