MiniUPnPd is a lightweight implementation of a UPnP IGD & PCP/NAT-PMP daemon.
This is supposed to be run on your gateway machine to allow client systems to
map ports on the firewall.
===> The following configuration options are available for miniupnpd-2.3.11,1:
CHECK_PORTINUSE=off: Check if ports are in use
IPV6=on: IPv6 protocol support
LEASEFILE=off: Enable lease file
UPNP_IGDV2=off: Build an IGDv2 instead of an IGDv1
UPNP_STRICT=off: More strict UPnP specification compliance
===> Use 'make config' to modify these settings
*** !!WARNING!! !!WARNING!! !!WARNING!! ***
This port allows machines within your network to create holes in your
firewall. Please ensure this is really what you want!
*** !!WARNING!! !!WARNING!! !!WARNING!! ***
For this daemon to work, you must modify your pf rules to add an anchor
in both the NAT and rules section. Both must be called 'miniupnpd'.
Example:
# NAT section
# UPnPd rdr anchor
rdr-anchor "miniupnpd"
# Rules section
# uPnPd rule anchor
anchor "miniupnpd"
net/miniupnpd: Update to 2.3.11
Changelog (highlights):
- fix heap overflow in PinholeVerification()
- fix PCP option size parsing
- re-enable port forwarding properly (broken in 2.3.10)
- fix buffer read overflow in minixml.c
http://miniupnp.free.fr/files/changelog.php?file=miniupnpd-2.3.11.tar.gz
Port changes:
- drop the upstream testportinuse build fix, now included in the release;
- set the address family on the pool address passed to DIOCADDADDR in
add_nat_rule() and add_redirect_rule2();
- take maintainership.
Thanks to squat@squat.no for maintaining this port.
PR: 298991
Reviewed by: vvd
Approved by: squat@squat.no (maintainer)
Security: CVE-2026-5720
Sponsored by: Rubicon Communications, LLC ("Netgate")
(cherry picked from commit 5bbc7e7074ae9c1e06df5346f18e218d65bb2e03)
