Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

miniupnpd: Revise several upnpd UCI configuration options and defaults #24988

Open
wants to merge 8 commits into
base: master
Choose a base branch
from

Conversation

Self-Hosting-Group
Copy link
Contributor

  • Remove clean_ruleset_interval/threshold UCI config options as not working
  • Rename UCI config option enable_nat_pmp to enable_pcp_pmp as upstream, see miniupnp/miniupnp@02da705
  • Allow third-party PCP (daemon/non-UCI) config option when secure_mode UCI config option is disabled
  • Add (one-line) daemon patch to use secure_mode UCI config also for UPnP IGD with IPv6, previously it was always enabled and the behaviour is undocumented. See miniupnp/miniupnp@c79e25a
  • Convert download/upload UCI config option from KByte/s to kbit/s and rename to *_kbps, and update defaults to 100/50 Mbit/s (informational only)
  • New/clearer UPnP IGD compatibility mode upnp_igd_compat UCI config option accepts igdv1/igdv2, replacing the current igdv1 boolean option, allowing future compatibility modes
  • Rename and invert UCI config option secure_mode to allow_third_party_maps
  • Better document and reformat default upnpd UCI config file and add (template) ACL entry for low ports (<1024) denied by default, current behaviour
  • Add uci-defaults script to migrate UCI config options

Maintainer:
Compile tested: not on OpenWrt as one-line daemon patch but compiled/tested outside of project
Run tested: daemon init/config generation and uci-defaults migration using OpenWrt snapshots

Self Hosting Group added 8 commits October 1, 2024 00:00
`enable_pcp_pmp` as upstream, see miniupnp/miniupnp@02da705

Signed-off-by: Self Hosting Group <[email protected]>
`secure_mode` UCI config option is disabled

Signed-off-by: Self Hosting Group <[email protected]>
to kbit/s and rename to `*_kbps`, and update defaults to 100/50 Mbit/s
(informational only)

Signed-off-by: Self Hosting Group <[email protected]>
UCI config option accepts `igdv1`/`igdv2`, replacing the current
`igdv1` boolean option, allowing future compatibility modes

Signed-off-by: Self Hosting Group <[email protected]>
`allow_third_party_maps`

Signed-off-by: Self Hosting Group <[email protected]>
and add (template) ACL entry for low ports (<1024) denied by default,
current behaviour

Signed-off-by: Self Hosting Group <[email protected]>
@Self-Hosting-Group
Copy link
Contributor Author

  • Can the uci-defaults script also be run on (unofficial) package upgrades via e.g. LuCI (opkg) or could we run it on daemon restarts?
  • Patch file temporarily removed due to dirty patch problem.

Comments and reviews are welcome.

@Self-Hosting-Group Self-Hosting-Group marked this pull request as ready for review October 1, 2024 09:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant