iptables upnp for linux 的问题

eqychan

azureus 2.5, iptables, upnp for linux 的问题

系统: ubuntu dapper 6.06
我的机器 通过NetGear 108M 的无线宽带路由器 连接 宽带猫 上网
路由器的IP 地址是 192.168.1.1
我的机器局域网IP是 192.168.1.111  网关: 192.168.1.1  子网掩码: 255.255.255.0
有一块无线网卡 是 ath0 及笔记本自带的网卡 eth0(插座已损坏)

我下载安装了azureus 2.5, upnp sdk 最新版, linuxigd最新版, 还有系统自带的 iptables (1.3.3)防火墙。并作了相应配置，包括upnpd.conf 中的 iptables的路径等

下面是我用 ifconf -a 显示出来的内容：

daniel@daniel-ubuntu:/etc/network/if-down.d$ ifconfig -a
ath0 Link encap:Ethernet HWaddr 00:14:6C:51:B1:94
inet addr:192.168.1.111 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fe80::214:6cff:fe51:b194/64 Scopeink
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2220 errors:292 dropped:0 overruns:0 frame:292
TX packets:2305 errors:4 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:200
RX bytes:2213559 (2.1 MiB) TX bytes:369044 (360.3 KiB)
Interrupt:11 Memory:d0b20000-d0b30000

eth0 Link encap:Ethernet HWaddr 000:59:17:42:C6
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

lo Link encapocal Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:8 errors:0 dropped:0 overruns:0 frame:0
TX packets:8 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:460 (460.0 b) TX bytes:460 (460.0 b)

sit0 Link encap:IPv6-in-IPv4
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

我根据网上查到的相关资料，运行下面两条命令：
route add -net 239.0.0.0 netmask 255.0.0.0 参数2
upnpd 参数1 参数2
可我不知道这里的 参数1和2 都填什么，请指教。
谢谢

我试用
sudo route add -net 239.0.0.0 netmask 255.0.0.0 ath0
sudo upnpd ath0 ath0

然后 tail /var/log/debug 显示
Sep 28 10:10:06 localhost sudo:   daniel : TTY=pts/0 ; PWD=/home/daniel ; USER=root ; COMMAND=/sbin/route add -net 239.0.0.0 netmask 255.0.0.0 ath0
Sep 28 10:10:33 localhost sudo:   daniel : TTY=pts/0 ; PWD=/home/daniel ; USER=root ; COMMAND=/usr/sbin/upnpd ath0 ath0
Sep 28 10:10:33 localhost upnpd[6166]: UPnP SDK Successfully Initialized.
Sep 28 10:10:33 localhost upnpd[6166]: UPnP SDK Successfully Initialized.
Sep 28 10:10:33 localhost upnpd[6166]: Succesfully set the Web Server Root Directory.
Sep 28 10:10:33 localhost upnpd[6166]: Succesfully set the Web Server Root Directory.
Sep 28 10:10:33 localhost upnpd[6166]: IGD root device successfully registered.
Sep 28 10:10:33 localhost upnpd[6166]: IGD root device successfully registered.
Sep 28 10:10:35 localhost upnpd[6166]: Advertisements Sent.  Listening for requests ...
Sep 28 10:10:35 localhost upnpd[6166]: Advertisements Sent.  Listening for requests ...

然后运行 azureus 仍然通不过防火墙

于是运行
$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             daniel-ubuntu       udp dpt:6882
ACCEPT     tcp  --  anywhere             daniel-ubuntu       tcp dpt:6882
ACCEPT     udp  --  anywhere             daniel-ubuntu       udp dpt:6969

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
似乎没有发现什么问题。

又运行 tail /var/log/debug 显示如下信息

Sep 28 10:10:35 localhost upnpd[6166]: Advertisements Sent.  Listening for requests ...
Sep 28 10:11:44 localhost kernel: [17182421.944000] ip_tables: (C) 2000-2002 Netfilter core team
Sep 28 10:11:44 localhost kernel: [17182421.980000] Netfilter messages via NETLINK v0.30.
Sep 28 10:11:44 localhost kernel: [17182421.988000] ip_conntrack version 2.4 (2047 buckets, 16376 max) - 232 bytes per conntrack
Sep 28 10:11:45 localhost upnpd[6166]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: UDP ExtPort: 6882 Int: 192.168.1.111.6882
Sep 28 10:11:45 localhost upnpd[6166]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: UDP ExtPort: 6882 Int: 192.168.1.111.6882
Sep 28 10:11:45 localhost upnpd[6166]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 6882 Int: 192.168.1.111.6882
Sep 28 10:11:45 localhost upnpd[6166]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: TCP ExtPort: 6882 Int: 192.168.1.111.6882
Sep 28 10:11:46 localhost upnpd[6166]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: UDP ExtPort: 6969 Int: 192.168.1.111.6969
Sep 28 10:11:46 localhost upnpd[6166]: AddPortMap: DevUDN: uuid:75802409-bccb-40e7-8e6c-fa095ecce13e ServiceID: urn:upnp-org:serviceId:WANIPConn1 RemoteHost: (null) Prot: UDP ExtPort: 6969 Int: 192.168.1.111.6969

且在路由器管理界面 upnp 项显示
UPnP端口转发表
在用         协议         内部端口         外部端口         IP地址
YES        UDP        6882        6882        192.168.1.111
YES        TCP        6882        6882        192.168.1.111
YES        UDP        6969        6969        192.168.1.111

不知道是哪里的问题，请高手指教。谢谢！