feat(firewall): allow UPnP in output

guillaumededrie · Dec 27, 2023 · 62a0413 · 62a0413
1 parent e421d23
commit 62a0413
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/files/etc_nftables.conf.j2 b/files/etc_nftables.conf.j2
@@ -65,6 +65,9 @@ table inet firewall {
         ip daddr 224.0.0.251 udp dport 5353 counter accept comment "Accept mDNS on local networks"
         ip6 daddr ff02::fb udp dport 5353 accept comment "Accept mDNS"
 
+        # UPnP
+        ip daddr 239.255.255.250 udp dport 1900 counter accept comment "Accept UPnP"
+
         log prefix "[nftables] Output Denied: " counter reject
     }