Re: How to accept muticast traffic?
Phil Whineray <[email protected]> Sat, 4 Feb 2017 09:36:46 +0000
| Newsgroups | gmane.comp.security.firewalls.firehol.user |
|---|---|
| Message-ID | <20170204093646.tb3hc6ohh3favsqe@xps> |
Hi Marco
On Fri, Feb 03, 2017 at 05:17:05PM +0100, Marco Neubauer wrote:
> Hi,
>
> I try to receive multicast traffic, but i can“t get it to work.
>
> My config looks like this:
>
> interface4 eth3 LAN_DHCP
> policy return
> server dhcp accept
> server multicast accept
> client multicast accept
> interface4 eth3 LAN src 192.168.1.0/24
> policy reject
> server "dns ssh ntp snmp ping" accept
> client all accept
>
That looks reasonable to me. What version of firehol are you running?
Can you post the output of running: firehol debug? Running that config
snippet, I get these rules in the output according to firehol status:
Chain in_LAN_DHCP (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- * * 0.0.0.0/0 0.0.0.0/0 ctstate RELATED
0 0 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 udp spt:68 dpt:67
0 0 ACCEPT 2 -- * * 0.0.0.0/0 224.0.0.0/4
0 0 ACCEPT udp -- * * 0.0.0.0/0 224.0.0.0/4
0 0 ACCEPT 2 -- * * 0.0.0.0/0 224.0.0.0/4
0 0 ACCEPT udp -- * * 0.0.0.0/0 224.0.0.0/4
Cheers
Phil
_______________________________________________
Firehol-support mailing list
[email protected]
http://lists.firehol.org/mailman/listinfo/firehol-support