The Linux UPnP Internet Gateway Device Project

The Linux UPnP Internet Gateway Device Project aims to create a UPnP Forum-compliant Internet Gateway Device that allows programs like Windows Messenger to use voice and video through a Linux firewall running Iptables. This program only creates DNAT (portmap) entries on the external interface (public IP) of the firewall. To enable other firewall features, users must set their firewall code to allow all TCP and UDP traffic through the FORWARD chain to client machines, and client machines must be able to contact the firewall through the INPUT chain on its internal interface.

The team is currently working on checks to determine if FORWARD's default policy is set to DROP or REJECT. However, properly placing rules once this is determined can be tricky. Currently, there is no clear way to verify if a packet matches a rule and passes through additional rules located above or below it. The team hopes to implement additional checks soon. In the meantime, users should be aware that if they see advertisements sent in the /var/log/debug file but not AddPortMaps, this is likely the issue.

UPnP works with the 239.0.0.0/255.0.0.0 multicast addresses. Windows Messenger may also send requests to a Unicast address, which is why a patch to the UPnP source code was necessary for this to work. To add a route for the multicast address, use the following command, replacing with the name of the inside interface.

This release includes several fixes and additions, including resolving issues with Direct Play games not deleting broadcast port mappings so that they will now work correctly. Byte and packet counters have been added, and all XML and SKL files have been updated to include the UUID and other relevant information. A CREDITS file has been added to give thanks to individuals who inspired and contributed to the program. The startup message in messages has been updated to report the correct version. Lastly, other minor changes have been implemented.