Jason Nader ammgws

Want to configure UPnP on EdgeRouter-4?

Don't do it!

Introduction

As a former sysadmin that once helped ride herd over around 1,000 servers, of which around 10% were Internet-facing, I've never been a fan of autoconfiguation when it comes to punching holes through the firewall. I've seen the tripwire logs, and it's sobering.

The Problem

So enabling UPnP on my EdgeRouter-4 wasn't something I had on the roadmap, but when I ran into difficulty getting DLNA to work on the default VLAN, I thought it was worth looking into (never mind that, as I later learned, having UPnP turned on wasn't going make a bit of difference on my local network: another reason that mastering theory should always come before practice).

Replace "jaileduser" with whatever you want the username to be.

Step 1 (as root) - Setup chroot environment and user. Replace `fish` in the last command with whatever shell you want.

sudo su - 
mkdir --parents /home/jaileduser/home
useradd --create-home --gid users --home /home/jaileduser/home/jaileduser jaileduser
usermod --home /home/jaileduser jaileduser
mkdir --parents /{etc/jail/jaileduser,var/jail/jaileduser/{cache/{key,pkg},lib}}
chown jaileduser:users /var/jail/jaileduser/cache/key

create wpa_supplicant.conf somewhere

network={
    ssid="meow"
    key_mgmt=NONE
    priority=16
}
ctrl_interface=/run/wpa_supplicant
update_config=1

	adduser.fish
	81 chars: When creating a group, this option forces the new groupid to be the given number
	98 chars: Use shell as the user\'s login shell, rather than the default specified by the configuration file
	117 chars: Add the new user to GROUP instead of a usergroup or the default group defined by USERS_GID in the configuration file
	122 chars: Override the first uid in the range that the uid is chosen from (overrides FIRST_UID specified in the configuration file)
	--------------------------
	animate.fish
	101 chars: On, activate, off, deactivate, set, opaque, copy transparent, extract, background, or shape [option]
	--------------------------
	ansible-playbook.fish

	[
	{
	"id": 7,
	"name": "HDMI-A-2",
	"rect": {
	"x": 1920,
	"y": 0,
	"width": 1920,
	"height": 1080
	},

	[
	{
	"id": 7,
	"name": "HDMI-A-2",
	"rect": {
	"x": 1920,
	"y": 0,
	"width": 1920,
	"height": 1080
	},

	[
	{
	"id": 7,
	"name": "HDMI-A-2",
	"rect": {
	"x": 1920,
	"y": 0,
	"width": 1920,
	"height": 1080
	},

	[
	{
	"id": 7,
	"name": "HDMI-A-2",
	"rect": {
	"x": 1920,
	"y": 0,
	"width": 1920,
	"height": 1080
	},