Project

General

Profile

Actions

Feature #5627

closed

Option to set secure_mode in UPnP?

Added by net texan over 8 years ago. Updated over 8 years ago.

Status:
Resolved
Priority:
Normal
Category:
UPnP/NAT-PMP
Target version:
Start date:
12/11/2015
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:

Description

Not sure if this is supported in the pfSense UPnP implementation of miniupnpd.

There is an option "secure_mode" in miniupnpd.conf, at least it is common in most implementations of miniupnpd that I have seen.

The description of it is "Secure mode; client can only redirect an incoming port to the client itself (same IP as the request comes from)."

This would be very useful to be able to toggle in the GUI. It may even be worth considering setting it as the default.

Actions #1

Updated by Chris Buechler over 8 years ago

  • Status changed from New to Feedback
  • Assignee set to Chris Buechler
  • Target version set to 2.3

this should be safe to have always enabled. I committed a change to always have that set to yes. If that ends up being problematic we can add an option to make it configurable. I can't think of any typical use of UPnP where that would be a problem.

Actions #2

Updated by Chris Buechler over 8 years ago

  • Status changed from Feedback to Resolved

not seeing any situation where you wouldn't want secure_mode, we'll leave that enabled with no option to disable unless a use case appears where that doesn't suffice.

Actions

Also available in: Atom PDF