Miniupnpd-iptables: chain MINIUPNPD not found

Environment:

x86-64 AMD64 OpenWrt SNAPSHOT, r18974-8144f9c665, miniupnpd 2.2.3-4
WAN is a PPPOE client 

Description:

Getting the following errors while

Sun Feb 20 01:00:44 2022 daemon.notice miniupnpd[12483]: HTTP listening on port 5000
Sun Feb 20 01:00:44 2022 daemon.warn miniupnpd[12483]: no HTTP IPv6 address, disabling IPv6
Sun Feb 20 01:00:44 2022 daemon.notice miniupnpd[12483]: Listening for NAT-PMP/PCP traffic on port 5351
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: Failed to remove PCP mapping internal port 50342, protocol TCP
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: Failed to remove PCP mapping internal port 50342, protocol UDP
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:17 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: PCP MAP: failed to add mapping TCP 50342->10.10.8.142:50342 'PCP MAP 7e43988923c43d78d59bd861'
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: PCP MAP: failed to add mapping UDP 50342->10.10.8.142:50342 'PCP MAP 908051ae52b1b6098b510d28'
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: chain MINIUPNPD not found
Sun Feb 20 01:01:26 2022 daemon.err miniupnpd[12483]: addnatrule() : chain MINIUPNPD not found

The chain is exist already in the iptables :

root@host:~# iptables -t nat -L -n -v
# Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination 

Chain MINIUPNPD (0 references)
 pkts bytes target     prot opt in     out     source               destination 

Chain MINIUPNPD-POSTROUTING (0 references)
 pkts bytes target     prot opt in     out     source               destination 

/etc/config/upnpd

root@username:~# cat /etc/config/upnpd

config upnpd 'config'
        option external_iface 'wan'
        option internal_iface 'lan'
        option port '5000'
        option upnp_lease_file '/var/run/miniupnpd.leases'
        option igdv1 '1'
        option download '170000'
        option upload '180000'
        option uuid '48bee918-020a-4efe-8fc1-b6bd0fcbd74f'
        option enabled '1'

config perm_rule
        option action 'allow'
        option ext_ports '1024-65535'
        option int_addr '0.0.0.0/0'
        option int_ports '1024-65535'
        option comment 'Allow high ports'

config perm_rule
        option action 'deny'
        option ext_ports '0-65535'
        option int_addr '0.0.0.0/0'
        option int_ports '0-65535'
        option comment 'Default deny'

fgrep -r iptables /usr/lib/opkg/info/*.control :

