UPnP Fix for multiple clients/consoles playing the same game

Saber

@encrypt1d said in UPnP Fix for multiple clients/consoles playing the same game:

@saber

Yeah, any one of those could be interfering.

I check the states for current ports in use for 9308, and nothing showed up.

encrypt1d

Honestly, I think the miniupnpd rules should actually take precedence - maybe @jimp can confirm that. That matches my testing anyway.

Is miniupnpd actually adding nat rules?
check using this command on the firewall:

pfSsh.php playback pfanchordrill

It should look like this, maybe with different ports (while you have a client actively running). I masked out the IP with X's.:

ipsec rules/nat contents:

miniupnpd rules/nat contents:
nat log quick on igb0 inet proto udp from 192.168.8.2 port = 3074 to any keep state label "DemonwarePortMapping" rtable 0 -> X.X.X.X port 3074
rdr pass log quick on igb0 inet proto udp from any to any port = 3074 keep state label "DemonwarePortMapping" rtable 0 -> 192.168.8.2 port 3074

natearly rules/nat contents:

natrules rules/nat contents:

openvpn rules/nat contents:

tftp-proxy rules/nat contents:

userrules rules/nat contents:

If your client is stuck retrying, you may see lots in there.

jimp

UPnP NAT rules will take precedence over outbound NAT provided the patch is applied and the nat-anchor for miniupnpd is in the ruleset.

What is less clear is how it might be interacting with NAT reflection (port forwards, 1:1 NAT).

Saber

@encrypt1d said in UPnP Fix for multiple clients/consoles playing the same game:

@saber

Honestly, I think the miniupnpd rules should actually take precedence - maybe @jimp can confirm that. That matches my testing anyway.

Is miniupnpd actually adding nat rules?
check using this command on the firewall:
pfSsh.php playback pfanchordrill
It should look like this, maybe with different ports (while you have a client actively running). I masked out the IP with X's.:
ipsec rules/nat contents:

miniupnpd rules/nat contents:
nat log quick on igb0 inet proto udp from 192.168.8.2 port = 3074 to any keep state label "DemonwarePortMapping" rtable 0 -> X.X.X.X port 3074
rdr pass log quick on igb0 inet proto udp from any to any port = 3074 keep state label "DemonwarePortMapping" rtable 0 -> 192.168.8.2 port 3074

natearly rules/nat contents:

natrules rules/nat contents:

openvpn rules/nat contents:

tftp-proxy rules/nat contents:

userrules rules/nat contents:
If your client is stuck retrying, you may see lots in there.

Nothing other than the first Playstation logged. This is what I see when I run that command (x'd out public IP):

pfSsh.php playback pfanchordrill

ipsec rules/nat contents:

miniupnpd rules/nat contents:
nat log quick on em0 inet proto udp from 10.0.0.19 port = 9308 to any keep state label "10.0.0.19:9308 to 9308 (UDP)" rtable 0 -> xxx.xxx.xxx.xxx port 9308
rdr pass log quick on em0 inet proto udp from any to any port = 9308 keep state label "10.0.0.19:9308 to 9308 (UDP)" rtable 0 -> 10.0.0.19 port 9308

natearly rules/nat contents:

natrules rules/nat contents:

openvpn rules/nat contents:

tftp-proxy rules/nat contents:

userrules rules/nat contents:

@jimp
I don't have NAT reflection or 1:1 configured or enabled. Should I try it?

encrypt1d

@saber

I have "NAT Reflection mode for port forwards" set to Pure NAT, and "Enable automatic outbound NAT for reflection" checked, nothing else.

Does your second client send any more port requests or does it die after the first try?

Saber

@encrypt1d said in UPnP Fix for multiple clients/consoles playing the same game:

@saber

I have "NAT Reflection mode for port forwards" set to Pure NAT, and "Enable automatic outbound NAT for reflection" checked, nothing else.

Does your second client send any more port requests or does it die after the first try?

It generates multiple requests at least according to the network capture. But gives up eventually and I have to reboot it to get it to try to initiate UPnP again.

Enabled both Pure NAT, and Enable Automatic Outbound NAT for reflection and still no go. I restarted UPnP service after that with no change.

jimp

@saber said in UPnP Fix for multiple clients/consoles playing the same game:

I don't have NAT reflection or 1:1 configured or enabled. Should I try it?

If you don't have anything configured in 1:1 NAT and have none of the reflection options enabled then that is probably not what's happening in your case.

