[net] IP Addresses and Names: miniupnpd: Added rule to allow high ports be default. This fixes miniupnpd default to config so that it works as expected after installed and enabled. Also added comments for the UI, and removed the example config file as it is no longer needed.

git-svn-id: svn://svn.openwrt.org/openwrt/packages@26205 3c298f89-4303-0410-b956-a3cf2f4a3e73
This commit is contained in:
cshore 2011-03-17 17:50:33 +00:00
parent 564845633b
commit dddaecff07
3 changed files with 8 additions and 46 deletions

View File

@ -51,7 +51,6 @@ define Package/miniupnpd/install
$(INSTALL_DATA) ./files/miniupnpd.iface.hotplug $(1)/etc/hotplug.d/iface/50-miniupnpd
$(INSTALL_DATA) ./files/miniupnpd.firewall.hotplug $(1)/etc/hotplug.d/firewall/50-miniupnpd
$(INSTALL_DIR) $(1)/usr/share/miniupnpd
$(INSTALL_DATA) ./files/upnpd.config.example $(1)/etc/config/upnpd.example
endef
$(eval $(call BuildPackage,miniupnpd))

View File

@ -8,9 +8,17 @@ config upnpd config
option external_iface wan
option internal_iface lan
option port 5000
config perm_rule
option action allow
option ext_ports 1024-65535
option int_addr 0.0.0.0/0 # Does not override secure_mode
option int_ports 1024-65535
option comment "Allow high ports"
config perm_rule
option action deny
option ext_ports 0-65535
option int_addr 0.0.0.0/0
option int_ports 0-65535
option comment "Default deny"

View File

@ -1,45 +0,0 @@
config upnpd config
option enable_natpmp 1
option enable_upnp 1
option secure_mode 1
option log_output 0
option download 1024
option upload 512
option external_iface wan
option internal_iface lan
option port 5000
config perm_rule
option action deny
option ext_ports 0-65535
option int_addr 0.0.0.0/0
option int_ports 0-65535
# Allow rule
# Allow incoming on a port in the range 1024 to 65535 to be redirected to
# any 192.168.1.0/24 subnet host (depending on secure_mod) on a port in the
# range 1024 to 65535
# config perm_rule
# option action allow
# option ext_ports 1024-65535
# option int_addr 192.168.1.0/24
# option int_ports 1024-65535
# Single port
# Allow incoming on 12233 to be redirected to 192.168.1.24 on a port in the
# range 12233 to 12345 (inclusive)
# config perm_rule
# option action allow
# option ext_ports 12233
# option int_addr 192.168.1.24/24
# option int_ports 12233-12345
#
# Deny rule (recommended at end)
# Deny any redirection that matchs:
# incoming on port 0-65535, redirected to any port numbered 0-65535 on any ip
# config perm_rule
# option action deny
# option ext_ports 0-65535
# option int_addr 0.0.0.0/0
# option int_ports 0-65535