Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Pfsense 2.4.2 upnp bug?

    Off-Topic & Non-Support Discussion
    3
    6
    819
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • R
      repomanz last edited by

      Hi everyone.

      I have UPNP enabled but have two IP and ports defined in the configuration for access control to upnp.  However, I see that another client on the network has a upnp session open (and is not in the access rule).  Is this a bug?

      JJ

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        What are your exact ACL rules in UPnP?

        Clients are allowed by default so unless you have a rule denying access to everyone after your allow entries, then others can still make connections.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • R
          repomanz last edited by

          Here is an example ACL i have in place:

          allow 53-65535 10.180.24.28/32 53-65535

          However another IP not on this rule has an open upnp session open.

          1 Reply Last reply Reply Quote 0
          • jimp
            jimp Rebel Alliance Developer Netgate last edited by

            But do you have a deny rule? It allows by default. You need a deny to stop others from getting access.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • R
              repomanz last edited by

              Maybe my understanding is incorrect.  I thought pfsense was a deny by default unless granted rule base?  Does this not apply to upnp?  What would a deny rule look like?

              ** edit - i totally missed the deny by default check box :).  Thanks for pointing out the hole :)

              1 Reply Last reply Reply Quote 0
              • H
                Harvy66 last edited by

                pfSense by default trusts the LAN and not the WAN. The deny by default logic only applies for untrusted interfaces. LAN side, UPNP, DHCP, DNS, management, SSH, etc are all allowed.

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post