Shorewall users - Nov 2002 - upnp and shorewall

Hi,

I''m trying to make work the upnpd daemon ( linux-igd.sourceforge.net)
on a
bering box ( rc4)

Not easy...

The last problems was

packet dropped ( net2all drop in ppp0 ( adsl) src={ip of dialup }
dst=192.168.x.y( internal addr of messenger machine) the ports are the
dynamic ports opened by the upnpd deamon

i finaly managed to have voice conversation with another machine connected
directly on the ''net (isdn)

by adding the following line in the policy  file

net  loc ACCEPT

before the two last lines ( DROP/REJECT)

am I wide open ?? is there another way ( I can modify the upnpd daemon to
add iptables command if needed)

Thanks in advance
Etienne Charlier

ech@sourceforge.net

--On Friday, November 01, 2002 06:11:03 PM +0100 Etienne Charlier 
<Etienne.Charlier@advalvas.be> wrote:
> Hi,
>
> I''m trying to make work the upnpd daemon (
linux-igd.sourceforge.net) on a
> bering box ( rc4)
>
> Not easy...
>
> The last problems was
>
> packet dropped ( net2all drop in ppp0 ( adsl) src={ip of dialup }
> dst=192.168.x.y( internal addr of messenger machine) the ports are the
> dynamic ports opened by the upnpd deamon
>
> i finaly managed to have voice conversation with another machine connected
> directly on the ''net (isdn)
>
> by adding the following line in the policy  file
>
> net  loc ACCEPT
>
> before the two last lines ( DROP/REJECT)
>
> am I wide open ??
Yes.
> is there another way ( I can modify the upnpd daemon to
> add iptables command if needed)
>
I''m sorry, I don''t know. I simply don''t have the time
to experiment with
every new package on Sourceforge so I can spoon feed the formula for using 
it with Shorewall.

-Tom
--
Tom Eastep    \ Shorewall - iptables made easy
AIM: tmeastep  \ http://www.shorewall.net
ICQ: #60745924  \ teastep@shorewall.net