Re: FireHOL and miniupnpd

Phil Whineray <[email protected]> Sat, 8 Aug 2015 10:54:51 +0100

Newsgroups	gmane.comp.security.firewalls.firehol.user
Message-ID	<[email protected]>

Hi Ignacio

On Sat, Aug 08, 2015 at 12:23:46AM -0300, Ignacio Benedetti wrote:
> Enabling server multicast accept does not work (or what I'm doing is wrong).

Looking at your iptables logs and config, it seems at face value
like that should work.

It looks like you tested setting the interface policy to accept.
Did things work then?

Certainly it seems that the upnp daemon is being prevented from sending
packets because no rule matches:
  Aug 08 00:12:01 kraftig kernel: OUT-unknown:IN= OUT=lan0
      SRC=192.168.1.10 DST=239.255.255.250 LEN=426 TOS=0x00 PREC=0x00 TTL=2
      ID=52821 DF PROTO=UDP SPT=33980 DPT=1900 LEN=406

If it works with policy accept, can you try adding into "nolan" the
"server multicast accept" and report the logs accordingly?

Cheers
Phil
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support