Re: How to accept muticast traffic?

Phil Whineray <[email protected]> Sat, 4 Feb 2017 09:36:46 +0000
Newsgroups gmane.comp.security.firewalls.firehol.user
Message-ID <20170204093646.tb3hc6ohh3favsqe@xps>
Hi Marco

On Fri, Feb 03, 2017 at 05:17:05PM +0100, Marco Neubauer wrote:
> Hi,
> 
> I try to receive multicast traffic, but i can“t get it to work.
> 
> My config looks like this:
> 
> interface4 eth3 LAN_DHCP
> 	policy return
> 	server dhcp accept
> 	server multicast accept
> 	client multicast accept
> interface4 eth3 LAN src 192.168.1.0/24
> 	policy reject
> 	server "dns ssh ntp snmp ping" accept
> 	client all accept
> 

That looks reasonable to me. What version of firehol are you running?
Can you post the output of running: firehol debug? Running that config
snippet, I get these rules in the output according to firehol status:

Chain in_LAN_DHCP (1 references)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED
       0        0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spt:68 dpt:67
       0        0 ACCEPT     2    --  *      *       0.0.0.0/0            224.0.0.0/4         
       0        0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.0/4         
       0        0 ACCEPT     2    --  *      *       0.0.0.0/0            224.0.0.0/4         
       0        0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.0/4         

Cheers
Phil
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support