aboutsummaryrefslogtreecommitdiff
path: root/net/miniupnpd
Commit message (Collapse)AuthorAge
* Revert "net/miniupnpd: ext_ip_reserved_ignore support"Josef Schlehofer2021-07-19
| | | | | | | | | | | | | | | This patch is causing several issues [1], which then were reported to upstream [2] and it was not accepted by upstream [3]. This results that nobody maintain this custom patch and it is not useful as it is changing addr_is_reserved behavior. [1] https://github.com/openwrt/packages/issues/15258 [2] https://github.com/miniupnp/miniupnp/issues/542 [3] https://github.com/miniupnp/miniupnp/pull/511 This reverts commit b76aa9919489f49b472a8f939f6d46ca33d05f64. Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
* miniupnpd: disable ext_ip_reserved_ignore by default; fix grammarStan Grishin2021-06-02
| | | | Signed-off-by: Stan Grishin <stangri@melmac.net>
* miniupnpd: bump to 2.2.2Stijn Tintel2021-05-21
| | | | Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* miniupnpd: add missing dependenciesStijn Tintel2021-05-21
| | | | | | | | | | Fixes the build problem below. Package miniupnpd is missing dependencies for the following libraries: libmnl.so.0 libnetfilter_conntrack.so.3 Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* miniupnpd: reformat dependenciesStijn Tintel2021-05-21
| | | | | | Use multiple lines and order alphabetically for improved readability. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* Merge pull request #14656 from stintel/miniupnpdRosen Penev2021-04-16
|\ | | | | miniupnpd: introduce IGDv1 variant
| * miniupnpd: introduce IGDv1 variantStijn Tintel2021-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Microsoft Windows, Xbox and possibly other operating systems do not support IGDv2. With IGDv2 enabled, they send a HTTP GET request for rootDesc.xml and WANIPCn.xml, and then nothing happens. The Microsoft implementation probably doesn't like the WANIPCn.xml response and decides UPnP is not available. When miniupnpd is built without IGDv2 support, after the 2 HTTP GET requests, there is a HTTP POST request to /ctl/IPConn, and miniupnpd configures the port forward as expected. The runtime option force_igd_desc_v1=yes (UCI: igvd1) does not solve this problem. It's possible this was enough in earlier miniupnpd versions, but it does not fix the problem the current version. Since we are a modern distro, we want to support the latest and greatest, so we should default to IGDv2 enabled. Introducing a menuconfig option to disable IGDv2 would only help people who build their own images, so offer a separate package variant for IGDv1. Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>
* | miniupnpd: add patience to firewall includeKevin Darbyshire-Bryant2021-03-20
| | | | | | | | | | | | | | | | | | | | Occasionally, mostly at startup, miniupnpd reports "Another app is currently holding the xtables lock. Perhaps you want to use the -w option?" Take iptables' advice and wait up to 1 second before giving up. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | treewide: Run refresh on all packagesIlya Lipnitskiy2021-02-20
|/ | | | | | | | | The crude loop I wrote to come up with this changeset: find -L package/feeds/packages/ -name patches | \ sed 's/patches$/refresh/' | sort | xargs make Signed-off-by: Ilya Lipnitskiy <ilya.lipnitskiy@gmail.com>
* net/miniupnpd: update to 2.2.1Syrone Wong2021-01-01
| | | | Signed-off-by: Syrone Wong <wong.syrone@gmail.com>
* miniupnpd: Don't override ipv6_listening_ipJitao Lu2020-12-07
| | | | | Fixes: https://github.com/openwrt/packages/issues/14145 Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
* miniupnpd: Pass ipv6 addr to ipv6_listening_ipJitao Lu2020-12-03
| | | | | | | | | Unlike ipv4, this option is supposed to be an IP address, otherwise, an error occurs on startup: can't parse "br-lan" as valid IPv6 listening address Signed-off-by: Jitao Lu <dianlujitao@gmail.com>
* net/miniupnpd: ext_ip_reserved_ignore supportChen Minqiang2020-11-26
| | | | | | | | | This add an option to ignore ext_ip reserved Enable this option in config by default. Fixes: #13773 Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* miniupnpd: Added chain rule to filter table so udp stun incoming connections ↵Marco Martins2020-11-25
| | | | | | rules works Signed-off-by: Marco Martins <marcomartins86@gmail.com>
* miniupnpd: update to 2.2.0Rosen Penev2020-11-25
| | | | | | Replace daemon patch with upstream solution. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* net/miniupnpd: check by /etc/init.d/miniupnpd runningChen Minqiang2020-08-08
| | | | Signed-off-by: Chen Minqiang <ptpt52@gmail.com>
* miniupnpd: default to IGDv1Rosen Penev2020-07-08
| | | | | | | | It seems even modern stuff doesn't support v2 correctly. The miniupnp suite does but other stacks seem to lack support. Default to v1 to avoid the headache. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* Merge pull request #12674 from ldir-EDB0/miniupnpdRosen Penev2020-07-01
|\ | | | | miniupnpd: macosx compat and refresh patches
| * miniupnpd: macosx compat and refresh patchesKevin Darbyshire-Bryant2020-07-01
| | | | | | | | | | | | | | | | | | | | | | | | Tidy up some minor patch fuzz with a refresh. Also tweak the linux makefile to make it run on macosx and linux: install only understand -m for filemode, not that the openwrt staging dir understands file modes. Also glibc>2.17 so patch out the check that otherwise barfs a number of errors from a missing 'ldd' command under macos. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* | miniupnpd: add miniupnpd ipv6_disable option, #11971 closeAlexey Kuznetsov2020-07-02
|/ | | | Signed-off-by: Alexey Kuznetsov <axet@me.com>
* miniupnpd: added libcap-ng dependencyRosen Penev2020-06-27
| | | | | | | | | As miniupnpd is running as root, libcap(-ng) can be used to limit its capabilities. libcap-ng is very small, so this isn't a problem. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* miniupnpd: update to 2.1.20200510Rosen Penev2020-06-25
