Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    IPv6 Multicast LAN Chatter

    Firewalling
    2
    2
    1160
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bimmerdriver last edited by

      I'm seeing a lot of IPv6 multicast chatter in the log from windows hosts on the LAN. I'm seeing this on both my 2.4 and 2.3.1 systems.

      Here are a couple of examples:

      [ff02::1:3]:5355 UDP Link-Local Multicast Name Resolution (LLMNR)
      [ff02::c]:1900 UDP Simple Service Discovery Protocol (SSDP)

      Is there a reason they are being blocked? Is there any reason not to put in a rule to allow them to pass, in which case I would use the any source to destination address:port and UDP?

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        If it's multicast, and pfSense doesn't need to see those, why pass them? pfSense can't forward them since they're multicast. There's no reason they should have to hit the firewall.

        Looks like UPnP though, so if you have UPnP on you can let those through, but otherwise I'd block/drop them and not log.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 1
        • First post
          Last post