I've been bench testing some new RouterBoard hardware and most everything works except for uPNP. I'm probably overlooking something but I have dug through the forums and the documentation and configured it to the best of my knowledge as it should be. No rules are created regardless of the app or computer used to initiate a uPNP handshake. Specifics below:

/ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=input action=accept protocol=icmp

1 chain=input action=accept src-address-list=192.168.0.0/24 in-interface=bridge

2 ;;; default configuration
chain=input action=accept connection-state=established in-interface=ether1-gateway

3 ;;; default configuration
chain=input action=accept connection-state=related in-interface=ether1-gateway

4 ;;; UPnP
chain=services action=accept protocol=udp dst-port=1900

5 ;;; UPnP
chain=services action=accept protocol=tcp dst-port=2828

6 ;;; accept localhost
chain=services action=accept dst-address=127.0.0.1 src-address-list=127.0.0.1

7 ;;; default configuration
chain=input action=drop in-interface=ether1-gateway

/ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
chain=srcnat action=masquerade src-address=192.168.0.0/24 out-interface=ether1-gateway


/ip upnp> print
enabled: yes
allow-disable-external-interface: no
show-dummy-rule: yes


/ip upnp interfaces> print
Flags: X - disabled
# INTERFACE TYPE
0 ether1-gateway external
1 bridge internal


/interface> print
Flags: D - dynamic, X - disabled, R - running, S - slave
# NAME TYPE MTU L2MTU
0 R ether1-gateway ether 1500 1524
1 ether2-local ether 1500 1524
2 ether3-local ether 1500 1524
3 ether4-local ether 1500 1524
4 R ether5-local ether 1500 1524
5 R bridge bridge 1500 1524


/interface bridge> print
Flags: X - disabled, R - running
0 R name="bridge" mtu=1500 l2mtu=1524 arp=enabled mac-address=private protocol-mode=rstp priority=0x8000 auto-mac=yes
admin-mac=00:00:00:00:00:00 max-message-age=20s forward-delay=15s transmit-hold-count=6 ageing-time=5m


/interface bridge settings> print
use-ip-firewall: no
use-ip-firewall-for-vlan: no
use-ip-firewall-for-pppoe: no

I know I'm overlooking something so please enlighten me. I assume this is just operator error as I've rebuilt it from scratch three times with a few permutations of adding things to the NAT firewall list. On the slim possibility it's a bug I installed the latest 5.x build and the same thing occurred. I reverted to 4.10.