Re: GUPnP and Zones

[Jens Georg <mail jensge org>]

On Tue, 2013-05-07 at 15:07 +0200, Mark Ryan wrote:

> The UPnP service rule only enables UDP on port 1900.  This allows 
> control points to receive alive and bye messages but it does not allow 
> them to receive notifications from UPnP devices such as DMRs.  For 
> example, in any zone other than trusted, a DMC cannot receive a 
> notification from a DMR when the status of the DMR changes, e.g., it's 
> volume or its play state changes.  As UPnP control points do not use 
> fixed port numbers for receiving event messages, I don't think it will 
> be possible to modify firewalld's UPnP service file in such a way that 
> it will allow UPnP control points to receive notifications.  Well, 
> actually, it would be possible but you would need to enable tcp on all 
> ports.

And will break for UDA 1.1 with its optional non-static SSDP ports. I
really thing the only way to do "firewalled UPnP" is to have an SSDP
conntrack helper module.