Multicast routing.

eri--

Can you pose a packet trace with tcpdump on the interface that you are supposed to get igmp traffic with tcpdump -i $interface -s 0 proto igmp or without the traffic filter 'proto igmp'.

mino

http://www.file-upload.net/download-1408907/iptv.dump.html

Okay this is the dump.

eri--

Hmm can any of you try setting the interfaces where multicast should pass in promisous mode with
ifconfig $interface promisc

and after that start the proxy?
If it does not work ok in the latest snapshot which have an update on igmpproxy.

tehryan

the last 2 snapshots i've tried are now missing igmpproxy

eri--

try next snapshots.

eri--

There is a GUI now for igmpproxy under Services -> IGMP proxy.

Please report your findings.

FrankLaVerne

Hi ermal,

first of all: Thanks for all the efforts so far.

2.) The IGMP proxy menu looks nice, but as soon as I want to save a device's configuration (any combination whatsoever), I am redirected to a page saying something like "Page does not exist for user. Logout" - I assume that the configuration file is not written correctly? After that (when I logout), I cannot login anymore and can only reset pfSense to factory settings. So to anyone who wants to test it: Please be aware that your configuration file might be destroyed.

If I can help regarding this matter, please instruct what I should do.

3.) I assume that you have included the FreeBSD patched version if igmpproxy? I have included it in an older ALPHA myself by patching and compiling it on another machine and have transferred it to the pfSense machine. Actually, using the new version manually (due to the webConfig flaw), I have encountered that the ErrNo(22) FINALLY is gone - also with the version that is included in the latest ALPHAs.

So far, so good - igmpproxy seems to work perfect on first sight, though igmpproxy does not report any connection tries from the T-Entertain SetTopBox via IGMP. To be brief: My SetTopBox behaves as if igmpproxy is not running and freezes after 10 seconds of any program start / change.

What I did try then was your hint regarding the promisc mode.

I finally seemed to have succeeded, because the SetTopBox was trying to connect, but still the picture freezed. When I was checking in debug mode, I found the following debugging message which seemed to be suspicious:

"Eliminate compiler warning for field type = 22"

22 …? Sounds familiar ...

Any ideas of what I could do or how I could help to trace the possible error?

Cheers,

Frank

eri--

Well if you see even a message like
"Should insert group %s (from: %s) to route table. Vif Ix : %d" before that message than everything should be ok AFAIK.

Even a traffic capture on the lan(downstream) side to know if the group is joined correctly and some traffic is passing should help.

Check you have the allow-opts as is needed on the rules and if you need to permit any other traffic for the service to work.

For the GUI should be ok on next snapshot i forgot to merge something for the parser.

the6thday

hi,

i'm back to using pfsense and I noticed that now there is a igmpproxy package for 1.2.2 & .3rcX, I assume that the package is based on this thread…

So could somebody please look into this: http://forum.pfsense.org/index.php/topic,16943.0.html

buddah

I got igmp working by correctly adding rules, and correctly assigning interfaces.

You want to first set up the interfaces.

a) Your upstream interface will be the origin of the multicast packets. (in my case it was a fuppes server on a different network)

Interface - LAN
Description - "upstream" (or whatever you want)
Type - Upstream Interface
Network - 192.168.0.0 CIDR - 24

b) Your downstream interface will be the destination or what is asking for multicast packets. (in my case it was the wireless where my ps3 was on)

Interface - WLAN
Description - "downstream" (or whatever you want)
Type - Downstream Interface
Network - 192.168.1.0 CIDR - 24

The rules can get a little tricky. Leave anything not specified blank or at its default setting. Lets start with the upstream interface (LAN).

a) Create a new rule for the IGMP packets on the upstream interface (LAN)

Action - Pass
Interface - LAN
Protocol - IGMP
Source -
Type: Single host or alias
Address: 192.168.0.32 (my fuppes/multicast server)
Destination -
Type: Network
Address: 224.0.0.0 / 4 (multicast)
Advanced Options -
Check the box for allowing packets to pass, leave the fields blank
Description - "Multicast IGMP" (or anything you want)

b) Create a second rule for the UDP packets on the upstream interface (LAN)

Action - Pass
Interface - LAN
Protocol - UDP
Source -
Type: any
Destination -
Type: Network
Address: 224.0.0.0 / 4 (multicast)
Description - "Multicast UDP" (or anything you want)

