IPTV IGMP multicast problems with BT YouView on pfSense

Jimbo

Thankfully the other half is very patient and puts up with my network issues :).

Sorry I probably should have mentioned the setup sooner.

Host running KVM (Ubuntu 16.04)
Onboard NIC runs the HOST / Mail server in KVM.
2 X TP-Link Gigabit PCI Express PCI-E for the PfSense VM.
TP-LINK TL-SG108E - Managed switch - The LAN interface from the PfSense box connects directly to this. Trunk port 8.
The WAN side is connected directly to the BT FTTC VDSL (HUAWEI) unit.

That's the setup.

I've had a bit more of a play but no joy sadly. I found that if I removed the NAT-OUT rules the BT Vision box would complain that there was no Internet connection.

Not really sure what else to try.

casualsix

Did you try rebooting the youview box after removing the nat out rules to get it to recognise the internet again? I had same problem and that cured it.

Jimbo

Hi casualsix,

Actually I don't think I did. (I did unplug the network cable).

This morning I removed the NAT-OUT rules and rebooted the YouView BT Vision box. I'm afraid that no Internet connection was detected until I setup the NAT-OUT rules (was worth a try though).

I had another play around this morning but sadly nothing has helped.

I've attached a picture of the error message and network settings from the YouView BT Vision box.

IMG_20171003_084034.jpg_thumb

IMG_20171003_084104.jpg_thumb

casualsix

I take it you've got DHCP server and "DHCP" firewalls rules setup for the BTVision Vlan?

casualsix

The error message is to do with the IGMP multicast not working, not due to the Youview Box not getting internet. I would recommend deleting your out nat rules to keep things simpler, unless there's another need for them.

You could try this…

Under System -> Advanced -> System Tunables, add a new entry with the Tunable as "net.link.ether.inet.allow_multicast" and the Value as "1".

Jimbo

casualsix,

Thank you for the pointers. I have removed all outbound NAT rules for 192.168.0.0/24 WAN,BT_VLAN,EXTERNAL_BT :).

I have also added the tunable you supplied.

For good measure I rebooted everything (PfSense, BT box) but sadly I now receive that the box can't see any broadband connection. This error seems to go away with the NAT rules.

Regarding the BT Vision VLAN: I've attached a screenshot of the rules, yes it has a DHCP server :).

As always thank you for taking the time to assist!

![Screenshot from 2017-10-03 15-01-14.png](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-14.png)
![Screenshot from 2017-10-03 15-01-14.png_thumb](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-14.png_thumb)
![Screenshot from 2017-10-03 15-01-43.png](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-43.png)
![Screenshot from 2017-10-03 15-01-43.png_thumb](/public/imported_attachments/1/Screenshot from 2017-10-03 15-01-43.png_thumb)
![Screenshot from 2017-10-03 15-02-01.png](/public/imported_attachments/1/Screenshot from 2017-10-03 15-02-01.png)
![Screenshot from 2017-10-03 15-02-01.png_thumb](/public/imported_attachments/1/Screenshot from 2017-10-03 15-02-01.png_thumb)

casualsix

Also, in your "BT Vision vlan" firewall rule, wildcard "any" the source, Instead of the strict rule.

casualsix

My IPTV WAN rules

![Screen Shot 2017-10-03 at 15.17.00.png](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.17.00.png)
![Screen Shot 2017-10-03 at 15.17.00.png_thumb](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.17.00.png_thumb)

casualsix

My vLan (Internal lan) rules

![Screen Shot 2017-10-03 at 15.18.17.png](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.18.17.png)
![Screen Shot 2017-10-03 at 15.18.17.png_thumb](/public/imported_attachments/1/Screen Shot 2017-10-03 at 15.18.17.png_thumb)

Jimbo

Casualsix,

Thank you so much for sending this over. Sadly even with a colleagues help and using your rules as templates we couldn't get it working. I must be missing something, not sure what though.

May I ask what kind of IP range you are using on your WAN? I'm using 10.20.30.1/24

casualsix

For my secondary IPTV WAN i'm using a 10.10.10.1, IGMP Proxy isn't really fussy about what you use.

I'm using a EchoLife HG612 (BT openreach) "firmware hacked" ;D modem, is that what you have?

When you turn off you outbound nat rules , I take it your youview box is seeing the DHCP O.K.?

I also read somewhere that BT need the Youview DNS to be pointed at they're servers but Im not sure if thats true, but it's not the case with Plusnet supplied youview service though (Obviously part of BT anyway)

casualsix

Also, For Info,,,,,,I've tested your IPTV WAN IP 10.20.30.1/24 , and it's working fine with my setup.

Jimbo

casualsix,

Thank you for testing my IPTV WAN IP and confirming I'm not going mad haha!

Yes I have a EchoLife HG612 but the firmware isn't hacked. Do you think that could be the issue?

I'll try BT DNS later today - At this point I'm grabbing at straws :)

casualsix

No, the standard BT Modem works fine also. Have you considered the SG-2220? Its such a improvement, I've messed with VM's and Iso installs but found Netgate hardware the answer for me. No IGMP Proxy issues and internet and VPN features I used are great,

Jimbo

casualsix,

Thank you, at least I know that the modem unit should be fine. I might try to install PfSense on metal to see if KVM/QEMU is doing something weird. I will take a look at SG-2220 and see what I think. I kinda like building my own stuff but then again these problems happen!

I do appreciate all your help. I have promised the other half that if I can't fix this we may go to another TV service that doesn't reply on IPTV :-).

casualsix

OK not problem, If I had a standalone linux o/s to install QEMU i'd test pfsense for you out of interest. I too like to try thing out but IGMP proxy got the better of me and forced me to get the Netgate hardware.

Jimbo 0

Hi Jimbo,

Just wondered if you ever made any progress, I am using a VMware VM and also unable to get it to work.