Project

General

Profile

Feature #5627

Option to set secure_mode in UPnP?

Added by net texan about 4 years ago. Updated almost 4 years ago.

Status:
Resolved
Priority:
Normal
Category:
uPNP
Target version:
Start date:
12/11/2015
Due date:
% Done:

0%

Estimated time:

Description

Not sure if this is supported in the pfSense UPnP implementation of miniupnpd.

There is an option "secure_mode" in miniupnpd.conf, at least it is common in most implementations of miniupnpd that I have seen.

The description of it is "Secure mode; client can only redirect an incoming port to the client itself (same IP as the request comes from)."

This would be very useful to be able to toggle in the GUI. It may even be worth considering setting it as the default.

Associated revisions

Revision b93bb38c (diff)
Added by Chris Buechler almost 4 years ago

Set secure_mode=yes in miniupnpd config. Ticket #5627

History

#1 Updated by Chris Buechler almost 4 years ago

  • Status changed from New to Feedback
  • Assignee set to Chris Buechler
  • Target version set to 2.3

this should be safe to have always enabled. I committed a change to always have that set to yes. If that ends up being problematic we can add an option to make it configurable. I can't think of any typical use of UPnP where that would be a problem.

#2 Updated by Chris Buechler almost 4 years ago

  • Status changed from Feedback to Resolved

not seeing any situation where you wouldn't want secure_mode, we'll leave that enabled with no option to disable unless a use case appears where that doesn't suffice.

Also available in: Atom PDF