IPTV

borg

Всем доброго времени суток.
Имеется Esxi 6, на нем поднятый Pfsense 10.3-RELEASE-p9 FreeBSD 10.3-RELEASE-p9 #1 5fc1b19(RELENG_2_3_2): Tue Sep 27 12:26:06 CDT 2016 и физ машина на win10
ip pf'a 11.21.20.1 ip win10 11.21.20.50

интерфейсы pf WAN vmx0 и LAN vmx1:

vmx0: flags=8a43 <up,broadcast,running,allmulti,simplex,multicast>metric 0 mtu 1500
        options=600098 <vlan_mtu,vlan_hwtagging,vlan_hwcsum,rxcsum_ipv6,txcsum_ipv6>ether 11:11:11:11:11:11
        inet6 fe11::1:1%vmx0 prefixlen 64 scopeid 0x1
        inet 10.10.10.10 netmask 0xffffff00 broadcast 10.10.10.255
        nd6 options=21 <performnud,auto_linklocal>media: Ethernet autoselect
        status: active
vmx1: flags=8b43 <up,broadcast,running,promisc,allmulti,simplex,multicast>metric 0 mtu 1500
        options=600098 <vlan_mtu,vlan_hwtagging,vlan_hwcsum,rxcsum_ipv6,txcsum_ipv6>ether 00:50:56:86:5f:b7
        inet6 fe11::250:56ff:fe86:5fb7%vmx1 prefixlen 64 scopeid 0x2
        inet 11.21.20.1 netmask 0xffffff00 broadcast 10.21.20.255
        inet6 2011:470:1f15:ae3::1 prefixlen 64
        inet 11.21.21.155 netmask 0xffffffff broadcast 11.21.21.155
        nd6 options=21 <performnud,auto_linklocal>media: Ethernet autoselect
        status: active
pflog0: flags=100 <promisc>metric 0 mtu 33160
pfsync0: flags=0<> metric 0 mtu 1500
        syncpeer: 224.0.0.240 maxupd: 128 defer: on
        syncok: 1</promisc></performnud,auto_linklocal></vlan_mtu,vlan_hwtagging,vlan_hwcsum,rxcsum_ipv6,txcsum_ipv6></up,broadcast,running,promisc,allmulti,simplex,multicast></performnud,auto_linklocal></vlan_mtu,vlan_hwtagging,vlan_hwcsum,rxcsum_ipv6,txcsum_ipv6></up,broadcast,running,allmulti,simplex,multicast>

Сами каналы разбросаны по 224.0.90.0 224.0.91.0 и 235.1.60.0

Файервол выключен
В Services-IGMP Proxy создано 2 поля

Name	Type	       Values	                               Description
WAN	upstream       11.21.20.0/24, 224.0.0.0/4              iptv_wan 
LAN	downstream     11.21.20.0/24                           iptv_lan

В логах

Nov 17 22:24:04	php-fpm	        33701	/services_igmpproxy.php: Started IGMP proxy service.
Nov 17 22:24:46	igmpproxy       32036	MRT_DEL_MFC; Errno(49): Can't assign requested address
Nov 17 22:25:08	igmpproxy	32036	The origin for route 239.255.255.250 changed from 11.21.20.1 to 11.21.20.50
Nov 17 22:25:37	igmpproxy	32036	The origin for route 239.255.255.250 changed from 11.21.20.50 to 11.21.20.1
Nov 17 22:27:22	igmpproxy	32036	MRT_DEL_MFC; Errno(49): Can't assign requested address
Nov 17 22:28:32	igmpproxy	32036	The origin for route 239.255.255.250 changed from 11.21.20.1 to 11.21.20.50
Nov 17 22:28:37	igmpproxy	32036	The origin for route 239.255.255.250 changed from 11.21.20.50 to 11.21.20.1
Nov 17 22:28:38	igmpproxy	32036	The origin for route 239.255.255.250 changed from 11.21.20.1 to 11.21.20.50
Nov 17 22:29:07	igmpproxy	32036	The origin for route 239.255.255.250 changed from 11.21.20.50 to 11.21.20.1

