"
Hmmmm... I restarted the lan interface and it started working :-\
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages1
#2
General Discussion / IGMP reports - dropped
November 29, 2023, 05:31:23 PM
Hey all,
Have a bit of a weird multicast problem.
I had this working, but for some reason it has stopped working and I can't figure out why.
I HAVE SNOOPING DISABLED ON THE BRIDGE
I have an IGMP querier on my lan network sending out queries once per minute. I'm running the UPnP daemon, which will join the 239.255.255.250 group.
Here is a tcpdump on the queries being received on the LAN on OPNSense:
Notice how there are no reports being generated by the router. It seems to be that the firewall is dropping the traffic somewhere.
My lan rules are any/any both out and in.
If I look at the "live view" for firewall I can see the responses. So obviously, they're getting dropped outbound before they reach tcpdump. (I've attached screenshot)
How can I fix this?
Have a bit of a weird multicast problem.
I had this working, but for some reason it has stopped working and I can't figure out why.
I HAVE SNOOPING DISABLED ON THE BRIDGE
I have an IGMP querier on my lan network sending out queries once per minute. I'm running the UPnP daemon, which will join the 239.255.255.250 group.
Here is a tcpdump on the queries being received on the LAN on OPNSense:
Code Select
root@OPNonsense:~ # tcpdump -i vtnet0 igmp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vtnet0, link-type EN10MB (Ethernet), capture size 262144 bytes
16:12:17.650259 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:13:17.715417 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:14:17.782008 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:15:17.848444 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:16:17.914214 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
Notice how there are no reports being generated by the router. It seems to be that the firewall is dropping the traffic somewhere.
My lan rules are any/any both out and in.
If I look at the "live view" for firewall I can see the responses. So obviously, they're getting dropped outbound before they reach tcpdump. (I've attached screenshot)
Code Select
Interface Time Source Destination Proto Label
lan 2023-11-29T16:25:21 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:25:19 192.168.44.10 224.0.0.1 igmp
lan 2023-11-29T16:24:27 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:23:27 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:23:27 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:23:18 192.168.44.10 224.0.0.1 igmp
lan 2023-11-29T16:22:18 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:22:18 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:21:26 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:21:18 192.168.44.10 224.0.0.1 igmp
How can I fix this?
Pages1
