Ron F. wrote: 
> ... this article, specifically discussing UPnP SSDP, is more accessible
> with my limited understanding of netfilter:
> https://serverfault.com/questions/250797/stateful-matching-of-multicast-responses-in-iptables
> 
Ron F.  I tried this. 
I removed my over-generous 30000:60000 port range access from a UPnP
device.
I installed ipset, and entered the 3 commands (under sudo) exactly as in
the article, ie:

Code:
--------------------
    
  sudo ipset create upnp hash:ip,port timeout 3
  sudo iptables -A OUTPUT -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j 
SET --add-set upnp src,src --exist
  sudo iptables -A INPUT -p udp -m set --match-set upnp dst,dst -j ACCEPT
  
--------------------

My server sends broadcasts from its IP, a port like 53067 (for instance)
to 239.255.255.250 port 1900.  

However, the responses from a UPnP device, port 1900, to my server IP,
matching port 53067 (for instance), are blocked.  When I quickly look at


Code:
--------------------
    
  sudo ipset list upnp
  
--------------------


I see no entries (which I assumed were going to be transiently created
by the 1st iptables command)

I have to admit that every time I look at a ufw log I seem to find
different things going on, so I can't be sure that the above is
consistent.

Have you tried?



LMS 7.9.2 on PC, Xubuntu 18.04, FLACs 16->24 bit, 44.1->192kbps.  2
Touchs & EDO.
LMS plugin UPnP/DLNA Bridge to MF M1 CLiC (A308CR amp & ESLs) & Marantz
CR603 UPnP renderers.  
Also Minimserver & Upplay to same & to upmpdcli/mpd PC renderers.  
Squeezelite to Meridian USB Explorer DAC to PC speakers/headphones.  
Wireless Xubuntu 18.04 laptop firefox/upplay or Android 'phone with
Squeeze-Commander/BubbleUPnP controls LMS/Minimserver.
------------------------------------------------------------------------
PasTim's Profile: http://forums.slimdevices.com/member.php?userid=41642
View this thread: http://forums.slimdevices.com/showthread.php?t=103728

_______________________________________________
plugins mailing list
[email protected]
http://lists.slimdevices.com/mailman/listinfo/plugins

Reply via email to