Now we setup rules for the downstream interface (WLAN). Also leave anything not specified blank or at its default setting.

a) Create a new rule for the IGMP packets on the downstream interface (WLAN)

Action - Pass
Interface - WLAN
Protocol - IGMP
Source -
Type: Single host or alias
Address: 192.168.1.75 (ps3)
Destination -
Type - any
Advanced Options -
Check the box for allowing packets to pass, leave the fields blank
Description - "ps3 Multicast UDP" (or anything you want)

b) Create a second rule for the UDP packets on the downstream interface (WLAN)

Action - Pass
Interface - WLAN
Protocol - UDP
Source -
Type: Single host or alias
Address: 192.168.1.75 (ps3)
Destination -
Type: any
Description - "ps3 Multicast UDP" (or anything you want)

c) Create a third rule for the TCP packets on the downstream interface (WLAN)

Action - Pass
Interface - WLAN
Protocol - TCP
Source -
Type: Single host or alias
Address: 192.168.1.75 (ps3)
Destination -
Type: any
Description - "ps3 Multicast TCP" (or anything you want)

That's how I got multicast to work on my network. I am not sure if creating the rules for UDP and TCP packets are completely necessary, or if this may cause any security risks yet. Maybe someone can read this and further tweak the settings.
Good luck! ;)

buddah

the6thday

Well its not working here (using 1.2.3-RC2 built on Thu Jul 23 17:25:52 EDT 2009)

/tmp/igmpproxy.conf(as created by the gui):


##------------------------------------------------------
## Enable Quickleave mode (Sends Leave instantly)
##------------------------------------------------------
quickleave
phyint ng0 upstream ratelimit 0 threshold 1
altnet 239.35.0.0/16
altnet 217.0.119.0/24
altnet 193.158.35.0/24

phyint em0 downstream ratelimit 0 threshold 1
altnet 192.168.0.0/24

rules on wan interface (upstream):

rules on lan interface (downstream):

Advanced Options-> Checkbox is enabled and fields are blank on all rules.

Debug output from igmpproxy:


# igmpproxy -d -c /tmp/igmpproxy.conf
igmpproxy, Version 0.1 beta2, Build 090427
Copyright 2005 by Johnny Egeland <johnny@rlo.org>Distributed under the GNU GENERAL PUBLIC LICENSE, Version 2 - check GPL.txt

