sinshiva
Very Senior Member
Out of boredom, i decided to look at the most practical methods for restricting access to the UPnP daemon in the event somebody wanted to ONLY enable UPnP for multiple console devices, etc. I considered iptables initially, then postconf and concluded the most user friendly method is going to be to copy the existing config from /tmp/etc/upnp/config to /jffs/configs/upnp
near the bottom, you'll find a line such as;
from what i can see, editting this line to read
will restrict functionality to an ip of 192.168.1.101 and can be reused like;
obviously, one will want to set a static IP configuration on the devices or use static dhcp leases. easy peasy.
near the bottom, you'll find a line such as;
Code:
allow 1024-65535 192.168.1.1/255.255.255.0 1-65535from what i can see, editting this line to read
Code:
allow 1024-65535 192.168.1.[B]101[/B]/255.255.255.[B]255[/B] 1-65535will restrict functionality to an ip of 192.168.1.101 and can be reused like;
Code:
allow 1024-65535 192.168.1.[B]101[/B]/255.255.255.[B]255[/B] 1-65535
allow 1024-65535 192.168.1.[B]102[/B]/255.255.255.[B]255[/B] 1-65535
allow 1024-65535 192.168.1.[B]103[/B]/255.255.255.[B]255[/B] 1-65535obviously, one will want to set a static IP configuration on the devices or use static dhcp leases. easy peasy.
