Problem with IPTV from Telenor

Exodus84

Hello, ive been trying to solve my problem for a couple of weeks now, but i cant find a solution, all posts i find about similar problems is several years old, so either im doing something wrong, or something is not working right in pfSense

i have followed this guide to get it "almost" running:
https://forum.netgate.com/topic/110654/pfsense-med-fiber-fra-telenor-og-t-we-fra-canal-digital-iptv

I get a picture, channel guide and start from the beginning is all working, but the picture stops after 4ish minutes when my isp sends the "are you still watching" package, and for some reason, my tuners isnt getting it

But the weirdests thing is that if i start tcpdump -i msk0 -nn igmp (my wan interface), the tuner works perfectly, and if i stop it, picture stops working again

can anyone help me understand my problem?

added a backup of my config if needed
backup_config.xml

stephenw10

Do you see the interface going in and out of promiscuous mode when you are pcaping?

You may need to set it in promiscuous mode permanently.

Unfortunately my Norwegian is not the greatest!

Steve

Exodus84

How can i check that? i did read somethere that the tcpdump opens up "all traffic" ore something when running, so can that be promiscuous mode?

How do i activate it permanently, and will that destroy the firewall security?

Didnt think about that the tread was in norwegian ;) but the gist of the thread is just what ports to open and what ip's to set in the proxy

stephenw10

You can set it and see the interface status at the command line from ifconfig. For exmaple:

[2.5.0-DEVELOPMENT][admin@apu.stevew.lan]/root: ifconfig re0
re0: flags=8802<BROADCAST,SIMPLEX,MULTICAST> metric 0 mtu 1500
	options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
	ether 00:0d:b9:37:30:10
	media: Ethernet autoselect (10baseT/UTP <half-duplex>)
	status: no carrier
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
[2.5.0-DEVELOPMENT][admin@apu.stevew.lan]/root: ifconfig re0 promisc
[2.5.0-DEVELOPMENT][admin@apu.stevew.lan]/root: ifconfig re0
re0: flags=28902<BROADCAST,PROMISC,SIMPLEX,MULTICAST,PPROMISC> metric 0 mtu 1500
	options=8209b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,WOL_MAGIC,LINKSTATE>
	ether 00:0d:b9:37:30:10
	media: Ethernet autoselect (10baseT/UTP <half-duplex>)
	status: no carrier
	nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>

Steve

Exodus84

you where right that tcpdump enabled promiscous mode, and when i actvated it manually, iptv worked properly,

But how to i get promiscous mode to stay activated after reboots?
And will it affect the security?

EDIT: Figured out how to add the command automaticly after reboot from this link, so now its just the security question
https://docs.netgate.com/pfsense/en/latest/development/executing-commands-at-boot-time.html

stephenw10

It means the NIC will allow traffic that is not addressed to it's MAC or broadcast.

The firewall will still block everything. You might find the NIC itself is busier since it now processes any packets arriving on the wire. It would not concern me unduly. There are other things that require promiscuous mode anyway.

Steve

Exodus84

Thanks for the answer!

After i got the REAL hw that my pfsense will run on, it suddenly worked without promiscous mode, it has 4xIntel NICs, so om guessing the problem i had with the other hw was maybe bad realtek/marvel drivers? Thought it might be usefull info for someone els with the same problem