It sounds more like whatever game you're using is doing something different than others here. In the other cases (fixed by the patch) the games/consoles were properly requesting the mappings and they were all showing up, but the NAT wasn't being applied properly. In your case it's not getting that far.

Saber

@jimp said in UPnP Fix for multiple clients/consoles playing the same game:

@saber said in UPnP Fix for multiple clients/consoles playing the same game:

I don't have NAT reflection or 1:1 configured or enabled. Should I try it?

If you don't have anything configured in 1:1 NAT and have none of the reflection options enabled then that is probably not what's happening in your case.

It sounds more like whatever game you're using is doing something different than others here. In the other cases (fixed by the patch) the games/consoles were properly requesting the mappings and they were all showing up, but the NAT wasn't being applied properly. In your case it's not getting that far.

No gaming yet, this is just the consoles booting up. Whichever one boots up first gets NAT Type 2, while the second one to boot up gets NAT Type 3. This is after I removed the Static Port map and testing per your first post above.

From the network capture this is just the consoles checking NAT.

jimp

Out of curiosity what happens if you do try a game? Is the result inside the game reported the same? I got the impression from others above that they were checking inside a game, not just on the console, but I could be wrong there.

Saber

@jimp said in UPnP Fix for multiple clients/consoles playing the same game:

Out of curiosity what happens if you do try a game? Is the result inside the game reported the same? I got the impression from others above that they were checking inside a game, not just on the console, but I could be wrong there.

I haven't tried a game to be honest. Playstation will still play an online game with NAT Type 3, but you generally experience communication with other online gamer issues. In my case and maybe I'm wrong as I haven't tested, I believe it would run into an issue as both consoles currently can't get UDP port 9308. Only 1 can at a time. My theory is that if a console shows a NAT Type of 3, it won't try to initiate UPnP during game play. As it detected the NAT Type during bootup. I can see it in the network traffic now, after it receives a NAT Type of 3 I do not see any more UPnP related traffic and have to reboot the console to have it try again.

Saber

Is miniupnp for PFSense attempting a Source Port remapping?

Doing some digging on this and other Firewall venders are stating that Playstation does not support source port remapping and will error out.

encrypt1d

@saber

Just a few more things to double check:

Your allow/deny rules aren't interfering? (in the miniupnp config settings)
When client 2 retries, is it asking for the same port every time, or picking new ones (as it should be)? The content of the xml packets in the requests to the UPnP server contain that. If it continuously asks for the same port (9308), the client isn't behaving correctly - however the game might have its own implementation, so it may still work as @jimp mentioned.
a filter reload can never hurt.

You can also start the server manually on the firewall with debug turned on (if you haven't already). I prefer to stop the running one from the dashboard gui widget that shows the services. You can stop via cli too.

In one session, tail the logs.

tail -f /var/log/routing.log

Then start miniupnpd

/usr/local/sbin/miniupnpd -f /var/etc/miniupnpd.conf -P /var/run/miniupnpd.pid -L -vv

Then let your clients connect and see what they are asking for.

Saber

@encrypt1d said in UPnP Fix for multiple clients/consoles playing the same game:

@saber

Just a few more things to double check:

Your allow/deny rules aren't interfering? (in the miniupnp config settings)

When client 2 retries, is it asking for the same port every time, or picking new ones (as it should be)? The content of the xml packets in the requests to the UPnP server contain that. If it continuously asks for the same port (9308), the client isn't behaving correctly - however the game might have its own implementation, so it may still work as @jimp mentioned.

a filter reload can never hurt.

You can also start the server manually on the firewall with debug turned on (if you haven't already). I prefer to stop the running one from the dashboard gui widget that shows the services. You can stop via cli too.

In one session, tail the logs.
tail -f /var/log/routing.log
Then start miniupnpd
/usr/local/sbin/miniupnpd -f /var/etc/miniupnpd.conf -P /var/run/miniupnpd.pid -L -vv
Then let your clients connect and see what they are asking for.

From what I can tell the rules do not appear to be interfering.

For your second question, the Playstation continues to ask for the same port (9308) until it gives up. Now I will say that I have tested with another Firewall vender that was Linux based and didn't have to configure anything, both consoles were online at the same time with NAT Type 2 and both could play the same game without issue. I know Linux does things differently.

I have rebooted the firewall in multiple attempts since the changes were made without any change. On my lunch break I will perform another test with the logging options you provided to see what is happening.

