From owner-freebsd-pf@FreeBSD.ORG Mon Aug 21 01:42:46 2006 Return-Path: X-Original-To: freebsd-pf@freebsd.org Delivered-To: freebsd-pf@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 07D0316A4E7 for ; Mon, 21 Aug 2006 01:42:46 +0000 (UTC) (envelope-from sullrich@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.169]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5C9DB43D45 for ; Mon, 21 Aug 2006 01:42:45 +0000 (GMT) (envelope-from sullrich@gmail.com) Received: by ug-out-1314.google.com with SMTP id m2so1535720uge for ; Sun, 20 Aug 2006 18:42:44 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=P44p7kfCZsaiaDDzSCtF8mGflIexc9M+9GdpEeLoaLviu1ab1e7tJ6RDyP5IY4kZSAQQUt3ZjVKpmmAqmk9u37ICDx71F8zKMePGpTfLXxSNljC0B4EHZ8saj/t9mfGu4Fs9HbKk4LJQrZouP3HENq/3b3chq+KwmrYw3Yh7/uk= Received: by 10.66.220.17 with SMTP id s17mr3272635ugg; Sun, 20 Aug 2006 18:42:44 -0700 (PDT) Received: by 10.67.28.14 with HTTP; Sun, 20 Aug 2006 18:42:44 -0700 (PDT) Message-ID: Date: Sun, 20 Aug 2006 21:42:44 -0400 From: "Scott Ullrich" To: "freebsd-pf@freebsd.org" In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: Subject: Re: miniupnp port for FreeBSD-PF X-BeenThere: freebsd-pf@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Technical discussion and general questions about packet filter \(pf\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Aug 2006 01:42:46 -0000 On 8/20/06, Scott Ullrich wrote: > Hello! > > Thanks to Seth Mos of the pfSense project and http://miniupnp.free.fr/ > we would like to present the first draft of a enhanced miniupnpd port. > > This ports extends the version found http://miniupnp.free.fr/ to > automatically install pf rules for the opened upnp rdr ports. In > addition I have added a -o switch allowing a user to override the wan > ip so that CARP can work correctly. > > The port skeleton can be found at > http://www.pfsense.com/~sullrich/ports/net/miniupnpd.tgz ... Simply > extract it to /usr/ports/net/ > > To start miniupnpd simply run something similar to this: > > miniupnpd -i fxp0 -a 10.0.250.2 -o X.X.X.X -p 2689 > > -i = wan interface > -a = lan ip to listen on > -o = desired wan ip to listen on (optional) > -p = port to listen on > > Things that need to be done still: > > * Manual page > > Thanks to Andrew Thompson for helping me with the -o option when I was > having brain issues and to Seth Mos for adding the additional firewall > rule support. Also thanks to Thomas Bernard who created miniupnpd. > > Comments, questions, please! > > Scott > Sorry, I almost forgot that you need to stick two anchors in your pf.conf file.. One for rdr and one for pass rules: # UPnPd rdr anchor rdr-anchor "miniupnpd" # uPnPd anchor "miniupnpd" Scott