IPTV and IGMP Proxy problems
I'm wondering if anyone could help me setup IPTV, or give a points to what I'm doing wrong?
So far, I have been reading, and trying to get IPTV to work with pfSense (snapshot embedded i386; pfSense-2.0-BETA4-4g-20101210-2038-nanobsd.img.gz), without any results. Only way so far to get it to work is by directly connecting the IPTV box directly to the modem.
The last setup I tried was:
Enabled option "This allows packets with IP options to pass … " under "Advanced Options".
Edited the "Default allow LAN to any rule" to also have "This allows packets with IP options to pass … " option.
Inside Services>IGMP Proxy I have added
Information taken from service providers website
For IPTV to work IGMP Proxy needs to be enabled. Source, in finnish, http://www.elisa.fi/asiakastuki/700.3/elisa-viihde/7953/erillisen-adsl-modeemin-tai-reitittimen-kayttaminen/ .
Addresses 18.104.22.168, 22.214.171.124, 126.96.36.199, 188.8.131.52 and 184.108.40.206 needs to be allowed to send packages. Source, also in finnish, http://palsta.elisa.fi/index.php/topic,660.msg10681.html#msg10681 .
As far as I know, mask 220.127.116.11/4 should cover these addresses.
After a lot of head scratching I finally managed to get it to work. I'll post the settings I used, in case someone reads this post later and possibly find them useful.
Source Port: *
Destination Port: *
Modify the "Default allow LAN to any rule" and enable the option "This allows packets with IP options to pass. Otherwise they are blocked by default. This is usually only seen with multicast traffic.". It is found under "Advanced Options" near the bottom of the page, when editing this rule.
(The next rule is specific for my service provider and can be skipped if your service provider doesn't have a similar service. In my case it provides access to the Warner Films channel.)
Services>NAT: Port Forwarding
Src. addr: *
Src ports: *
Dest. addr: WAN address
Dest. ports: 8254
NAT IP: <ip of="" iptv-box="">NAT Ports: 8254
Here I made two rules. One for upstream and one for downstream traffic.
Threshold: <empty>Values: 18.104.22.168/4, 22.214.171.124/24 (*the second address mask specific to my service provider. See note below.)
Threshold: <empty>Values: 192.168.0.0/24 (This is the subnet mask of my internal network. Change it to what you use.)
The second subnet mask I specified for the upstream is the net from where the data stream is coming from, in my case. Without this I get nothing but a black screen.
To debug what was going on, I ssh'd to my pfSense box and ran igmpproxy from the command line:
igmpproxy -d -c /tmp/igmpproxy.conf
After switching to an IPTV channel I noticed the following warning coming from igmpproxy:
Warn: The source address 126.96.36.199 for group 188.8.131.52, is not in any valid net for upstream VIF.
I checked the IP and turns out my service provider own the 184.108.40.206/24 network. After adding it to my upstream settings, I was able to watch tv.
For reference, I am using "Elisa Viihde", a Finnish IPTV solution.
pfSense version that I'm using is 2.0-BETA4 (i386) built on Fri Dec 10 20:38:22 EST 2010 running on a PC Engines ALIX 2D3 board.
Posts I found useful
http://forum.lissyara.su/viewtopic.php?f=3&t=17080#p158230 (in Russian)</empty></empty></ip>