Hi EuclideanCoffee
Glad to read such a firewall exists. Although this is not what I refered and there was no confusion in my mind about "Application" meaning in my question. It was all about in the context of the meaning in GUFW, that is definition files stored in /etc/gufw/app_profile directory, e.g. ssh.gufw_service, which has nothing to do with the ssh(d) binary, and better example to make my question more precise: /etc/gufw/app_profiles/simple-service-discovery-protocol.jhansonxi and /etc/gufw/app_profiles/upnp_apps.gufw. I don't understand how/why these very two definition files, once selected, end in iptables rules mainly based on destination port instead of source port, when modifying them to source port made UPnP work for me. In fact I only worked with ssdp's, that is port 1900. And what makes me even more puzzled if the fact that ufw has a default OOTB allow packets rule with destination port=1900 in the ufw-before-input chain which is one unskilled user should not change, ufw-user-input chain being dedicated for users tweaks, as its name leads to believe.
Code:
sudo iptables -nvL ufw-before-input
Chain ufw-before-input (1 references)
pkts bytes target prot opt in out source destination
15M 28G ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
61M 35G ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED,ESTABLISHED
3999 164K ufw-logging-deny all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
3999 164K DROP all -- * * 0.0.0.0/0 0.0.0.0/0 ctstate INVALID
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 3
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 4
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 11
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 12
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 icmptype 8
7 2304 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68
157K 29M ufw-not-local all -- * * 0.0.0.0/0 0.0.0.0/0
5846 828K ACCEPT udp -- * * 0.0.0.0/0 224.0.0.251 udp dpt:5353
429 145K ACCEPT udp -- * * 0.0.0.0/0 239.255.255.250 udp dpt:1900
151K 28M ufw-user-input all -- * * 0.0.0.0/0 0.0.0.0/0
Bookmarks