UPnP Error

[Emporea]

Hey. I am struggling with this error. I already read some issues in this repo and some other forums but i cant really figure out how to solve it.

Basically I want an easy on / off switch for port forwarding in my fritzbox.

Thus I did this:

fc = FritzConnection(
    address=FRITZBOX_IP, user=FRITZBOX_USERNAME, password=FRITZBOX_PASSWORD
)
fc.call_action(
    ACTION,
    'AddPortMapping',
    NewRemoteHost='0.0.0.0',
    NewExternalPort=21,
    NewProtocol="TCP",
    NewInternalPort=21,
    NewInternalClient=SERVER_IP,
    NewEnabled=True,
    NewPortMappingDescription='Port Mapping ',
    NewLeaseDuration=0,)

respectivly this to delete it:

fc.call_action(
        ACTION,
        'DeletePortMapping',
        NewExternalPort=21,
        NewProtocol="TCP")

But all I get are these errors.. i had 401,402 and 403 so far, but this UPnPError pops up everytime...

Traceback (most recent call last):
  File "/home/coder/project/Batch_Bash/fritzPorts", line 35, in <module>
    fc.call_action(
  File "/usr/local/lib/python3.9/dist-packages/fritzconnection/core/fritzconnection.py", line 441, in call_action
    return self.soaper.execute(service, action_name, arguments)
  File "/usr/local/lib/python3.9/dist-packages/fritzconnection/core/soaper.py", line 286, in execute
    return handle_response(response)
  File "/usr/local/lib/python3.9/dist-packages/fritzconnection/core/soaper.py", line 268, in handle_response
    raise_fritzconnection_error(response)
  File "/usr/local/lib/python3.9/dist-packages/fritzconnection/core/soaper.py", line 191, in raise_fritzconnection_error
    raise exception(message)
fritzconnection.core.exceptions.FritzConnectionException: UPnPError: 
errorCode: 403
errorDescription: Not available Action

What can I do?
Or is there a much easier way to activate / disable port mappings without deleting them everytime?
Thanks.

[kbr]

I have to guess what happens here, as this error is forwarded from the router. The message also is a bit misleading: the action is known, otherwise a FritzActionError (401) should get raised. So I suppose the user has not the proper rights to execute the DeletePortMapping action.

(btw. the ACTION argument is the service-name (WANIPConn1), not the action – the action is DeletePortMapping)

[Emporea]

Thank you for your reply. Yes, I know that the ACTION variable was not really the best choice. I have corrected it.
What is the difference between WANIPConn1 and WANIPConnection1? Both are valid services and have multiple actions for port mapping. Neither works though.

I am struggling to find the reason.

• I have added a new fritzbox user with all permissions.
• I made sure to enable tr-064
• I made sure the password is correct
• A few other things

Do I need to enable other options in my FritzBox (7.50) such as UPNP or other options for this to work?

What is a good service + action to check if a login with the given username and password was successful and which rights or options are missing?

Thanks for your help.

[kbr]

What is the difference between WANIPConn1 and WANIPConnection1? Both are valid services and have multiple actions for port mapping. Neither works though.

I suppose one (WANIPConn1) is the UPnP- and the other (WANIPConnection1) the TR-064 interface and both seems to support a common subset of settings.

I am struggling to find the reason.

• I have added a new fritzbox user with all permissions.
• I made sure to enable tr-064
• I made sure the password is correct
• A few other things

Do I need to enable other options in my FritzBox (7.50) such as UPNP or other options for this to work?

If setting a checkmark to "FRITZ!Box Settings – Users with this right can view and edit all FRITZ!Box settings." does not work, I have also no idea whether there are more hidden settings. The AVM documentation about TR-064 remote access notes that "There are some actions which are not completely supported for the remote access". I don't know whether this is also true for PortMappings and LAN access (may be for security reasons).

What is a good service + action to check if a login with the given username and password was successful and which rights or options are missing?

For my knowledge there is none. Some actions will just not work.

[aqyxy]

Hello,
I'd like to revisit this topic. I get also UPnPError if I try to call action AddPortMapping
...
fritzconnection.core.exceptions.FritzArgumentValueError: UPnPError:
errorCode: 600
errorDescription: Argument Value Invalid
Strange thing is, I have different behavior depending on the system. I use Raspberry Pi 4 and 5 with same OS version, same Python version, same FritzConnection version ... and also with the same python script that triggers FritzConnection.
For the Pi 5 everything works very well (there is no need to delete the port settings, it is sufficient to switch onlyNewEnabled=False/True).
But I get always the UPnPError via the Pi 4. I switched on the debugging mode and there are also no differences between Pi 4 and 5 for the request call
DEBUG:fritzconnection:b'<?xml version="1.0" encoding="utf-8"?><s:Envelope s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/" xmlns:s="http://schemas.xmlsoap.org/soap/envelope/"><s:Body><u:AddPortMapping xmlns:u="urn:dslforum-org:service:WANPPPConnection:1"><NewRemoteHost>0.0.0.0</NewRemoteHost><NewExternalPort>47773</NewExternalPort><NewProtocol>TCP</NewProtocol><NewInternalPort>8788</NewInternalPort><NewInternalClient>192.168.178.205</NewInternalClient><NewEnabled>0</NewEnabled><NewPortMappingDescription>TEST1</NewPortMappingDescription><NewLeaseDuration>0</NewLeaseDuration></u:AddPortMapping></s:Body></s:Envelope>'
Any ideas?
Many thanks.

[kbr]

Two times the same input but different outputs, depending on whether the request was sent from a Pi 4 or 5 – do I understand this right? This would be odd. The error itself is forwarded from the router. So in one case the router accepts the arguments and in the other case does not. The only idea I have is that there must be subtle differences by the requests.

[mib1185]

i assume both PIs has its own IP address, those -from fritzbox point of view- are different network clients and have their own configuration in the fritzbox. With this it might also be possible, that you have disallowed the "create port openings for its own" for one of the PIs?

[aqyxy]

This was the crucial hint! Many thanks. I tested only for ports linked to the Pi5. Now I tested with several ports that are linked to Pi4 and Pi5 and I can maintain via AddPortMapping from PI4 only Pi4 ports and from Pi5 only Pi5 ports. In contrast to that, action GetGenericPortMappingEntry works independently of the system.
Are there any settings to change this behavior either in Fritz!Box or in fritzconnection? I like to control all the ports via script from one Pi?

[kbr]

Interesting. For me the error message was misleading. Glad that it works for you now.