• I'm seeing a lot of IPv6 multicast chatter in the log from windows hosts on the LAN. I'm seeing this on both my 2.4 and 2.3.1 systems.

    Here are a couple of examples:

    [ff02::1:3]:5355 UDP Link-Local Multicast Name Resolution (LLMNR)
    [ff02::c]:1900 UDP Simple Service Discovery Protocol (SSDP)

    Is there a reason they are being blocked? Is there any reason not to put in a rule to allow them to pass, in which case I would use the any source to destination address:port and UDP?

  • Rebel Alliance Developer Netgate

    If it's multicast, and pfSense doesn't need to see those, why pass them? pfSense can't forward them since they're multicast. There's no reason they should have to hit the firewall.

    Looks like UPnP though, so if you have UPnP on you can let those through, but otherwise I'd block/drop them and not log.