root@host:~# fgrep -r iptables /usr/lib/opkg/info/*.control
/usr/lib/opkg/info/banip.control:Depends: libc, librt, libpthread, jshn, jsonfilter, ip, ipset, iptables, ca-bundle
/usr/lib/opkg/info/fail2ban.control:Depends: libc, librt, libpthread, iptables, python3-light, python3-ctypes, python3-distutils, python3-email, python3-logging, python3-sqlite3, python3-urllib, python3-pkg-resources
/usr/lib/opkg/info/ip6tables.control:Depends: libc, librt, libpthread, kmod-ip6tables, iptables
/usr/lib/opkg/info/ip6tables.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/ip6tables.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Package: iptables-mod-conntrack-extra
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-conntrack-extra, kmod-ipt-raw
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:SourceName: iptables-mod-conntrack-extra
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-conntrack-extra.control:Description:  Extra iptables extensions for connection tracking.
/usr/lib/opkg/info/iptables-mod-extra.control:Package: iptables-mod-extra
/usr/lib/opkg/info/iptables-mod-extra.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-extra
/usr/lib/opkg/info/iptables-mod-extra.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-extra.control:SourceName: iptables-mod-extra
/usr/lib/opkg/info/iptables-mod-extra.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-extra.control:Description:  Other extra iptables extensions.
/usr/lib/opkg/info/iptables-mod-filter.control:Package: iptables-mod-filter
/usr/lib/opkg/info/iptables-mod-filter.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-filter
/usr/lib/opkg/info/iptables-mod-filter.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-filter.control:SourceName: iptables-mod-filter
/usr/lib/opkg/info/iptables-mod-filter.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-filter.control:Description:  iptables extensions for packet content inspection.
/usr/lib/opkg/info/iptables-mod-ipopt.control:Package: iptables-mod-ipopt
/usr/lib/opkg/info/iptables-mod-ipopt.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-ipopt
/usr/lib/opkg/info/iptables-mod-ipopt.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-ipopt.control:SourceName: iptables-mod-ipopt
/usr/lib/opkg/info/iptables-mod-ipopt.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-ipopt.control:Description:  iptables extensions for matching/changing IP packet options.
/usr/lib/opkg/info/iptables-mod-ipsec.control:Package: iptables-mod-ipsec
/usr/lib/opkg/info/iptables-mod-ipsec.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-ipsec
/usr/lib/opkg/info/iptables-mod-ipsec.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-ipsec.control:SourceName: iptables-mod-ipsec
/usr/lib/opkg/info/iptables-mod-ipsec.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-ipsec.control:Description:  iptables extensions for matching ipsec traffic.
/usr/lib/opkg/info/iptables-mod-physdev.control:Package: iptables-mod-physdev
/usr/lib/opkg/info/iptables-mod-physdev.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-physdev
/usr/lib/opkg/info/iptables-mod-physdev.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-physdev.control:SourceName: iptables-mod-physdev
/usr/lib/opkg/info/iptables-mod-physdev.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-physdev.control:Description:  The iptables physdev match.
/usr/lib/opkg/info/iptables-mod-tproxy.control:Package: iptables-mod-tproxy
/usr/lib/opkg/info/iptables-mod-tproxy.control:Depends: libc, librt, libpthread, iptables, kmod-ipt-tproxy
/usr/lib/opkg/info/iptables-mod-tproxy.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-mod-tproxy.control:SourceName: iptables-mod-tproxy
/usr/lib/opkg/info/iptables-mod-tproxy.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-mod-tproxy.control:Description:  Transparent proxy iptables extensions.
/usr/lib/opkg/info/iptables-nft.control:Package: iptables-nft
/usr/lib/opkg/info/iptables-nft.control:Alternatives: 300:/usr/sbin/iptables:/usr/sbin/xtables-nft-multi, 300:/usr/sbin/iptables-restore:/usr/sbin/xtables-nft-multi, 300:/usr/sbin/iptables-save:/usr/sbin/xtables-nft-multi
/usr/lib/opkg/info/iptables-nft.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables-nft.control:SourceName: iptables-nft
/usr/lib/opkg/info/iptables-nft.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/iptables-nft.control:Description:  Extra iptables nftables nft binaries.
/usr/lib/opkg/info/iptables-nft.control: iptables-nft
/usr/lib/opkg/info/iptables-nft.control: iptables-nft-restore
/usr/lib/opkg/info/iptables-nft.control: iptables-nft-save
/usr/lib/opkg/info/iptables-nft.control: iptables-translate
/usr/lib/opkg/info/iptables-nft.control: iptables-restore-translate
/usr/lib/opkg/info/iptables.control:Package: iptables
/usr/lib/opkg/info/iptables.control:Alternatives: 200:/usr/sbin/iptables:/usr/sbin/xtables-legacy-multi, 200:/usr/sbin/iptables-restore:/usr/sbin/xtables-legacy-multi, 200:/usr/sbin/iptables-save:/usr/sbin/xtables-legacy-multi
/usr/lib/opkg/info/iptables.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/iptables.control:SourceName: iptables
/usr/lib/opkg/info/iptables.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/kmod-ipt-conntrack.control: - iptables_raw
/usr/lib/opkg/info/kmod-ipt-physdev.control:Description:  The iptables physdev kernel module
/usr/lib/opkg/info/libip4tc2.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libip4tc2.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/libip6tc2.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libip6tc2.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/libxtables-nft12.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libxtables-nft12.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/libxtables12.control:Source: package/network/utils/iptables
/usr/lib/opkg/info/libxtables12.control:CPE-ID: cpe:/a:netfilter_core_team:iptables
/usr/lib/opkg/info/luci-app-v2ray.control:Depends: libc, librt, libpthread, jshn, ip, ipset, iptables, iptables-mod-tproxy, resolveip, dnsmasq-full
/usr/lib/opkg/info/miniupnpd-iptables.control:Package: miniupnpd-iptables
/usr/lib/opkg/info/miniupnpd-iptables.control:Depends: libc, librt, libpthread, libcap-ng, libmnl0, libuuid1, ip6tables, libip6tc2, iptables, libip4tc2, libnetfilter-conntrack3
/usr/lib/opkg/info/miniupnpd-iptables.control:SourceName: miniupnpd-iptables
/usr/lib/opkg/info/miniupnpd-iptables.control:Description:  Lightweight UPnP IGD, NAT-PMP & PCP daemon (iptables)
/usr/lib/opkg/info/shadowsocks-libev-ss-rules.control:Depends: libc, librt, libpthread, ip, ipset, iptables-mod-tproxy, resolveip, shadowsocks-libev-ss-redir, shadowsocks-libev-config
/usr/lib/opkg/info/sqm-scripts.control:Depends: libc, librt, libpthread, tc, kmod-sched-cake, kmod-ifb, iptables-nft, iptables-mod-ipopt
/usr/lib/opkg/info/strongswan.control:Depends: libc, librt, libpthread, libpthread, ip, kmod-crypto-authenc, kmod-ipsec, kmod-ipsec4, kmod-ipsec6, kmod-ipt-ipsec, iptables-mod-ipsec
/usr/lib/opkg/info/tc-full.control:Depends: libc, librt, libpthread, kmod-sched-core, libxtables12, tc-mod-iptables, libbpf0
/usr/lib/opkg/info/tc-mod-iptables.control:Package: tc-mod-iptables
/usr/lib/opkg/info/tc-mod-iptables.control:SourceName: tc-mod-iptables
/usr/lib/opkg/info/tc-mod-iptables.control:Description:  Traffic control module - iptables action

realpath $(command -v iptables)

/usr/sbin/xtables-nft-multi

How to fix the iptables?, should I use instead the miniupnpd-nftables?, but this issue is exist :-(.

  • drop this package (and its package selections) or
  • switch back to a stable release or
  • embrace fw4/nft proper and report problems to developers on github

@anon50098793
Thanks, what do you think the causes are?, have you investigated it?.

depends day by day and what the user is trying to do...

basically... in your case

  • you think you are using iptables...
  • you selected iptables / firewall

but because you selected sqm-scripts (<iptables-nft) you are not

Ok, as snapshot will move into using fw4? so, will be safe if I am using nftables/fw4.
Will using miniupnpd-nftables with port forwarding for temporary now and possibly for the future.

1 Like

looks like this one is almost sorted out... feel free to open a new thread on it if you build with pure fw4 and it's still not working for you

1 Like

but there are still no miniupnpd v2.3 package pull request like mentioned on that issue report.

try this before you upgrade to your new image...

cd /usr/sbin
ln -s -f xtables-legacy-multi iptables
ln -s -f xtables-legacy-multi ip6tables
reboot
1 Like

Seems to be working now with miniupnpd-iptables!

1 Like

@anon50098793
On OpenWrt SNAPSHOT r19040-247eaa4416 x86_64 now miniupnpd doesn't create automatically MINIUPNPD chain anymore on iptables.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.