TomatoUSB

Hi,

I have a Windows Home Server which configures holes in the NAT firewall via upnp. It configures access through to itself on ports 80,443 & 4125. Entries in Tomato 1.28 from Jon Z's site configure all 3 entries and they're displayed as 'WHS_portnum'. TomatoUSB only configures one of the ports (port 4125) it does not configure ports 80 or 443.

I've cleared the NVRAM and set a bare minimum config (IP address & DHCP) so I could test 'fresh' - no change. I also tried Victek's firmware which also exhibits the problem. Reverting back to 'Tomato 1.28' and the problem goes away.

Something is broken with upnp in recent 1.28+ releases. Hope someone can help.

Kevin

It's not broken.
Forwarding ports via UPnP is not allowed for ports below 1024 - by design.

If you need to allow incoming connections on low ports, it's usually for a specific services with constant port numbers - like in your case 80/443 (http/https). In such cases it's better to forward ports explicitly (via "Port Forwarding" GUI), and make sure there are no conflicts, i.e. with router's built-in web server.

If you, however, absolutely have to use UPnP for low ports, there're nvram keys to allow that (no GUI support). You can manually set the following nvram variables via command line:
upnp_min_port_int
upnp_max_port_int
upnp_min_port_ext
upnp_max_port_ext
to define the range of allowed internal and external ports (by default - 1024 and up).

You Sir are a genius! Thanks for that :-)

So technically, Tomato 1.28 is broken and TomatoUSB fixes it ;-) Yay!