Messages

Does no one have any ideas?

Is my interpretation of the expected behavior perhaps wrong?

It's not pretty, but it works.  ;)

[SSDP NOTIFY]

I think I found a clue after doing some sniffing on the affected interfaces.

SSDP NOTIFY multicast messages sent on the igb0 interface are apparently subject NAT. They arrive on the athX_wlan1 interfaces with the sender address of the WAN uplink.

However, the NAT rule for this network is an automatically generated one.

Presumably, the NAT is performed because the multicast address 239.255.255.250 does not clearly belong to the broadcast network of bridge0.

So the question is probably: How can this NAT be prevented?

May be this bug: https://bugs.freebsd.org/bugzilla//show_bug.cgi?id=243554 ?

The problem seems to be similiar like in this older post: https://forum.netgate.com/topic/11349/upnp-bridged-interfaces/5

Unfortunately that thread ended without a solution.  :(

[router]

IGMPproxy is a simple mulitcast router. But bridge0 is just one interface.

So this can't be the solution.

I've set up a bridge interface with three members (one eth, two wifi interfaces).

Code Select Expand

ath0_wlan1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 04:f0:21:2e:5d:a8
        inet6 fe80::6f0:21ff:fe2e:5da8%ath0_wlan1 prefixlen 64 scopeid 0x8
        groups: wlan
        ...
        status: running
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
ath1_wlan1: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 04:f0:21:2e:5d:1c
        inet6 fe80::6f0:21ff:fe2e:5d1c%ath1_wlan1 prefixlen 64 scopeid 0x9
        groups: wlan
        ...
        status: running
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
igb0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=8520b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,WOL_MAGIC,VLAN_HWFILTER,VLAN_HWTSO>
        ether 00:0d:b9:55:fa:8c
        inet6 fe80::20d:b9ff:fe55:fa8c%igb0 prefixlen 64 scopeid 0x1
        media: Ethernet autoselect (1000baseT <full-duplex>)
        status: active
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
bridge0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        ether 02:02:e6:60:06:00
        inet 172.16.100.129 netmask 0xffffff00 broadcast 172.16.100.255
        inet6 2001:bf0:c080:403:: prefixlen 64
        id 00:00:00:00:00:00 priority 32768 hellotime 2 fwddelay 15
        maxage 20 holdcnt 6 proto rstp maxaddr 2000 timeout 1200
        root id 00:00:00:00:00:00 priority 32768 ifcost 0 port 0
        member: ath1_wlan1 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 9 priority 128 path cost 33333
        member: ath0_wlan1 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 8 priority 128 path cost 33333
        member: igb0 flags=143<LEARNING,DISCOVER,AUTOEDGE,AUTOPTP>
                ifmaxaddr 0 port 1 priority 128 path cost 20000
        groups: bridge
        nd6 options=1<PERFORMNUD>


Unfortunatly SSDP multicast messages (255.255.255.250 udp/1900) are not forwarded between the member interfaces.  :(

Is there a special setting/tunable needed for this?

Hab's selber gefunden und gelöst.  :)

War natürlich im Endeffekt ganz einfach. Man muss halt nur bei den Firewall Rules des entsprechenden Interfaces das Gateway korrekt setzen.  ;)

PS: Ich lösche dann mal meine Screenshots. Die verwirren sonst nur unnötig.

Nein. Da steht weiter:

The firewall rule configuration has been changed.
You must apply the changes in order for them to take effect.

[Apply changes]

Ich habe in meiner Firewall-Konfiguration ein paar Änderungen gemacht, die ich doch so nicht möchte.

Wie verwerfe ich diese eigentlich? Es gibt zwar ein Apply changes Button. Aber ich finde irgendwie kein Discard oder ähnliches.  :-\

Part V

Gelöscht, weil unnötig/verwirrend.

Part iV

Gelöscht, weil unnötig/verwirrend.

Part III

Gelöscht, weil unnötig/verwirrend.

Part II

Gelöscht, weil unnötig/verwirrend.

OK, hier ist das gewünschte. (Part I)

(Inzwischen gab es eine kleine Änderung beim Naming: LAN=(ex)LAN1, PUBLIC=(ex)LAN2.)


Gelöscht, weil unnötig/verwirrend.