MiniUPnPd is a lightweight implementation of a UPnP IGD & PCP/NAT-PMP daemon.
This is supposed to be run on your gateway machine to allow client systems to
map ports on the firewall.
===> The following configuration options are available for miniupnpd-2.3.11,1:
CHECK_PORTINUSE=off: Check if ports are in use
IPV6=on: IPv6 protocol support
LEASEFILE=off: Enable lease file
UPNP_IGDV2=off: Build an IGDv2 instead of an IGDv1
UPNP_STRICT=off: More strict UPnP specification compliance
===> Use 'make config' to modify these settings
*** !!WARNING!! !!WARNING!! !!WARNING!! ***
This port allows machines within your network to create holes in your
firewall. Please ensure this is really what you want!
*** !!WARNING!! !!WARNING!! !!WARNING!! ***
For this daemon to work, you must modify your pf rules to add an anchor
in both the NAT and rules section. Both must be called 'miniupnpd'.
Example:
# NAT section
# UPnPd rdr anchor
rdr-anchor "miniupnpd"
# Rules section
# uPnPd rule anchor
anchor "miniupnpd"
net/miniupnpd: Update to 2.3.11
Changelog (highlights):
- fix heap overflow in PinholeVerification()
- fix PCP option size parsing
- re-enable port forwarding properly (broken in 2.3.10)
- fix buffer read overflow in minixml.c
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.11.tar.gz
Port changes:
- drop the upstream testportinuse build fix, now included in the release;
- set the address family on the pool address passed to DIOCADDADDR in
add_nat_rule() and add_redirect_rule2();
- take maintainership.
Thanks to squat@squat.no for maintaining this port.
PR: 298991
Reviewed by: vvd
Approved by: squat@squat.no (maintainer)
Sponsored by: Rubicon Communications, LLC ("Netgate")
net/miniupnpd: Update 2.3.6 → 2.3.7
Changelog:
- FreeBSD: use libpfctl (FreeBSD 15+ or --libpfctl)
- default NOTIFY interval of 900s minus a random value
- ipv6: prefer globally routable addresses
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.7.tar.gz
Port improvements:
- use release tarball from upstream instead of USE_GITHUB;
- replace spaces with tabs;
- sort options in USES and in PLIST_FILES;
- use PORTNAME variable in USE_RC_SUBR;
- pet portclippy.
PR: 281099
Approved by: squat@squat.no (maintainer, timeout > 14 days)
net/miniupnpd: remove ipfw port option
It is well-known that net/miniupnpd does not work with IPFW. However,
the port options still allow building with IPFW support. In order to
prevent unnecessary foot-shooting, let us eliminate this option outright
and unconditionally use pf instead.
PR: 271732
Approved by: squat@squat.no (maintainer timeout, two weeks)
Sponsored by: Rubicon Communications, LLC ("Netgate")
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
net: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ports@c0decafe.net>
* Aaron Dalton <aaron@FreeBSD.org>
* Aaron Straup Cope <ascope@cpan.org>
* Aaron Zauner <az_mail@gmx.at>
* Adam Jette <jettea46@yahoo.com>
* Adam Weinberger <adamw@FreeBSD.org>
* Alan Eldridge <alane@geeksrus.net>
* Alex Bakhtin <Alex.Bakhtin@gmail.com>
* Alex Deiter <Alex.Deiter@Gmail.COM>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
(Only the first 15 lines of the commit message are shown above )
net/miniupnpd: Update to 2.1.20200510
From Tor Halvard Furulund:
* Update to latest upstream.
* Remove the extra patches as they are incorporated upstream
From Emanuel Haupt:
* Port cleanups
PR: 246925
Reported by: Tor Halvard Furulund <squat@squat.no>
Approved by: maintainer timeout, maintainer (previous version)
Upgrade net/miniupnpd from 2.0.20180503 to 2.1.20190210
Add a patch to unbreak port when CHECK_PORTINUSE option
is activated. The issue was caussed by changes in the
structures xtcpcb and xinpcb returned by the kernel after
r315662. The fix was inspired by changes made in
usr.bin/systat/netstat.c tool.
The patch was submitted to the upstream project and
merged : https://github.com/miniupnp/miniupnp/pull/353
PR: 236173
Reported by: Igor Pavlov <igor.arabesc.pavlov@gmail.com>
Approved by: Tor Halvard Furulund <squat@squat.no> (maintainer)
Ensure that option selection dialog is readable (fits the window):
- Rename PF_ENABLE_FILTER_RULES -> PF_FILTER_RULES
- Reword UPNP_STRICT_DESC text to make it shorter and clearer
- Drop IPV6_DESC which is already in standard descriptions pool
Update net/miniupnpd to 1.9.20160113
This version fixes a regression that make some clients (eg Xbox / Windows 10)
to fail when try to open ports
PR: 206241
Approved by: Tor Halvard Furulund <squat@squat.no> (maintainer)
Obtained from: pfSense
MFH: 2016Q1
Sponsored by: Rubicon Communications (Netgate)
- Update net/miniupnpd to 1.9.20150721 [1]
- Stop calling uuidgen on port Makefile, miniupnpd Makefile already does it
- Do not modify CFLAGS since it's already attributed using ?=
- Remove do-install: target from ports Makefile, let miniupnpd Makefile
installs it
- Patch miniupnpd Makefile to install conf with .sample suffix
- Patch miniupnpd Makefile to install manpage in the proper place, respecting
MANPREFIX
PR: 203191 [1]
Submitted by: Tor Halvard Furulund <squat@squat.no> [1]
Approved by: Tor Halvard Furulund <squat@squat.no> (maintainer)
Sponsored by: Rubicon Communications (Netgate)
- Update to version 1.6 [1]
- Respect global CFLAGS during build
- Mark MAKE_JOBS_UNSAFE
PR: ports/167770 [1]
Submitted by: Tor Halvard Furulund <squat@squat.no> (maintainer) [1]
In the rc.d scripts, change assignments to rcvar to use the
literal name_enable wherever possible, and ${name}_enable
when it's not, to prepare for the demise of set_rcvar().
In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
Fix a few "bad example" problems in the rc.d scripts that have been
propogated by copy and paste.
1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).
No PORTREVISION bumps because all of these changes are noops.
New port: net/miniupnpd
Minor changes to miniupnpd/pkg-message (grammatical).
PR: 110906
Submitted by: Daniel J. O'Connor <darius@dons.net.au>
Approved by: philip