UPnP daemon for Solaris/IPFilter
By avalon on Oct 07, 2007
Over the last week or so, I've been working on porting a UPnP daemon called miniupnpd to IPFilter. Included in this effort was getting it to work on Solaris. You can download a copy of the source code now from http://coombs.anu.edu.au/~avalon/miniupnpd-20071007.avalon.tar.gz. This .tar.gz file contains a Makefile that is set for building with gcc on Solaris amd64. You will need to have the GNU make available to build it.
Getting it to work with IPFilter
The daemon will add ipnat rules (rdr's) and ipf rules to make sure your traffic gets in and through the system but you must have a head rule similar to this in your ipf.conf so that miniupnpd can add rules to let traffic in:
block in all head miniupnpd
You will also need two ipf rules to allow the multicast traffic in and the replies back out again:
pass in proto udp from any to 220.127.116.11 port = 1900 pass out proto udp from any port = 1900 to any
Patches are in progress to make keep state work with multicast UDP.Enjoy!