Saber

Okay, so here are the logs from when Playstation boots up (10.0.0.18) - (x'd out Public IP):

Feb 18 12:53:51 Firewall miniupnpd[94330]: SSDP M-SEARCH from 10.0.0.18:51183 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 18 12:53:51 Firewall miniupnpd[94330]: Single search found
Feb 18 12:53:51 Firewall miniupnpd[94330]: SendSSDPResponse(): 0 bytes to 10.0.0.18:51183 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645206819^M BOOTID.UPNP.ORG: 1645206819^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 18 12:53:51 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.18:62124 : GET /rootDesc.xml (HTTP/1.1)
Feb 18 12:53:51 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:53:51 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.18:62125 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:53:51 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:53:51 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 18 12:53:51 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.18:62126 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:53:51 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:53:51 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 18 12:53:51 Firewall miniupnpd[94330]: AddPortMapping: ext port 9308 to 10.0.0.18:9308 protocol UDP for: 10.0.0.18:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 18 12:53:51 Firewall miniupnpd[94330]: UPnP permission rule 0 matched : port mapping accepted
Feb 18 12:53:51 Firewall miniupnpd[94330]: Check protocol udp for port 9308 on ext_if em0 x.x.x.x , 859168D0
Feb 18 12:53:51 Firewall miniupnpd[94330]: fe00000a:28982 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 00000000:1900 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 00000000:514 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 00000000:67 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 0200080a:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 0b02080a:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 0502080a:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 01e6fa0a:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: fe14000a:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: fe0a000a:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 0100007f:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: fe00000a:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 859168d0:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 00000000:123 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 859168d0:11462 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 859168d0:56449 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 859168d0:37906 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 859168d0:44561 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 0100007f:53 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: fe00000a:53 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 859168d0:1194 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: 00000000:0 00000000:0 <=> 9308 859168d0:9308
Feb 18 12:53:51 Firewall miniupnpd[94330]: redirecting port 9308 to 10.0.0.18:9308 protocol UDP for: 10.0.0.18:9308 to 9308 (UDP)
Feb 18 12:53:51 Firewall miniupnpd[94330]: use external ip xxx.xxx.xxx.xxx
Feb 18 12:53:52 Firewall miniupnpd[94330]: level=0 type=20
Feb 18 12:53:52 Firewall miniupnpd[94330]: sdl_index = 2 em1:0.c1.a2.20.12.31
Feb 18 12:53:52 Firewall miniupnpd[94330]: ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1 (ver=1)
Feb 18 12:53:52 Firewall miniupnpd[94330]: SSDP M-SEARCH from 10.0.0.18:53977 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 18 12:53:52 Firewall miniupnpd[94330]: Single search found
Feb 18 12:53:52 Firewall miniupnpd[94330]: SendSSDPResponse(): 0 bytes to 10.0.0.18:53977 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645206819^M BOOTID.UPNP.ORG: 1645206819^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 18 12:53:52 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.18:62130 : GET /rootDesc.xml (HTTP/1.1)
Feb 18 12:53:52 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:53:52 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.18:62131 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:53:52 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:53:52 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 18 12:53:52 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.18:62132 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:53:52 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:53:52 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 18 12:53:52 Firewall miniupnpd[94330]: AddPortMapping: ext port 9308 to 10.0.0.18:9308 protocol UDP for: 10.0.0.18:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 18 12:53:52 Firewall miniupnpd[94330]: UPnP permission rule 0 matched : port mapping accepted
Feb 18 12:53:52 Firewall miniupnpd[94330]: updating existing port mapping 9308 UDP (rhost '') => 10.0.0.18:9308

Here is the 2nd Playstation (10.0.0.19) attempting to map port 9308:

