pfSense » pfSense Packages

Please see https://forum.netgate.com/post/1158297

For those that wish to ingest miniupnpd (UPNP) firewall and nat manipulation logs into a logger or SIEM on a permanent basis, a change to the way miniupnpd is started is required. It needs the -v argument. I created my own patch to do this for now, but one of the admins suggested I open a feature request to make it available to others who whish to either a) apply the patch for debugging purposes on a temporary basis, or b) leave it applied across all restarts/upgrades so the logs are always generated. The miniupnpd service must be restarted after patch application/removal.

--- a/etc/inc/services.inc      2024-03-19 14:22:36.023371000 -0400
+++ b/etc/inc/services.inc      2024-03-19 14:22:02.406017000 -0400
@@ -5006,1 +5006,1 @@
-                               mwexec_bg("/usr/local/sbin/miniupnpd -f /var/etc/miniupnpd.conf -P {$g['varrun_path']}/miniupnpd.pid");
+                               mwexec_bg("/usr/local/sbin/miniupnpd -v -f /var/etc/miniupnpd.conf -P {$g['varrun_path']}/miniupnpd.pid");