packages/net/miniupnpd, branch master

miniupnpd: add ext_allow_private_ipv4

2026-04-19T14:31:05Z

miniupnpd 2.3.9 allows enable forwarding for private IPs by use 'ext_allow_private_ipv4=yes'. Link: https://github.com/miniupnp/miniupnp/blob/f83b5e2e21aa8dfa393ff80ea287ac4fca1a4df1/miniupnpd/Changelog.txt#L51 Link: https://github.com/miniupnp/miniupnp/blob/f83b5e2e21aa8dfa393ff80ea287ac4fca1a4df1/miniupnpd/miniupnpd.conf#L24 Signed-off-by: Andy Chiang

treewide: set me where PKG_MAINTAINER empty

2026-04-16T18:48:36Z

Seems a lot of packages are just getting abandoned by people. Will pick these up and see them through. Signed-off-by: Alexandru Ardelean

miniupnpd: enable IPv6 leases file

2026-01-12T16:52:57Z

Introduces the IPv6 Leases file by default. This file will display active IPv6 leases requested under the IPv6 PCP (Port Control Protocol) a.k.a IPv6 Pinholes. miniupnpd must be compiled with ENABLE_UPNPPINHOLE set for this to take effect. This is taken care of currently by setting CONFIG_IPV6. The lease file looks something like Proto;ClientIP;ClientPort;RemoteIP;RemotePort;UID;Timestamp;Description Signed-off-by: Michael Gray

miniupnpd: update to 2.3.9 to fix issues, refresh building

2025-12-24T02:06:10Z

- Update daemon to 2.3.9 to fix removal of nftables rules in `upnp_forward` and return the correct internal port; also resulted in the excessive opening of new ports. Accept interface names starting with digits - Build from GitHub releases to get a reliable HTTPS server, as the HTTP-only/HTTPS mirror were only available ~85%/77% over 3 months https://redirect.github.com/miniupnp/miniupnp/issues/770 https://stats.uptimerobot.com/DwGDxUB914 - Build daemon with `--disable-pppconn` to remove the old/IGDv1-only extra WANPPPConnection SSDP announcements workaround not included in other implementations since >15y - Build daemon with `--vendorcfg` to allow customisation of the router/friendly name (+5 potential options) displayed in Windows Explorer, 384 bytes extra required on ARMv7 (binary) - Remove old (iptables variant only) patches, as no longer needed - Remove `clean_ruleset_interval/threshold` UCI config options as not standard/working since OpenWrt 22.03, as nftables not supported Fixes: https://github.com/openwrt/openwrt/issues/18011 Fixes: https://github.com/openwrt/luci/issues/7759 Fixes: https://github.com/openwrt/packages/issues/26352 Signed-off-by: Self-Hosting-Group [update fixes tag] Signed-off-by: Tianling Shen

miniupnpd: Enable regex filter

2024-07-31T08:26:01Z

UPnP rules now may have an optional regex filter on requester's descriptions. This is a countermeasure against some UPnP exploiters without shutting down UPnP service completely, albeit they can bypass it by reporting innocent's descriptions maliciously. Since the filter specifier is optional, existing valid config files will still work. This increases the executable's size by 1.3 kB from original 147.7 kB on i386. Signed-off-by: David Yang

miniupnpd: Update to 2.3.7

2024-07-31T08:26:01Z

Update to 2.3.7, and remove patches which are already in upstream. Signed-off-by: David Yang

miniupnpd: Update package to 2.3.6

2024-06-24T06:11:54Z

and change title to term used in LuCi Signed-off-by: Self Hosting Group <155233284+Self-Hosting-Group@users.noreply.github.com>

miniupnpd: remove uci-defaults and fw4-include files for nftables variant

2023-08-25T17:59:22Z

* remove firewall4.include file as it is not needed and procuces a firewall error on service miniupnpd restart * remove the uci-defaults file as its sole purpose was to install the firewall include file * modify the Makefile to reflect the deleted files Signed-off-by: Stan Grishin

miniupnpd: bump to 2.3.3

2023-03-09T23:59:26Z

Fixes: #19637 Signed-off-by: Stijn Tintel

miniupnpd: rework firewall4 integration

2022-09-06T18:28:11Z

- Bump to the latest Git version in order to increase the package version for simpler opkg upgrade of the broken version - (Re-)Introduce PKG_RELEASE into the package, omitting it may lead to opkg segmentation faults under certain circumstances - Utilize automatic include hooks to drop the isolated miniupnpd table in favor to chains within the main inet fw4 table, otherwise PCP is unreliable as the upnp table might accept traffic which is later rejected by fw4 - Install a fw4 script hook to restart miniupnpd on fw4 restarts and reloads in order to repopulate the upnp chains with forward rules - Register the used miniupnpd configuration file and the firewall uci configuration as change sources, otherwise `/etc/init.d/miniupnpd reload` has no effect if the firewall or upnpd config was changed Signed-off-by: Jo-Philipp Wich