Feb 18 12:54:03 Firewall miniupnpd[94330]: SSDP M-SEARCH from 10.0.0.19:56592 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 18 12:54:03 Firewall miniupnpd[94330]: Single search found
Feb 18 12:54:03 Firewall miniupnpd[94330]: SendSSDPResponse(): 0 bytes to 10.0.0.19:56592 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645206819^M BOOTID.UPNP.ORG: 1645206819^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65238 : GET /rootDesc.xml (HTTP/1.1)
Feb 18 12:54:03 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65239 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:54:03 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:03 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65240 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:54:03 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:03 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 18 12:54:03 Firewall miniupnpd[94330]: AddPortMapping: ext port 9308 to 10.0.0.19:9308 protocol UDP for: 10.0.0.19:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 18 12:54:03 Firewall miniupnpd[94330]: UPnP permission rule 1 matched : port mapping accepted
Feb 18 12:54:03 Firewall miniupnpd[94330]: port 9308 UDP (rhost '') already redirected to 10.0.0.18:9308
Feb 18 12:54:03 Firewall miniupnpd[94330]: Returning UPnPError 718: ConflictInMappingEntry
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: level=0 type=20
Feb 18 12:54:03 Firewall miniupnpd[94330]: sdl_index = 2 em1:0.c1.a2.20.12.31
Feb 18 12:54:03 Firewall miniupnpd[94330]: ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1 (ver=1)
Feb 18 12:54:03 Firewall miniupnpd[94330]: SSDP M-SEARCH from 10.0.0.19:52932 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 18 12:54:03 Firewall miniupnpd[94330]: Single search found
Feb 18 12:54:03 Firewall miniupnpd[94330]: SendSSDPResponse(): 0 bytes to 10.0.0.19:52932 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645206819^M BOOTID.UPNP.ORG: 1645206819^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65250 : GET /rootDesc.xml (HTTP/1.1)
Feb 18 12:54:03 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65251 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:54:03 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:03 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:03 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65252 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:54:03 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:03 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 18 12:54:03 Firewall miniupnpd[94330]: AddPortMapping: ext port 9308 to 10.0.0.19:9308 protocol UDP for: 10.0.0.19:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 18 12:54:03 Firewall miniupnpd[94330]: UPnP permission rule 1 matched : port mapping accepted
Feb 18 12:54:03 Firewall miniupnpd[94330]: port 9308 UDP (rhost '') already redirected to 10.0.0.18:9308
Feb 18 12:54:03 Firewall miniupnpd[94330]: Returning UPnPError 718: ConflictInMappingEntry
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:03 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: level=0 type=20
Feb 18 12:54:04 Firewall miniupnpd[94330]: sdl_index = 2 em1:0.c1.a2.20.12.31
Feb 18 12:54:04 Firewall miniupnpd[94330]: ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1 (ver=1)
Feb 18 12:54:04 Firewall miniupnpd[94330]: SSDP M-SEARCH from 10.0.0.19:56976 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 18 12:54:04 Firewall miniupnpd[94330]: Single search found
Feb 18 12:54:04 Firewall miniupnpd[94330]: SendSSDPResponse(): 0 bytes to 10.0.0.19:56976 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645206819^M BOOTID.UPNP.ORG: 1645206819^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65264 : GET /rootDesc.xml (HTTP/1.1)
Feb 18 12:54:04 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65265 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:54:04 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:04 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6180 2 14
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6100 2 13
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6080 2 12
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_selectfds: 0x800ab6000 2 11
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6180 2 14 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6100 2 13 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6080 2 12 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: upnpevents_processfds: 0x800ab6000 2 11 0 0
Feb 18 12:54:04 Firewall miniupnpd[94330]: HTTP REQUEST from 10.0.0.19:65266 : POST /ctl/IPConn (HTTP/1.1)
Feb 18 12:54:04 Firewall miniupnpd[94330]: Host: 10.0.0.254:2189
Feb 18 12:54:04 Firewall miniupnpd[94330]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 18 12:54:04 Firewall miniupnpd[94330]: AddPortMapping: ext port 9308 to 10.0.0.19:9308 protocol UDP for: 10.0.0.19:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 18 12:54:04 Firewall miniupnpd[94330]: UPnP permission rule 1 matched : port mapping accepted
Feb 18 12:54:04 Firewall miniupnpd[94330]: port 9308 UDP (rhost '') already redirected to 10.0.0.18:9308
Feb 18 12:54:04 Firewall miniupnpd[94330]: Returning UPnPError 718: ConflictInMappingEntry

encrypt1d

@saber
You can see that it isn't trying new ports, so its stuck in a death spiral that it will never escape. Sad that Sony implemented that way. Maybe it doesn't like the 718 error, and other UPnP servers handle that differently? Dunno.

So you may not ever get your PS itself show the right NAT type, but I am curious as to what the games show.

Saber

@encrypt1d said in UPnP Fix for multiple clients/consoles playing the same game:

@saber
You can see that it isn't trying new ports, so its stuck in a death spiral that it will never escape. Sad that Sony implemented that way. Maybe it doesn't like the 718 error, and other UPnP servers handle that differently? Dunno.

