Skip to content

Firewall alias for UPNP forwarded ports [net/upnp -- UPnP IGD & PCP/NAT-PMP Service] #5105

@Caligo82

Description

@Caligo82

Is your feature request related to a problem? Please describe.
I want to protect my UPNP forwarded ports with additional firewall rules

Describe the solution you'd like
Ideally I'd like to have UPNP plugin create a firewall alias for its forwarded ports. Also per client separation.

Describe alternatives you've considered
I set up a script that can read UPNP ports and saves them to a txt file.
I set up a little http server using nginx serving these text files containing the corresponding ports for each client.
Tried to set up a port alias similar to maltrails fail2ban blacklist.
However trying to set up an alias it complains:

Entry "http://127.0.0.1:9080/upnp.alias/UPNP_178_PORTS.txt" is not a valid port number.

Obviously OPNSENSE only wants raw numbers there...

(If there's a workaround by manually setting an alias... that'd be possible too...)

Metadata

Metadata

Assignees

No one assigned

    Labels

    incompleteIssue template missing info

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions