Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPTV IGMP multicast problems with BT YouView on pfSense

    Scheduled Pinned Locked Moved Firewalling
    48 Posts 12 Posters 34.2k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      Jimbo
      last edited by

      casualsix,

      Thank you for taking the time to look through my config.

      I've tried VLC streaming on the same network as the BT Vision box and via another LAN. Both just show no image and no seconds counting on the video time.

      I created the NAT rules as before the BT Vision box couldn't connect to the internet at all.

      The BT Vision box is hired wired straight into the TP-LINK TL-SG108 with IGMP snooping enabled.

      I can only see one entry from this morning UK BST time in the system general log regarding IGMPproxy: Oct 2 10:45:49 igmpproxy 73792 select() failure; Errno(4): Interrupted system call

      Please see attached interface assignments.

      Thank you for taking the time to help.

      Interfaces.png
      Interfaces.png_thumb

      1 Reply Last reply Reply Quote 0
      • C
        casualsix
        last edited by

        Thats No problem, I've been through the same pain!!

        What hardware have you got for your router?

        Have you tried it in different hardware (sounds extreme, but thats what I have done and found incorrect settings in my managed switch.

        I've seen that error message before on a NIC card which wasn't compatible. I also had it working on the SG-1000 netgate, then updated the firmware and it never worked again, so changed to the SG-2220 now after getting a refund for the SG-1000, and i've not had any further problems with 2.4, I've also ran it on an old Acer Revo 3610 with one NIC and the community edition of pfsense 2.3 and all vlans like yours and it ran a treat with that, no issues. So thats why I put it down to the NIC make causing that error.

        Thanks, Jeremy

        1 Reply Last reply Reply Quote 0
        • J
          Jimbo
          last edited by

          Thankfully the other half is very patient and puts up with my network issues :).

          Sorry I probably should have mentioned the setup sooner.

          Host running KVM (Ubuntu 16.04)
          Onboard NIC runs the HOST / Mail server in KVM.
          2 X TP-Link Gigabit PCI Express PCI-E for the PfSense VM.
          TP-LINK TL-SG108E - Managed switch - The LAN interface from the PfSense box connects directly to this. Trunk port 8.
          The WAN side is connected directly to the BT FTTC VDSL (HUAWEI) unit.

          That's the setup.

          I've had a bit more of a play but no joy sadly. I found that if I removed the NAT-OUT rules the BT Vision box would complain that there was no Internet connection.

          Not really sure what else to try.

          1 Reply Last reply Reply Quote 0
          • C
            casualsix
            last edited by

            Did you try rebooting the youview box after removing the nat out rules to get it to recognise the internet again? I had same problem and that cured it.

            1 Reply Last reply Reply Quote 0
            • J
              Jimbo
              last edited by

              Hi casualsix,

              Actually I don't think I did. (I did unplug the network cable).

              This morning I removed the NAT-OUT rules and rebooted the YouView BT Vision box. I'm afraid that no Internet connection was detected until I setup the NAT-OUT rules (was worth a try though).

              I had another play around this morning but sadly nothing has helped.

              I've attached a picture of the error message and network settings from the YouView BT Vision box.

              IMG_20171003_084034.jpg
              IMG_20171003_084034.jpg_thumb
              IMG_20171003_084104.jpg
              IMG_20171003_084104.jpg_thumb

              1 Reply Last reply Reply Quote 0
              • C
                casualsix
                last edited by

                I take it you've got DHCP server and "DHCP" firewalls rules setup for the BTVision Vlan?

                1 Reply Last reply Reply Quote 0
                • C
                  casualsix
                  last edited by

                  The error message is to do with the IGMP multicast not working, not due to the Youview Box not getting internet. I would recommend deleting your out nat rules to keep things simpler, unless there's another need for them.

                  You could try this…

                  Under System -> Advanced -> System Tunables, add a new entry with the Tunable as "net.link.ether.inet.allow_multicast" and the Value as "1".

                  1 Reply Last reply Reply Quote 0
                  • J
                    Jimbo
                    last edited by

                    casualsix,

                    Thank you for the pointers. I have removed all outbound NAT rules for 192.168.0.0/24 WAN,BT_VLAN,EXTERNAL_BT :).

                    I have also added the tunable you supplied.

                    For good measure I rebooted everything (PfSense, BT box) but sadly I now receive that the box can't see any broadband connection. This error seems to go away with the NAT rules.

                    Regarding the BT Vision VLAN: I've attached a screenshot of the rules, yes it has a DHCP server :).

                    As always thank you for taking the time to assist!

                    ![Screenshot from 2017-10-03 15-01-14.png](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-14.png)
                    ![Screenshot from 2017-10-03 15-01-14.png_thumb](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-14.png_thumb)
                    ![Screenshot from 2017-10-03 15-01-43.png](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-43.png)
                    ![Screenshot from 2017-10-03 15-01-43.png_thumb](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-43.png_thumb)
                    ![Screenshot from 2017-10-03 15-02-01.png](/public/imported_attachments/1/Screenshot from 2017-10-03 15-02-01.png)
                    ![Screenshot from 2017-10-03 15-02-01.png_thumb](/public/imported_attachments/1/Screenshot from 2017-10-03 15-02-01.png_thumb)

                    1 Reply Last reply Reply Quote 0
                    • C
                      casualsix
                      last edited by

                      Also, in your "BT Vision vlan" firewall rule, wildcard "any" the source, Instead of the strict rule.

                      1 Reply Last reply Reply Quote 0
                      • C
                        casualsix
                        last edited by

                        My IPTV WAN rules

                        ![Screen Shot 2017-10-03 at 15.17.00.png](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.17.00.png)
                        ![Screen Shot 2017-10-03 at 15.17.00.png_thumb](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.17.00.png_thumb)

                        1 Reply Last reply Reply Quote 0
                        • C
                          casualsix
                          last edited by

                          My vLan (Internal lan) rules

                          ![Screen Shot 2017-10-03 at 15.18.17.png](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.18.17.png)
                          ![Screen Shot 2017-10-03 at 15.18.17.png_thumb](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.18.17.png_thumb)

                          1 Reply Last reply Reply Quote 0
                          • J
                            Jimbo
                            last edited by

                            Casualsix,

                            Thank you so much for sending this over. Sadly even with a colleagues help and using your rules as templates we couldn't get it working. I must be missing something, not sure what though.

                            May I ask what kind of IP range you are using on your WAN? I'm using 10.20.30.1/24

                            1 Reply Last reply Reply Quote 0
                            • C
                              casualsix
                              last edited by

                              For my secondary IPTV WAN i'm using a 10.10.10.1, IGMP Proxy isn't really fussy about what you use.

                              I'm using a EchoLife HG612  (BT openreach) "firmware hacked" ;D  modem, is that what you have?

                              When you turn off you outbound nat rules , I take it your youview box is seeing the DHCP O.K.?

                              I also read somewhere that BT need the Youview DNS to be pointed at they're servers but Im not sure if thats true, but it's not the case with Plusnet supplied youview service though (Obviously part of BT anyway)

                              1 Reply Last reply Reply Quote 0
                              • C
                                casualsix
                                last edited by

                                Also, For Info,,,,,,I've tested your IPTV WAN IP 10.20.30.1/24 , and it's working fine with my setup.

                                1 Reply Last reply Reply Quote 0
                                • J
                                  Jimbo
                                  last edited by

                                  casualsix,

                                  Thank you for testing my IPTV WAN IP and confirming I'm not going mad haha!

                                  Yes I have a EchoLife HG612 but the firmware isn't hacked. Do you think that could be the issue?

                                  I'll try BT DNS later today - At this point I'm grabbing at straws :)

                                  1 Reply Last reply Reply Quote 0
                                  • C
                                    casualsix
                                    last edited by

                                    No, the standard BT Modem works fine also. Have you considered the SG-2220? Its such a improvement, I've messed with VM's and Iso installs but found Netgate hardware the answer for me. No IGMP Proxy issues and internet and VPN features I used are great,

                                    1 Reply Last reply Reply Quote 0
                                    • J
                                      Jimbo
                                      last edited by

                                      casualsix,

                                      Thank you, at least I know that the modem unit should be fine. I might try to install PfSense on metal to see if KVM/QEMU is doing something weird. I will take a look at SG-2220 and see what I think. I kinda like building my own stuff but then again these problems happen!

                                      I do appreciate all your help. I have promised the other half that if I can't fix this we may go to another TV service that doesn't reply on IPTV :-).

                                      1 Reply Last reply Reply Quote 0
                                      • C
                                        casualsix
                                        last edited by

                                        OK not problem, If I had a standalone linux o/s to install QEMU i'd test pfsense for you out of interest. I too like to try thing out but IGMP proxy got the better of me and forced me to get the Netgate hardware.

                                        1 Reply Last reply Reply Quote 0
                                        • J
                                          Jimbo 0
                                          last edited by

                                          Hi Jimbo,

                                          Just wondered if you ever made any progress, I am using a VMware VM and also unable to get it to work.

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.