| | | | | | | | | | Use the newly introduced configure script. Use PKG_INSTALL for consistency between packages. Use PKG_BUILD_PARALLEL for faster compilation. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* miniupnpd: suppress grep and uci errorsDavid Ehrmann2020-06-20
| | | | | | | | | | | | | | | | If miniupnpd is installed but disabled or not running, the hotplug script will query uci for keys that don't exist and grep a temporary config file that doesn't exist, resulting in the following errors: uci: Entry not found grep: /var/etc/miniupnd.conf: No such file or directory These would arise when an interface is brought up or down, and are more confusing than helpful, especially when miniupnpd is disabled. Suppress these errors. Signed-off-by: David Ehrmann <ehrmann@gmail.com>
* miniupnpd: improve hotplug & interface handlingKevin Darbyshire-Bryant2020-05-25
| | | | | | | | | | | | | | | | | | The existing interface selection/detection code was incomprehensible at worst and convoluted at best. The uci config file suggested it understood an external ipv6 interface but in reality the init script took no notice. Re-work it so it is at least comprehendible and takes notice of ipv6 interface details if specified. Update the hotplug script to use the same interface selection/detection code as the init script and take note of ipv6 interface selection, only restarting miniupnpd on interface up events and only if that interface isn't already known (for that ip class) by miniupnpd. For me this has solved numerous 'flaky' startup problems, especially with regard to ipv6. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: make hotplug work againKevin Darbyshire-Bryant2020-05-10
| | | | | | | | | | | | | hotplug scripts are sourced not exec'd so #!/bin/sh /etc/rc.common doesn't pull in the functions defined in /etc/rc.common thus since 'enabled' isn't defined the following sequence always fails: enabled miniupnpd || exit 0 Unfortunately sourcing /etc/rc.common doesn't appear to work so come up with some alternatives. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: fix sh syntax errorKevin Darbyshire-Bryant2020-03-30
| | | | | | | Add "use_stun" default to prevent sh: out of range error introduced by c61614a84 Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: convert to procdRosen Penev2020-02-13
| | | | | | Massive cleanup of the shell script. Many issues were fixed. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* miniupnpd: update to 2.1.20191006DENG Qingfang2019-10-12
| | | | | | | Removed upstreamed patch: 100-build-on-OpenWrt.patch Signed-off-by: DENG Qingfang <dengqf6@mail2.sysu.edu.cn>
* treewide: add PKG_CPE_ID for better cvescanner coverageJan Pavlinec2019-09-17
| | | | Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
* miniupnpd: Fix compilation under glibcRosen Penev2019-04-27
| | | | Signed-off-by: Rosen Penev <rosenp@gmail.com>
* miniupnpd: Update to 2.1.20190408Rosen Penev2019-04-13
| | | | | | | | | | | | | | Refreshed patch. Added PKG_LICENSE_FILES. Added --as-needed linker flag for slightly smaller size. Removed -O2 hack to get it to compile. As part of this, removed a bunch of CFLAGS that are normally passed which potentially affect compilation with Os. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* miniupnpd: Update to 2.1.20180706Rosen Penev2018-08-04
| | | | | | Switched to upstream mirror 2, which is reachable over HTTPS. Signed-off-by: Rosen Penev <rosenp@gmail.com>
* miniupnpd: remove my maintainershipKevin Darbyshire-Bryant2018-08-02
| | | | | | | Practicalities of life have intervened and I am no longer able to dedicate the time required to look after this package. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: fix build error when ASLR enabledKevin Darbyshire-Bryant2018-06-08
| | | | | | | | | | Add -fPIC to TARGET_LD_FLAGS ce9TpAS.ltrans0.ltrans.o: relocation R_MIPS16_26 against `syslog' can not be used when making a shared object; recompile with -fPIC cce9TpAS.ltrans0.ltrans.o: error adding symbols: Bad value Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: bump to v2.1 20180508Kevin Darbyshire-Bryant2018-05-13
| | | | Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: change leasefile locationKevin Darbyshire-Bryant2018-05-09
| | | | | | | Move default leasefile location from /var to /var/run. Also rename from upnp.leases to miniupnpd.leases Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: build with gc-sections & LTOKevin Darbyshire-Bryant2018-05-09
| | | | | | | | | Building with --gc-sections & -flto drop ipk size from 72600 to 66345 on MIPS No misbehaviour due to these optimisations observed. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: bump to 2.0.20180503Kevin Darbyshire-Bryant2018-05-08
| | | | | | Bumping to latest release. No (used) functional difference. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>
* miniupnpd: Import release 20180422 to repoKevin Darbyshire-Bryant2018-05-04
Import miniupnpd from routing repo and bump to 20180422. Drop 102-ipv6-ext-port.patch as this looks upstreamed in the pinhole code to me. Consolidate all other patches & update with a view to sending upstream. Add support for runtime IGDv1 mode switch (default to IGDv2) (not extensively) Tested-on: ar71xx Archer C7 v2 in IGDv1 compatibility mode. A variety of devices/applications appear to be able to create mappings. Have an attempt at resolving https://github.com/openwrt-routing/packages/issues/286 TL;DR miniupnpd rules get processed before fw3 rules and thus can override existing/intended redirects. Ideally the miniupnpd rules would be last in the relevant chains, unfortunately fw3 can sometimes use the last rule as a REJECT. Put miniupnpd rules as penultimate. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>