Site Tools


forward-upnp

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
forward-upnp [2024/10/09 23:07] – [UPnP/NAT-PMP] -Condense, add level 4 subheads hogwildforward-upnp [2024/11/27 01:54] (current) – [Settings] -Condense, formatting hogwild
Line 3: Line 3:
 === UPnP === === UPnP ===
  
-Universal Plug and Play is a controversial protocol that allows fully dynamic (automatic) port mapping from LAN IP addresses onto the Internet. It has been criticized for its poor security. With UPnP, each network program maps its own ports automatically. In the screenshot below, WhatsApp has mapped certain ports on the WAN IP/Interface. UPnP is the original implementation of this protocol.+Universal Plug and Play is a controversial protocol that allows fully dynamic (automatic) port mapping from LAN IP addresses onto the Internet. It has been criticized for its poor security. 
 + 
 +With UPnP, each network program maps its own ports automatically. In the screenshot below, WhatsApp has mapped certain ports on the WAN IP/Interface. UPnP is the original implementation of this protocol.
  
  \\  \\
 +
 + \\ \\  {{::port_forwarding-upnp-settings-2023.2.jpg?758}}  \\
  
 === NAT-PMP === === NAT-PMP ===
Line 17: Line 21:
  
 **Enable UPnP:**  Checking this enables UPnP. **Enable UPnP:**  Checking this enables UPnP.
 +
 + \\
  
 **Enable NAT-PMP:**  Checking this enables NAT-PMP. **Enable NAT-PMP:**  Checking this enables NAT-PMP.
  
-**Inactive Rule Cleaning:**  Enabling this sets the timeout period to remove rules counted from the last time traffic was flowing.+ \\ 
 + 
 +**Inactive Rule Cleaning:**  Sets the timeout period to remove rules counted from the last time traffic flowed.
  
  \\  \\
Line 28: Line 36:
  \\  \\
  
-**Cleaning Threshold:** Hereyou set the maximum number of rules to be removed by an Interval.+**Cleaning Threshold:** here, set the maximum number of rules to be removed by an Interval.
  
-**Secure Mode**:  Enabling this allows only the "owner LAN IP address" to trigger its own mapping/unmapping. In other words, the client is only allowed to map an incoming port to its own IP address, not to another address.+ \\
  
-**Enable on:**  This allows you to enable UPnp/NATPMP only on certain VLANs.+**Secure Mode**: eabling this lets only the "owner LAN IP address" trigger its own mapping/unmapping. 
 + 
 +In other words, the client is only allowed to map an incoming port to its own IP address, not to another address. 
 + 
 + \\ 
 + 
 +**Enable on:** this allows you to enable UPnp/NATPMP only on certain VLANs. 
 + 
 + \\ 
 + 
 +**Show in My Network Places:** if enabled, makes FreshTomato appear as a gateway in Windows' browsable LAN network (WORKGROUP or HOMEGROUP). 
 + 
 + \\
  
-**Show in My Network Places:**  If enabledthis makes FreshTomato appear as a gateway in Windows' browsable LAN network (WORKGROUP or HOMEGROUP).+**Miniupnpd custom config:** hereenter custom configuration options unavailable in the web interface.
  
-**Miniupnpd custom config:**  In this field, you can enter custom configuration options not available in the web interface. In the image above, all UPnP requests/mappings are denied for address 10.10.10.4, the only host on that subnet.\\ \\  \\ +In the image above, all UPnP requests/mappings are denied for address 10.10.10.4, the only host on that subnet.\\ \\  \\   \\   \\   \\
- \\  +
- \\  +
- \\ +
  
  
forward-upnp.1728511644.txt.gz · Last modified: 2024/10/09 23:07 by hogwild