Environment:
x86-64 AMD64 OpenWrt SNAPSHOT, r18974-8144f9c665, miniupnpd 2.2.3-4
WAN is a PPPOE client
Description:
Getting the following errors while
Sun Feb 20 01:00:44 2022 daemon.notice miniupnpd[12483]: HTTP listening on port 5000
Sun Feb 20 01:00:44 2022 daemon.warn miniupnpd[12483]: no HTTP IPv6 address, disabling IPv6
Sun Feb 20 01:00:44 2022 daemon.notice miniupnpd[12483]: Listening for NAT-PMP/PCP traffic on port 5351
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: Failed to remove PCP mapping internal port 50342, protocol TCP
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: Failed to remove PCP mapping internal port 50342, protocol UDP
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: PCP MAP: failed to add mapping TCP 50342->10.10.8.142:50342 'PCP MAP 7e43988923c43d78d59bd861'
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: PCP MAP: failed to add mapping UDP 50342->10.10.8.142:50342 'PCP MAP 908051ae52b1b6098b510d28'
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
The chain is exist already in the iptables :
root@host:~# iptables -t nat -L -n -v
# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain MINIUPNPD (0 references)
pkts bytes target prot opt in out source destination
Chain MINIUPNPD-POSTROUTING (0 references)
pkts bytes target prot opt in out source destination
/etc/config/upnpd
root@username:~# cat /etc/config/upnpd
config upnpd 'config'
option external_iface 'wan'
option internal_iface 'lan'
option port '5000'
option upnp_lease_file '/var/run/miniupnpd.leases'
option igdv1 '1'
option download '170000'
option upload '180000'
option uuid '48bee918-020a-4efe-8fc1-b6bd0fcbd74f'
option enabled '1'
config perm_rule
option action 'allow'
option ext_ports '1024-65535'
option int_addr '0.0.0.0/0'
option int_ports '1024-65535'
option comment 'Allow high ports'
config perm_rule
option action 'deny'
option ext_ports '0-65535'
option int_addr '0.0.0.0/0'
option int_ports '0-65535'
option comment 'Default deny'
fgrep -r iptables /usr/lib/opkg/info/*.control :
root@host:~# fgrep -r iptables /usr/lib/opkg/info/*.control
/usr/lib/opkg/info/banip.control:Depends: libc, librt, libpthread, jshn, jsonfilter, ip, ipset, iptables, ca-bundle
/usr/lib/opkg/info/fail2ban.control:Depends: libc, librt, libpthread, iptables, python3-light, python3-ctypes, python3-distutils, python3-email, python3-logging, python3-sqlite3, python3-urllib, python3-pkg-resources
/usr/lib/opkg/info/ip6tables.control:Depends: libc, librt, libpthread, kmod-ip6tables, iptables
/usr/lib/opkg/info/ip6tables.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/ip6tables.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Package: iptables-mod-conntrack-extra
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-conntrack-extra, kmod-ipt-raw
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:SourceName: iptables-mod-conntrack-extra
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Description: Extra iptables extensions for connection tracking.
/usr/lib/opkg/info/iptables-mod-extra.control:Package: iptables-mod-extra
/usr/lib/opkg/info/iptables-mod-extra.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-extra
/usr/lib/opkg/info/iptables-mod-extra.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-extra.control:SourceName: iptables-mod-extra
/usr/lib/opkg/info/iptables-mod-extra.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-extra.control:Description: Other extra iptables extensions.
/usr/lib/opkg/info/iptables-mod-filter.control:Package: iptables-mod-filter
/usr/lib/opkg/info/iptables-mod-filter.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-filter
/usr/lib/opkg/info/iptables-mod-filter.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-filter.control:SourceName: iptables-mod-filter
/usr/lib/opkg/info/iptables-mod-filter.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-filter.control:Description: iptables extensions for packet content inspection.
/usr/lib/opkg/info/iptables-mod-ipopt.control:Package: iptables-mod-ipopt
/usr/lib/opkg/info/iptables-mod-ipopt.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-ipopt
/usr/lib/opkg/info/iptables-mod-ipopt.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-ipopt.control:SourceName: iptables-mod-ipopt
/usr/lib/opkg/info/iptables-mod-ipopt.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-ipopt.control:Description: iptables extensions for matching/changing IP packet options.
/usr/lib/opkg/info/iptables-mod-ipsec.control:Package: iptables-mod-ipsec
/usr/lib/opkg/info/iptables-mod-ipsec.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-ipsec
/usr/lib/opkg/info/iptables-mod-ipsec.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-ipsec.control:SourceName: iptables-mod-ipsec
/usr/lib/opkg/info/iptables-mod-ipsec.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-ipsec.control:Description: iptables extensions for matching ipsec traffic.
