IGMP reports - dropped

[dpravd]

Hey all,

Have a bit of a weird multicast problem.

I had this working, but for some reason it has stopped working and I can't figure out why.

I HAVE SNOOPING DISABLED ON THE BRIDGE

I have an IGMP querier on my lan network sending out queries once per minute. I'm running the UPnP daemon, which will join the 239.255.255.250 group.

Here is a tcpdump on the queries being received on the LAN on OPNSense:

Code Select Expand


root@OPNonsense:~ # tcpdump -i vtnet0 igmp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vtnet0, link-type EN10MB (Ethernet), capture size 262144 bytes
16:12:17.650259 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:13:17.715417 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:14:17.782008 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:15:17.848444 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1
16:16:17.914214 IP 192.168.44.10 > all-systems.mcast.net: igmp query v1


Notice how there are no reports being generated by the router. It seems to be that the firewall is dropping the traffic somewhere.

My lan rules are any/any both out and in.

If I look at the "live view" for firewall I can see the responses. So obviously, they're getting dropped outbound before they reach tcpdump. (I've attached screenshot)

Code Select Expand


Interface Time Source Destination Proto Label
lan 2023-11-29T16:25:21 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:25:19 192.168.44.10 224.0.0.1 igmp
lan 2023-11-29T16:24:27 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:23:27 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:23:27 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:23:18 192.168.44.10 224.0.0.1 igmp
lan 2023-11-29T16:22:18 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:22:18 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:21:26 192.168.44.1 239.255.255.250 igmp
lan 2023-11-29T16:21:18 192.168.44.10 224.0.0.1 igmp


How can I fix this?

[dpravd]

Hmmmm... I restarted the lan interface and it started working  :-\