So you may not ever get your PS itself show the right NAT type, but I am curious as to what the games show.

Most of the games I play online don't show anything about the NAT. Its weird that with a Linux based firewall, they'll both show up with NAT Type 2 at the same time, so Linux is likely doing something very different.

If I put in the static port mappings, they both get a NAT Type 2, even without the Pure NAT enabled.

Saber

Confirmed, add the Static port mapping back in and both consoles now show NAT Type 2. Weird, wonder what the difference is. I'll have to do another log capture later and see what the differences in behavior are.

Saber

So I'm definitely at a loss... lol According to the UPnP RFC Sony isn't following the recommendations of how to handle error code 718. But I have no idea why that I see zero change in behavior miniupnp wise, but Playstation is reporting NAT Type 2 with static port mapping enabled, but no change in miniupnp response.

See below (public IP X'd out.):

First Playstation to bootup and get online.

Feb 19 11:20:05 Firewall miniupnpd[61453]: SSDP M-SEARCH from 10.0.0.19:50995 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 19 11:20:05 Firewall miniupnpd[61453]: Single search found
Feb 19 11:20:05 Firewall miniupnpd[61453]: SendSSDPResponse(): 0 bytes to 10.0.0.19:50995 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645287585^M BOOTID.UPNP.ORG: 1645287585^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 19 11:20:05 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.19:49778 : GET /rootDesc.xml (HTTP/1.1)
Feb 19 11:20:05 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:05 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.19:49779 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:05 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:05 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 19 11:20:05 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.19:49780 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:05 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:05 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 19 11:20:05 Firewall miniupnpd[61453]: AddPortMapping: ext port 9308 to 10.0.0.19:9308 protocol UDP for: 10.0.0.19:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 19 11:20:05 Firewall miniupnpd[61453]: UPnP permission rule 1 matched : port mapping accepted
Feb 19 11:20:05 Firewall miniupnpd[61453]: Check protocol udp for port 9308 on ext_if em0 xxx.xxx.xxx.xxx, 859168D0
Feb 19 11:20:05 Firewall miniupnpd[61453]: fe00000a:22827 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 00000000:1900 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 00000000:67 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 0100007f:53 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: fe00000a:53 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 0a01080a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 859168d0:26424 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 1200080a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 859168d0:1487 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 0502080a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 859168d0:35710 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 0800080a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 859168d0:2987 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 00000000:514 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 01e6fa0a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: fe14000a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: fe0a000a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 0100007f:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: fe00000a:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 859168d0:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 00000000:123 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 859168d0:1194 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: 00000000:0 00000000:0 <=> 9308 859168d0:9308
Feb 19 11:20:05 Firewall miniupnpd[61453]: redirecting port 9308 to 10.0.0.19:9308 protocol UDP for: 10.0.0.19:9308 to 9308 (UDP)
Feb 19 11:20:05 Firewall miniupnpd[61453]: use external ip xxx.xxx.xxx.xxx
Feb 19 11:20:05 Firewall miniupnpd[61453]: level=0 type=20
Feb 19 11:20:05 Firewall miniupnpd[61453]: sdl_index = 2 em1:0.c1.a2.20.12.31
Feb 19 11:20:05 Firewall miniupnpd[61453]: ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1 (ver=1)
Feb 19 11:20:05 Firewall miniupnpd[61453]: SSDP M-SEARCH from 10.0.0.19:62353 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 19 11:20:05 Firewall miniupnpd[61453]: Single search found
Feb 19 11:20:05 Firewall miniupnpd[61453]: SendSSDPResponse(): 0 bytes to 10.0.0.19:62353 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645287585^M BOOTID.UPNP.ORG: 1645287585^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 19 11:20:05 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.19:49781 : GET /rootDesc.xml (HTTP/1.1)
Feb 19 11:20:05 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:05 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.19:49782 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:05 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:05 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 19 11:20:05 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.19:49783 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:05 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:05 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 19 11:20:05 Firewall miniupnpd[61453]: AddPortMapping: ext port 9308 to 10.0.0.19:9308 protocol UDP for: 10.0.0.19:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 19 11:20:05 Firewall miniupnpd[61453]: UPnP permission rule 1 matched : port mapping accepted
Feb 19 11:20:05 Firewall miniupnpd[61453]: updating existing port mapping 9308 UDP (rhost '') => 10.0.0.19:9308

