Hi,
I got a hap ac2, and I have configured upnp but sometimes it get’s stuck. If the application exits abrutply for some times the upnp will not work for that application. The nat rules are still there but it cannot connect. Any ideas?
Ask the productor of the application to fix it.
Why don’t you just forward ports? UPnP is pretty evil (at least from a security perspective).
UPnP is better because (if the program is well coded) use random ports changed everitime,
instead using a static port everytime open is less secure…
So you don't mind that any application (either being "well coded" or not) is allowed to open inbound ports? And you call that secure??
Please...advising UPnP as best practice is total nonsense.
Is the opposite…
Better a everytime open port at same number or open at the moment, when is needed, a random port?
If some appication, malaware or not, use plug and play or open remote 80 or 443 ports, what’s the difference?
How you can prevent (on mikrotik side) that? Block all 80 and 443 traffic and everytime modify the configuration for every website?
UPnP opens ports and forwards them to the client. Theoretically all 65k ports might be publicly open on your router and mapped to any device running in your network. Network wide open. We don’t have to agree on this, but be aware with what you advise.
Also you must be aware of what I have wrote on previous post,
without consider my point of view, are fact.
Just only one device, inside the network, compromised and port open or not, all is useless…
With advent of httpS, DoX, etc. what user gain on (hypotetic) privacy, is lost on (user) control…
Oh wow, I didn’t ask if upnp was safe guys. I also have port mappings but I cannot be arsed to open every port for every online game I play, or for every thing I do.
Back to the topic, it’s a mikrotik issue I believe since in order for it to work I need to manually delete the auto generated rules, unless… It’s my pc ip that is not the same (after a crash) and the ports list as open
RouterOS has no timeout for UPNP rules, either the App will remove them, or a RouterOS reboot will.
Can’t be a MikroTik matter if application suck…
For example HikVision DVR/NVR, Uplay, Steam and WatsApp, BitTorrent, etc. close previous UPnP rules if for some reason old are stuck.
This is how things work…
I see, I will report it to de devs
EDIT:
Actually the ports are randomized, so what happens makes no sense
This usually happens after a couple of PC crashes QBittorrent cannot open the ports again
You write QBittorrent, but on my post I specified BitTorrent.
Probably the “fork” have some problem than main BitTorrent do not have…
Uplay and WhatsApp use random ports, and work everytime.
Winbox used to let you delete UPNP NAT entries, but now it does not. Downgrade.