Add support for unifi devices outside internal network.

ipt-firewall-gateway

@@ -4119,6 +4119,20 @@ if $local_unifi_controller_service ; then
       $ipt -A INPUT -p udp -i $_dev -m multiport --dports $unify_udp_ports -m conntrack --ctstate NEW -j ACCEPT
 
    done
+
+   # Note:
+   #    in contrast to devices at local networks, devices hosted at extern network
+   #    are only be seen, if the device is part of this array 'unifi_ap_extern_ip_arr'
+   #
+   if [[ ${#unifi_ap_extern_ip_arr[@]} -gt 0 ]]; then
+      for _ip in ${unifi_ap_extern_ip_arr[@]} ; do
+         $ipt -A INPUT -p udp -s $_ip -m multiport --dports $unify_broadcast_udp_ports -m conntrack --ctstate NEW -j ACCEPT
+
+         $ipt -A INPUT -p tcp -s $_ip -m multiport --dports $unify_tcp_ports -m conntrack --ctstate NEW -j ACCEPT
+         $ipt -A INPUT -p udp -s $_ip -m multiport --dports $unify_udp_ports -m conntrack --ctstate NEW -j ACCEPT
+
+      done
+   fi
    echo_done
 else
    echo_skipped
@@ -4126,7 +4140,9 @@ fi
 
 
 echononl "\t\tUbiquiti Unifi Controller Gateway - STUN to Unifi APs"
-if $local_unifi_controller_service ; then
+if $local_unifi_controller_service \
+   && [[ ${#unifi_ap_local_ip_arr[@]} -gt 0 ]] \
+   && [[ ${#unifi_ap_extern_ip_arr[@]} -gt 0 ]] ; then
 
    if [[ ${#unifi_ap_local_ip_arr[@]} -gt 0 ]] ; then
 
@@ -4136,11 +4152,20 @@ if $local_unifi_controller_service ; then
 
       done
 
-      echo_done
-   else
-      echo_skipped
-      warn "Local Unifi Controller is defined, but no Unifi APs!"
    fi
+
+   if [[ ${#unifi_ap_extern_ip_arr[@]} -gt 0 ]] ; then
+
+      for _ip_ap in ${unifi_ap_local_ip_arr[@]} ; do
+
+         $ipt -A OUTPUT -p udp -d $_ip_ap -m multiport --sports $unify_udp_ports -m conntrack --ctstate NEW -j ACCEPT
+
+      done
+
+   fi
+
+   echo_done
+
 else
    echo_skipped
 fi