и в таком духе

IPTV не показывает
Погуглил, решения проблемы не нашел. В чем может быть проблема? Заранее спасибо.

tcpdump'ы

[2.3.2-RELEASE][admin@pf1.ns1.borg]/root: tcpdump -i vmx0 igmp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vmx0, link-type EN10MB (Ethernet), capture size 65535 bytes
23:12:36.615351 IP 10.1.8.1 > all-systems.mcast.net: igmp query v2
23:13:36.782878 IP 10.1.8.1 > all-systems.mcast.net: igmp query v2

[2.3.2-RELEASE][admin@pf1.ns1.borg]/root: tcpdump -i vmx1 igmp
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on vmx1, link-type EN10MB (Ethernet), capture size 65535 bytes
23:13:22.920292 IP borg-pc.ns1.borg > all-routers.mcast.net: igmp leave 224.0.90.183
23:13:23.136279 IP borg-pc.ns1.borg > 224.0.90.83: igmp v2 report 224.0.90.83
23:13:23.368013 IP borg-pc.ns1.borg > 224.0.90.83: igmp v2 report 224.0.90.83
23:13:28.611769 IP pf1.ns1.borg > all-systems.mcast.net: igmp query v2
23:13:28.805646 IP NS-SERV.ns1.borg > 224.0.0.251: igmp v2 report 224.0.0.251
23:13:28.867523 IP borg-pc.ns1.borg > rip2-routers.mcast.net: igmp v2 report rip2-routers.mcast.net
23:13:30.166624 IP 11.21.20.91 > 239.192.152.143: igmp v2 report 239.192.152.143
23:13:31.367865 IP borg-pc.ns1.borg > 224.0.90.83: igmp v2 report 224.0.90.83
23:13:31.805554 IP NS-SERV.ns1.borg > 224.0.0.252: igmp v2 report 224.0.0.252
23:13:32.367526 IP borg-pc.ns1.borg > 239.255.255.250: igmp v2 report 239.255.255.250
23:13:34.950467 IP pf1.ns1.borg > 239.255.255.250: igmp v2 report 239.255.255.250
23:13:35.047071 IP 11.21.20.109 > 239.0.0.250: igmp v2 report 239.0.0.250
23:13:37.750469 IP pf1.ns1.borg > all-routers.mcast.net: igmp v2 report all-routers.mcast.net
23:14:23.320829 IP pf1.ns1.borg > all-systems.mcast.net: igmp query v2
23:14:23.444302 IP 222-PC.ns1.borg > 224.0.0.251: igmp v2 report 224.0.0.251
23:14:23.864861 IP borg-pc.ns1.borg > 239.255.255.250: igmp v2 report 239.255.255.250
23:14:25.364603 IP borg-pc.ns1.borg > rip2-routers.mcast.net: igmp v2 report rip2-routers.mcast.net
23:14:26.805838 IP NS-SERV.ns1.borg > 224.0.0.252: igmp v2 report 224.0.0.252
23:14:27.864801 IP borg-pc.ns1.borg > 224.0.90.83: igmp v2 report 224.0.90.83
23:14:27.950497 IP pf1.ns1.borg > all-routers.mcast.net: igmp v2 report all-routers.mcast.net
23:14:28.026827 IP 11.21.20.91 > 239.192.152.143: igmp v2 report 239.192.152.143

[2.3.2-RELEASE][admin@pf1.ns1.borg]/usr/local/etc: netstat -g

IPv4 Virtual Interface Table
 Vif   Thresh   Local-Address   Remote-Address    Pkts-In   Pkts-Out
  0         1   11.210.72.111                          0          0
  1         1   11.21.20.1                              0          0
  2         1   11.22.25.1                              0          0
  3         1   10.23.150.2                              0          0

IPv4 Multicast Forwarding Table is empty

IPv6 Multicast Interface Table is empty

IPv6 Multicast Forwarding Table is empty

PbIXTOP

При выключенном файрволе по идее вообще igmp-proxy не требуется.

borg

Прошу прощения. Под "фаервол выключен" имелось в виду открыты порты

borg

Все заработало. Вычислил ip который раздает. им оказался 16.16.16.0/24. После добавления его в upstream все пошло.