Debu: Searching for config file at '/tmp/igmpproxy.conf'
Debu: Config: Quick leave mode enabled.
Debu: Config: Got a phyint token.
Debu: Config: IF: Config for interface ng0.
Debu: Config: IF: Got upstream token.
Debu: Config: IF: Got ratelimit token '0'.
Debu: Config: IF: Got threshold token '1'.
Debu: Config: IF: Got altnet token 239.35.0.0/16.
Debu: Config: IF: Altnet: Parsed altnet to 239.35/16.
Debu: Config: IF: Got altnet token 217.0.119.0/24.
Debu: Config: IF: Altnet: Parsed altnet to 217.0.119/24.
Debu: Config: IF: Got altnet token 193.158.35.0/24.
Debu: Config: IF: Altnet: Parsed altnet to 193.158.35/24.
Debu: IF name : ng0
Debu: Next ptr : 0
Debu: Ratelimit : 0
Debu: Threshold : 1
Debu: State : 1
Debu: Allowednet ptr : 2820c030
Debu: Config: Got a phyint token.
Debu: Config: IF: Config for interface em0.
Debu: Config: IF: Got downstream token.
Debu: Config: IF: Got ratelimit token '0'.
Debu: Config: IF: Got threshold token '1'.
Debu: Config: IF: Got altnet token 192.168.0.0/24.
Debu: Config: IF: Altnet: Parsed altnet to 192.168.0/24.
Debu: IF name : em0
Debu: Next ptr : 0
Debu: Ratelimit : 0
Debu: Threshold : 1
Debu: State : 2
Debu: Allowednet ptr : 2820c060
Debu: Adding Physical Index value of IF 'em0' is 1
Debu: buildIfVc: Interface em0 Addr: 192.168.0.10, Flags: 0xffff8843, Network: 192.168.0/24
Debu: Adding Physical Index value of IF 'lo0' is 8
Debu: buildIfVc: Interface lo0 Addr: 127.0.0.1, Flags: 0xffff8049, Network: 127/8
Debu: Adding Physical Index value of IF 'ng0' is 10
Debu: buildIfVc: Interface ng0 Addr: 79.238.127.78, Flags: 0xffff88d1, Network: 79.238.127.78/32
Debu: Found config for em0
Debu: Found config for ng0
Note: adding VIF, Ix 0 Fl 0x0 IP 0x0a00a8c0 em0, Threshold: 1, Ratelimit: 0
Debu:         Network for [em0] : 192.168.0/24
Debu:         Network for [em0] : 192.168.0/24
Note: adding VIF, Ix 1 Fl 0x0 IP 0x4e7fee4f ng0, Threshold: 1, Ratelimit: 0
Debu:         Network for [ng0] : 79.238.127.78/32
Debu:         Network for [ng0] : 239.35/16
Debu:         Network for [ng0] : 217.0.119/24
Debu:         Network for [ng0] : 193.158.35/24
Debu: Got 262144 byte buffer size in 0 iterations
Debu: Joining all-routers group 224.0.0.2 on vif 192.168.0.10
Note: joinMcGroup: 224.0.0.2 on em0
Debu: SENT Membership query   from 192.168.0.10    to 224.0.0.1
Debu: Sent membership query from 192.168.0.10 to 224.0.0.1\. Delay: 10
Debu: Created timeout 1 (#0) - delay 10 secs
Debu: (Id:1, Time:10)
Debu: Created timeout 2 (#1) - delay 21 secs
Debu: (Id:1, Time:10)
Debu: (Id:2, Time:21)
Debu: Packet from 192.168.0.10: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.10    to 224.0.0.2 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 192.168.0.10: proto: 2 hdrlen: 20 iplen: 8 or 2048
Note: RECV Membership query   from 192.168.0.10    to 224.0.0.1 (ip_hl 20, data 8)
Debu: Packet from 192.168.0.1: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.1     to 239.255.255.250 (ip_hl 24, data 8)
Debu: Should insert group 239.255.255.250 (from: 192.168.0.1) to route table. Vif Ix : 0
Debu: No existing route for 239.255.255.250\. Create new.
Debu: No routes in table. Insert at beginning.
Info: Inserted route table entry for 239.255.255.250 on VIF #0
Debu: Joining group 239.255.255.250 upstream on IF address 79.238.127.78
Note: joinMcGroup: 239.255.255.250 on ng0
Debu:
Current routing table (Insert Route);
-----------------------------------------------------

Debu: #0: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------

Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 239.255.255.250 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.2     to 239.35.129.11 (ip_hl 24, data 8)
Debu: Should insert group 239.35.129.11 (from: 192.168.0.2) to route table. Vif Ix : 0
Debu: No existing route for 239.35.129.11\. Create new.
Debu: Found existing routes. Find insert location.
Debu: Inserting at beginning, before route 239.255.255.250
Info: Inserted route table entry for 239.35.129.11 on VIF #0
Debu: Joining group 239.35.129.11 upstream on IF address 79.238.127.78
Note: joinMcGroup: 239.35.129.11 on ng0
Debu:
Current routing table (Insert Route);
-----------------------------------------------------

Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------

Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 239.35.129.11 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.2     to 239.35.129.11 (ip_hl 24, data 8)
Debu: Should insert group 239.35.129.11 (from: 192.168.0.2) to route table. Vif Ix : 0
Info: Updated route entry for 239.35.129.11 on VIF #0
Debu:
Current routing table (Insert Route);
-----------------------------------------------------

Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------

Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.2     to 224.0.0.251 (ip_hl 24, data 8)
Debu: Should insert group 224.0.0.251 (from: 192.168.0.2) to route table. Vif Ix : 0
Debu: No existing route for 224.0.0.251\. Create new.
Debu: Found existing routes. Find insert location.
Debu: Inserting after route 239.255.255.250
Info: Inserted route table entry for 224.0.0.251 on VIF #0
Debu: Joining group 224.0.0.251 upstream on IF address 79.238.127.78
Note: joinMcGroup: 224.0.0.251 on ng0
Debu:
Current routing table (Insert Route);
-----------------------------------------------------

Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001
Debu: #2: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------

Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 224.0.0.251 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 239.35.129.11 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 192.168.0.10: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.10    to 224.0.0.2 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV Leave message      from 192.168.0.2     to 224.0.0.2 (ip_hl 24, data 8)
Debu: Got leave message from 192.168.0.2 to 239.35.129.11\. Starting last member detection.
Debu: Leaving group 239.35.129.11 upstream on IF address 79.238.127.78
Note: leaveMcGroup: 239.35.129.11 on ng0
Debu: SENT Membership query   from 192.168.0.10    to 239.35.129.11
Debu: Sent membership query from 192.168.0.10 to 239.35.129.11\. Delay: 10
Debu: Created timeout 3 (#1) - delay 8 secs
Debu: (Id:1, Time:2)
Debu: (Id:3, Time:8)
Debu: (Id:2, Time:13)
Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.2     to 239.35.140.11 (ip_hl 24, data 8)
Debu: Should insert group 239.35.140.11 (from: 192.168.0.2) to route table. Vif Ix : 0
Debu: No existing route for 239.35.140.11\. Create new.
Debu: Found existing routes. Find insert location.
Debu: Inserting after route 239.35.129.11
Info: Inserted route table entry for 239.35.140.11 on VIF #0
Debu: Joining group 239.35.140.11 upstream on IF address 79.238.127.78
Note: joinMcGroup: 239.35.140.11 on ng0
Debu:
Current routing table (Insert Route);
-----------------------------------------------------

Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.35.140.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #2: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001
Debu: #3: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------

Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 239.35.140.11 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 192.168.0.2: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 192.168.0.2     to 239.35.140.11 (ip_hl 24, data 8)
Debu: Should insert group 239.35.140.11 (from: 192.168.0.2) to route table. Vif Ix : 0
Info: Updated route entry for 239.35.140.11 on VIF #0
Debu:
Current routing table (Insert Route);
-----------------------------------------------------

Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.35.140.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #2: Dst: 239.255.255.250, Age:2, St: I, OutVifs: 0x00000001
Debu: #3: Dst: 224.0.0.251, Age:2, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------

Debu: Eliminate compiler warning for field type = 22
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 239.255.255.250 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: About to call timeout 1 (#0)
Debu: Aging routes in table.
Debu:
Current routing table (Age active routes);
-----------------------------------------------------

Debu: #0: Dst: 239.35.129.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #1: Dst: 239.35.140.11, Age:2, St: I, OutVifs: 0x00000001
Debu: #2: Dst: 239.255.255.250, Age:1, St: I, OutVifs: 0x00000001
Debu: #3: Dst: 224.0.0.251, Age:1, St: I, OutVifs: 0x00000001
Debu:
-----------------------------------------------------

Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 224.0.0.251 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 217.0.119.33: proto: 2 hdrlen: 24 iplen: 12 or 3072
Note: RECV Membership query   from 217.0.119.33    to 224.0.0.1 (ip_hl 24, data 12)
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 224.0.0.251 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
Debu: Packet from 79.238.127.78: proto: 2 hdrlen: 24 iplen: 8 or 2048
Note: RECV V2 member report   from 79.238.127.78   to 239.255.255.250 (ip_hl 24, data 8)
Note: The IGMP message was from myself. Ignoring.
^CWarn: select() failure; Errno(4): Interrupted system call
Note: Got a interupt signal. Exiting.
Debu: clean handler called
Debu: Removing route entry for 239.35.129.11
Note: Route is not active. No kernel updates done.
Debu: Leaving group 239.35.129.11 upstream on IF address 79.238.127.78
Note: leaveMcGroup: 239.35.129.11 on ng0
Warn: MRT_DROP_MEMBERSHIP failed; Errno(49): Can't assign requested address
Debu: Removing route entry for 239.35.140.11
Note: Route is not active. No kernel updates done.
Debu: Leaving group 239.35.140.11 upstream on IF address 79.238.127.78
Note: leaveMcGroup: 239.35.140.11 on ng0
Debu: Removing route entry for 239.255.255.250
Note: Route is not active. No kernel updates done.
Debu: Leaving group 239.255.255.250 upstream on IF address 79.238.127.78
Note: leaveMcGroup: 239.255.255.250 on ng0
Debu: Removing route entry for 224.0.0.251
Note: Route is not active. No kernel updates done.
Debu: Leaving group 224.0.0.251 upstream on IF address 79.238.127.78
Note: leaveMcGroup: 224.0.0.251 on ng0
Note: All routes removed. Routing table is empty.
Info: Shutdown complete....
#</johnny@rlo.org>