On 03/31/2016 02:07 PM, Ed W wrote: > Hi, I upgraded to the latest miniupnpd recently, and I see it now has > some feature which looks like support for port masquerading? > > Config file requires you to specify a name for the new table and > defaults to: MINIUPNPD-POSTROUTING > > # Chain names for netfilter (not used for pf or ipf). > # default is MINIUPNPD for both > #upnp_forward_chain=forwardUPnP > #upnp_nat_chain=UPnP > #upnp_nat_postrouting_chain=UPnP-Postrouting > > > From the example iptables_init.sh > > #adding the MINIUPNPD chain for nat > $IPTABLES -t nat -N MINIUPNPD-POSTROUTING > $IPTABLES -t nat -A POSTROUTING -o $EXTIF -j MINIUPNPD-POSTROUTING > > > Examples of the contents of that table: > > $ iptables -t nat -L MINIUPNPD-POSTROUTING > Chain MINIUPNPD-POSTROUTING (0 references) > target prot opt source destination > MASQUERADE udp -- XboxOne.wildgooses.lan anywhere udp spt:xbox masq > ports: 3074 > MASQUERADE udp -- XboxOne.wildgooses.lan anywhere udp spt:3075 masq > ports: 3075 > > > Do you see that this might be integrated into the internal miniupnpd > function?
Certainly. > > Do you see a workaround in the meantime (I tried creating the extra > chain in shorewall.init, but it gets deleted during subsequent startup?) In /etc/shorewall/start: run_iptables -t nat -N MINIUPNPD-POSTROUTING run_iptables -t nat -I POSTROUTING -o $EXTIF -j MINIUPNPD-POSTROUTING > > Thanks for considering this No problem, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Transform Data into Opportunity. Accelerate data analysis in your applications with Intel Data Analytics Acceleration Library. Click to learn more. http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
