Bug? miniupnpd warning - "SSDP packet sender [ip:port] not from a LAN, ignoring"

unclerunkle

Stumped on this one even after searching the forums / Google. Here's the setup:

Client on 192.168.4.0/27 > pfSense2 firewall (no NAT) > pfSense1 firewall (NAT) > WAN

pfSense2 forwards the SSPD multicast to pfSense1. The client and pfSense1 are on different subnets.

pfSense1 has the following miniupnpd config in /var/etc/miniupnpd.conf:

ext_ifname=vmx0
port=2189
listening_ip=vmx1
packet_log=yes
presentation_url=https://192.168.1.1/
uuid=b74cb48c-6d13-48de-052e-ade3d61826d
serial=B74CB48C
model_number=2.2.6-RELEASE

allow 53-65535 192.168.4.0/27 53-65535
deny 0-65535 0.0.0.0/0 0-65535
enable_upnp=yes
enable_natpmp=yes

However, these warnings keep showing up in the miniupnpd log:
SSDP packet sender 192.168.4.30:63177 not from a LAN, ignoring

Shouldn't this work? My allow range is specified but not working?

johnpoz

You might get help over at miniupnp site.. Your listening IP is going to be the networks on that interface.. But you have downstream networks, so that source does not fall to what your listening network is..

You might want to change your listening_ip to say 192.168.0.0/16 and see if that gets rid of the error and allows ports to be opened..