1 # WAN network interface
4 # if the WAN interface has several IP addresses, you
5 # can specify the one to use below
8 # LAN network interfaces IPs / networks
9 # there can be multiple listening ips for SSDP traffic.
10 # should be under the form nnn.nnn.nnn.nnn/nn
11 # HTTP is available on all interfaces
12 listening_ip=192.168.0.1/24
13 listening_ip=192.168.1.1/24
15 # port for HTTP (descriptions and SOAP) traffic. set 0 for autoselect.
18 # path to the unix socket used to communicate with MiniSSDPd
19 # If running, MiniSSDPd will manage M-SEARCH answering.
20 # default is /var/run/minissdpd.sock
21 #minissdpdsocket=/var/run/minissdpd.sock
23 # enable NAT-PMP support (default is no)
26 # enable UPNP support (default is yes)
29 # chain names for netfilter (not used for pf or ipf).
30 # default is MINIUPNPD for both
31 #upnp_forward_chain=forwardUPnP
35 #lease_file=/var/log/upnp.leases
37 # bitrates reported by daemon in bits per second
41 # "secure" mode : when enabled, UPnP client are allowed to add mappings only
46 # default presentation url is http address on port 80
47 # If set to an empty string, no presentationURL element will appear
48 # in the XML description of the device, which prevents MS Windows
49 # from displaying an icon in the "Network Connections" panel.
50 #presentation_url=http://www.mylan/index.php
52 # report system uptime instead of daemon uptime
55 # notify interval in seconds. default is 30 seconds.
59 # unused rules cleaning.
60 # never remove any rule before this threshold for the number
61 # of redirections is exceeded. default to 20
62 #clean_ruleset_threshold=10
63 # clean process work interval in seconds. default to 0 (disabled).
64 # a 600 seconds (10 minutes) interval makes sense
65 clean_ruleset_interval=600
71 # filter rules must be used for this to be used.
72 # compile with PF_ENABLE_FILTER_RULES (see config.h file)
78 # make filter rules in pf quick or not. default is yes
79 # active when compiled with PF_ENABLE_FILTER_RULES (see config.h file)
82 # uuid : generate your own with "make genuuid"
83 uuid=fc4ec57e-b051-11db-88f8-0060085db3f6
85 # serial and model number the daemon will report to clients
86 # in its XML description
90 # UPnP permission rules
91 # (allow|deny) (external port range) ip/mask (internal port range)
92 # A port range is <min port>-<max port> or <port> if there is only
93 # one port in the range.
94 # ip/mask format must be nn.nn.nn.nn/nn
95 # it is advised to only allow redirection of port above 1024
96 # and to finish the rule set with "deny 0-65535 0.0.0.0/0 0-65535"
97 allow 1024-65535 192.168.0.0/24 1024-65535
98 allow 1024-65535 192.168.1.0/24 1024-65535
99 allow 1024-65535 192.168.0.0/23 22
100 allow 12345 192.168.7.113/32 54321
101 deny 0-65535 0.0.0.0/0 0-65535