Feature #4320: Enable port-in-use checking in miniupnpd - pfSense - pfSense bugtracker

Feature #4320

Enable port-in-use checking in miniupnpd

Added by Daniel Becker over 4 years ago. Updated over 3 years ago.

Status:

Resolved

Priority:

Normal

Assignee:

Category:

uPNP

Target version:

2.3

Start date:

01/27/2015

Due date:

% Done:

100%

Estimated time:

Description

The miniupnpd port has a build-time option that forces it to check if the requested external port is already in use locally on the firewall. This prevents client mappings from interfering with services running on the firewall. This can be enabled by adding CHECK_PORTINUSE to the build options in the pfsense-tools repo; see attached patch.

enable_portinuse.patch (444 Bytes) enable_portinuse.patch

Daniel Becker, 01/27/2015 02:07 PM

Associated revisions

Revision 7d790fc3 (diff)
Added by Renato Botelho over 3 years ago

Enable CHECK_PORTINUSE option for net/miniupnpd, fixes #4320

History

#1 Updated by Daniel Becker over 4 years ago

This might actually be considered a bug rather than a feature, as without this change, miniupnpd will happily let LAN-side clients make e.g. web interface unreachable.