Package: linux-igd
Version: 1.0+cvs20070630-3
Severity: important

Dear Maintainer,

The config file /etc/upnpd.conf states that if I set paranoid to 1, only 
internal hosts will be allowed to use this
service, and will be able to forward only to themselves. Well I set it to 1, 
and tried to create a mapping for an IP
that is not even local, and it just worked.

/var/log/debug ->
May 30 19:53:31 wicklow upnpd[7778]: 0xb3da6b70 AddPortMap: DevUDN: 
uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: 
urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 5000 
Int: 1.2.3.4.6000

iptables -L ->
Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     tcp  --  anywhere             1.2.3.4              tcp dpt:x11

iptables -L -t nat ->
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
DNAT       tcp  --  anywhere             anywhere             tcp dpt:5000 
to:1.2.3.4:6000

-- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 3.3.7-joco (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages linux-igd depends on:
ii  iptables  1.4.13-1.1
ii  libc6     2.13-32
ii  libupnp4  1.8.0~svn20100507-1.1
ii  lsb-base  4.1+Debian3

linux-igd recommends no packages.

linux-igd suggests no packages.

-- Configuration Files:
/etc/default/linux-igd changed [not included]
/etc/upnpd.conf changed [not included]

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to