udpbroadcastrelay + SONOS and firewall logs

[guest29153]

Hi all,

I am running OPNsense 21.1.6 on a APU2, and have the udpbroadcastrelay plugin installed in order to reach our printer and Sonos speakers that are in different subnets.
Everything works as expected. We can print and control our speakers from within the Sonos app.

This makes me believe my firewall configuration is good.
When turning on logging to troubleshoot a different issue, I found out some interesting entries, that I could not directly match. I have attached two screenshots from the firewall log, one showing logged blocked entries from the 'TRUSTED' VLAN, which contains our smartphones that control the speakers, the other one is from the 'SONOS' VLAN to the TRUSTED VLAN.





What I found strange is that the broadcast address is used to forward a UDP packet with port 1900 (which is SSDP). I expected this to be forwarded to 239.255.255.250?

I could decide simply to ignore the log, as everything works as expected, but this is something I rather want to resolve. Hopefully someone is able to help me into the right direction.
Many thanks!

[dlasher]

What I found strange is that the broadcast address is used to forward a UDP packet with port 1900 (which is SSDP). I expected this to be forwarded to 239.255.255.250?

Coming at this from a different direction, I have my sonos speakers working *without* udpbroadcastrelay for the mobile app, but the desktop app won't work.

Perhaps there's a "fallback" the mobile client can do when multicast isn't working, so maybe you aren't relaying like you think? (guessing?)

[guest29153]

That's interesting! Would you mind sharing your firewall rules with me? I assume you have them on a different VLAN?

[guest29153]

Nobody? @marjohn56 perhaps?