Second Playstation to bootup and get online:

Feb 19 11:20:59 Firewall miniupnpd[61453]: SSDP M-SEARCH from 10.0.0.18:56783 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 19 11:20:59 Firewall miniupnpd[61453]: Single search found
Feb 19 11:20:59 Firewall miniupnpd[61453]: SendSSDPResponse(): 0 bytes to 10.0.0.18:56783 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645287585^M BOOTID.UPNP.ORG: 1645287585^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 19 11:20:59 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:57528 : GET /rootDesc.xml (HTTP/1.1)
Feb 19 11:20:59 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:59 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:53101 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:59 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:59 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 19 11:20:59 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:63652 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:59 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:59 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 19 11:20:59 Firewall miniupnpd[61453]: AddPortMapping: ext port 9308 to 10.0.0.18:9308 protocol UDP for: 10.0.0.18:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 19 11:20:59 Firewall miniupnpd[61453]: UPnP permission rule 0 matched : port mapping accepted
Feb 19 11:20:59 Firewall miniupnpd[61453]: port 9308 UDP (rhost '') already redirected to 10.0.0.19:9308
Feb 19 11:20:59 Firewall miniupnpd[61453]: Returning UPnPError 718: ConflictInMappingEntry
Feb 19 11:20:59 Firewall miniupnpd[61453]: level=0 type=20
Feb 19 11:20:59 Firewall miniupnpd[61453]: sdl_index = 2 em1:0.c1.a2.20.12.31
Feb 19 11:20:59 Firewall miniupnpd[61453]: ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1 (ver=1)
Feb 19 11:20:59 Firewall miniupnpd[61453]: SSDP M-SEARCH from 10.0.0.18:56271 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 19 11:20:59 Firewall miniupnpd[61453]: Single search found
Feb 19 11:20:59 Firewall miniupnpd[61453]: SendSSDPResponse(): 0 bytes to 10.0.0.18:56271 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645287585^M BOOTID.UPNP.ORG: 1645287585^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 19 11:20:59 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51145 : GET /rootDesc.xml (HTTP/1.1)
Feb 19 11:20:59 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:59 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51146 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:59 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:59 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 19 11:20:59 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51147 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:20:59 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:20:59 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 19 11:20:59 Firewall miniupnpd[61453]: AddPortMapping: ext port 9308 to 10.0.0.18:9308 protocol UDP for: 10.0.0.18:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 19 11:20:59 Firewall miniupnpd[61453]: UPnP permission rule 0 matched : port mapping accepted
Feb 19 11:20:59 Firewall miniupnpd[61453]: port 9308 UDP (rhost '') already redirected to 10.0.0.19:9308
Feb 19 11:20:59 Firewall miniupnpd[61453]: Returning UPnPError 718: ConflictInMappingEntry
Feb 19 11:21:17 Firewall miniupnpd[61453]: SSDP M-SEARCH from 10.0.0.18:60736 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 19 11:21:17 Firewall miniupnpd[61453]: Single search found
Feb 19 11:21:17 Firewall miniupnpd[61453]: SendSSDPResponse(): 0 bytes to 10.0.0.18:60736 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645287585^M BOOTID.UPNP.ORG: 1645287585^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 19 11:21:17 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51202 : GET /rootDesc.xml (HTTP/1.1)
Feb 19 11:21:17 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:21:17 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51203 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:21:17 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:21:17 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 19 11:21:17 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51204 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:21:17 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:21:17 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 19 11:21:17 Firewall miniupnpd[61453]: AddPortMapping: ext port 9308 to 10.0.0.18:9308 protocol UDP for: 10.0.0.18:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 19 11:21:17 Firewall miniupnpd[61453]: UPnP permission rule 0 matched : port mapping accepted
Feb 19 11:21:17 Firewall miniupnpd[61453]: port 9308 UDP (rhost '') already redirected to 10.0.0.19:9308
Feb 19 11:21:17 Firewall miniupnpd[61453]: Returning UPnPError 718: ConflictInMappingEntry
Feb 19 11:21:18 Firewall miniupnpd[61453]: level=0 type=20
Feb 19 11:21:18 Firewall miniupnpd[61453]: sdl_index = 2 em1:0.c1.a2.20.12.31
Feb 19 11:21:18 Firewall miniupnpd[61453]: ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1 (ver=1)
Feb 19 11:21:18 Firewall miniupnpd[61453]: SSDP M-SEARCH from 10.0.0.18:64158 ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1
Feb 19 11:21:18 Firewall miniupnpd[61453]: Single search found
Feb 19 11:21:18 Firewall miniupnpd[61453]: SendSSDPResponse(): 0 bytes to 10.0.0.18:64158 ST: HTTP/1.1 200 OK^M CACHE-CONTROL: max-age=120^M ST: urn:schemas-upnp-org:device:InternetGatewayDevice:1^M USN: uuid:2fdeeab1-42c9-19cc-8e38-93771b9fc28::urn:schemas-upnp-org:device:InternetGatewayDevice:1^M EXT:^M SERVER: FreeBSD/12.3-STABLE UPnP/1.1 MiniUPnPd/2.2.1^M LOCATION: http://10.0.0.254:2189/rootDesc.xml^M OPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01^M 01-NLS: 1645287585^M BOOTID.UPNP.ORG: 1645287585^M CONFIGID.UPNP.ORG: 1337^M ^M
Feb 19 11:21:18 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51208 : GET /rootDesc.xml (HTTP/1.1)
Feb 19 11:21:18 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:21:18 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51209 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:21:18 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:21:18 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#GetExternalIPAddress
Feb 19 11:21:18 Firewall miniupnpd[61453]: HTTP REQUEST from 10.0.0.18:51210 : POST /ctl/IPConn (HTTP/1.1)
Feb 19 11:21:18 Firewall miniupnpd[61453]: Host: 10.0.0.254:2189
Feb 19 11:21:18 Firewall miniupnpd[61453]: SOAPAction: urn:schemas-upnp-org:service:WANIPConnection:1#AddPortMapping
Feb 19 11:21:18 Firewall miniupnpd[61453]: AddPortMapping: ext port 9308 to 10.0.0.18:9308 protocol UDP for: 10.0.0.18:9308 to 9308 (UDP) leaseduration=0 rhost=
Feb 19 11:21:18 Firewall miniupnpd[61453]: UPnP permission rule 0 matched : port mapping accepted
Feb 19 11:21:18 Firewall miniupnpd[61453]: port 9308 UDP (rhost '') already redirected to 10.0.0.19:9308
Feb 19 11:21:18 Firewall miniupnpd[61453]: Returning UPnPError 718: ConflictInMappingEntry

