3 Commits

Author	SHA1	Message	Date
Kevin Darbyshire-Bryant	679a7b69ee	miniupnpd: add patience to firewall include ... Occasionally, mostly at startup, miniupnpd reports "Another app is currently holding the xtables lock. Perhaps you want to use the -w option?" Take iptables' advice and wait up to 1 second before giving up. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>	2021-03-20 16:01:25 +00:00
Marco Martins	773b87977e	miniupnpd: Added chain rule to filter table so udp stun incoming connections rules works ... Signed-off-by: Marco Martins <marcomartins86@gmail.com>	2020-11-25 14:12:18 -08:00
Kevin Darbyshire-Bryant	a2e2eeb409	miniupnpd: Import release 20180422 to repo ... Import miniupnpd from routing repo and bump to 20180422. Drop 102-ipv6-ext-port.patch as this looks upstreamed in the pinhole code to me. Consolidate all other patches & update with a view to sending upstream. Add support for runtime IGDv1 mode switch (default to IGDv2) (not extensively) Tested-on: ar71xx Archer C7 v2 in IGDv1 compatibility mode. A variety of devices/applications appear to be able to create mappings. Have an attempt at resolving https://github.com/openwrt-routing/packages/issues/286 TL;DR miniupnpd rules get processed before fw3 rules and thus can override existing/intended redirects. Ideally the miniupnpd rules would be last in the relevant chains, unfortunately fw3 can sometimes use the last rule as a REJECT. Put miniupnpd rules as penultimate. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>	2018-05-04 09:03:56 +01:00