/usr/lib/opkg/info/iptables-mod-physdev.control:Package: iptables-mod-physdev
/usr/lib/opkg/info/iptables-mod-physdev.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-physdev
/usr/lib/opkg/info/iptables-mod-physdev.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-physdev.control:SourceName: iptables-mod-physdev
/usr/lib/opkg/info/iptables-mod-physdev.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-physdev.control:Description: The iptables physdev match.
/usr/lib/opkg/info/iptables-mod-tproxy.control:Package: iptables-mod-tproxy
/usr/lib/opkg/info/iptables-mod-tproxy.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-tproxy
/usr/lib/opkg/info/iptables-mod-tproxy.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-tproxy.control:SourceName: iptables-mod-tproxy
/usr/lib/opkg/info/iptables-mod-tproxy.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-tproxy.control:Description: Transparent proxy iptables extensions.
/usr/lib/opkg/info/iptables-nft.control:Package: iptables-nft
/usr/lib/opkg/info/iptables-nft.control:Alternatives: 300:/usr/sbin/iptables:/usr/sbin/xtables-nft-multi, 300:/usr/sbin/iptables-restore:/usr/sbin/xtables-nft-multi, 300:/usr/sbin/iptables-save:/usr/sbin/xtables-nft-multi
/usr/lib/opkg/info/iptables-nft.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-nft.control:SourceName: iptables-nft
/usr/lib/opkg/info/iptables-nft.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-nft.control:Description: Extra iptables nftables nft binaries.
/usr/lib/opkg/info/iptables-nft.control: iptables-nft
/usr/lib/opkg/info/iptables-nft.control: iptables-nft-restore
/usr/lib/opkg/info/iptables-nft.control: iptables-nft-save
/usr/lib/opkg/info/iptables-nft.control: iptables-translate
/usr/lib/opkg/info/iptables-nft.control: iptables-restore-translate
/usr/lib/opkg/info/iptables.control:Package: iptables
/usr/lib/opkg/info/iptables.control:Alternatives: 200:/usr/sbin/iptables:/usr/sbin/xtables-legacy-multi, 200:/usr/sbin/iptables-restore:/usr/sbin/xtables-legacy-multi, 200:/usr/sbin/iptables-save:/usr/sbin/xtables-legacy-multi
/usr/lib/opkg/info/iptables.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables.control:SourceName: iptables
/usr/lib/opkg/info/iptables.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/kmod-ipt-conntrack.control: - iptables_raw
/usr/lib/opkg/info/kmod-ipt-physdev.control:Description: The iptables physdev kernel module
/usr/lib/opkg/info/libip4tc2.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libip4tc2.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/libip6tc2.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libip6tc2.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/libxtables-nft12.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libxtables-nft12.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/libxtables12.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libxtables12.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/luci-app-v2ray.control:Depends: libc, librt, libpthread, jshn, ip, ipset, iptables, iptables-mod-tproxy, resolveip, dnsmasq-full
/usr/lib/opkg/info/miniupnpd-iptables.control:Package: miniupnpd-iptables
/usr/lib/opkg/info/miniupnpd-iptables.control:Depends: libc, librt, libpthread, libcap-ng, libmnl0, libuuid1, ip6tables, libip6tc2, iptables, libip4tc2, libnetfilter-conntrack3
/usr/lib/opkg/info/miniupnpd-iptables.control:SourceName: miniupnpd-iptables
/usr/lib/opkg/info/miniupnpd-iptables.control:Description: Lightweight UPnP IGD, NAT-PMP & PCP daemon (iptables)
/usr/lib/opkg/info/shadowsocks-libev-ss-rules.control:Depends: libc, librt, libpthread, ip, ipset, iptables-mod-tproxy, resolveip, shadowsocks-libev-ss-redir, shadowsocks-libev-config
/usr/lib/opkg/info/sqm-scripts.control:Depends: libc, librt, libpthread, tc, kmod-sched-cake, kmod-ifb, iptables-nft, iptables-mod-ipopt
/usr/lib/opkg/info/strongswan.control:Depends: libc, librt, libpthread, libpthread, ip, kmod-crypto-authenc, kmod-ipsec, kmod-ipsec4, kmod-ipsec6, kmod-ipt-ipsec, iptables-mod-ipsec
/usr/lib/opkg/info/tc-full.control:Depends: libc, librt, libpthread, kmod-sched-core, libxtables12, tc-mod-iptables, libbpf0
/usr/lib/opkg/info/tc-mod-iptables.control:Package: tc-mod-iptables
/usr/lib/opkg/info/tc-mod-iptables.control:SourceName: tc-mod-iptables
/usr/lib/opkg/info/tc-mod-iptables.control:Description: Traffic control module - iptables action
realpath $(command -v iptables)
/usr/sbin/xtables-nft-multi
How to fix the iptables?, should I use instead the miniupnpd-nftables?, but this issue is exist :-(.