encrypt1d

@saber
I think you mentioned in an earlier post that you have a linux firewall that works.

Is that a similar config? I.e. miniupnpd with pf?

If it is, you could run it with the same debug level, and perhaps diff the responses from miniupnpd (via packet compare) that say the port is already taken.

It wouldn't fix anything, but could point to a deeper reason why the playstation isn't trying new ports each time.

Prior to the patch, my windows/Call of Duty client would randomly pick new ports forever, filling up the UPnP mapping table without bounds. After the patch, it gets the 718 error the first time, picks a new port and the second one sticks.

Saber

@encrypt1d said in UPnP Fix for multiple clients/consoles playing the same game:

@saber
I think you mentioned in an earlier post that you have a linux firewall that works.

Is that a similar config? I.e. miniupnpd with pf?

If it is, you could run it with the same debug level, and perhaps diff the responses from miniupnpd (via packet compare) that say the port is already taken.

It wouldn't fix anything, but could point to a deeper reason why the playstation isn't trying new ports each time.

Prior to the patch, my windows/Call of Duty client would randomly pick new ports forever, filling up the UPnP mapping table without bounds. After the patch, it gets the 718 error the first time, picks a new port and the second one sticks.

I've removed the Linux firewall, mostly because I prefer PFSense but I'm really curious now what Linux does differently with how it handles multiple devices asking for the same port. I'll see if I can standup a Linux firewall in a VM and put the Playstation's in the same VLAN and log the miniupnp / packet capture to try and narrow down what the differences are if any.

To answer your question, Linux isn't the same as Packet Filter. Linux uses IPTables / Netfilter. While BSD / Unix based OS's use Packet Filter.

I thought for sure I'd see a difference in the miniupnp responses considering both Playstations now show a NAT Type 2 with Static Port mapping enabled, but nothing. Miniupnp responded the exact same way, yet Playstation is reporting a different NAT Type...

What is kind of funny, if not a little ironic is that Playstation 4 based Operating System is FreeBSD.... lol