Is SSDP data UDP? I think all TCP and UDP data should have been routed.
You can refer to /usr/bin/setvpnfirewall (cannot remember the name) for iptables rules.