• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

IPTV and IGMP Proxy problems

Scheduled Pinned Locked Moved 2.0-RC Snapshot Feedback and Problems - RETIRED
2 Posts 1 Posters 30.8k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • B
    baryon
    last edited by Dec 11, 2010, 8:11 PM

    Hello,

    I'm wondering if anyone could help me setup IPTV, or give a points to what I'm doing wrong?

    So far, I have been reading, and trying to get IPTV to work with pfSense (snapshot embedded i386; pfSense-2.0-BETA4-4g-20101210-2038-nanobsd.img.gz), without any results. Only way so far to get it to work is by directly connecting the IPTV box directly to the modem.

    The last setup I tried was:

    Inside Firewall>Rules

    WAN
    Proto: IGMP
    Source: *
    Destination: *
    Enabled option "This allows packets with IP options to pass … " under "Advanced Options".

    LAN
    Edited the "Default allow LAN to any rule" to also have "This allows packets with IP options to pass … " option.

    Inside Services>IGMP Proxy I have added

    Name: WAN
    Type: upstream
    Threshold: empty
    Values: 224.0.0.0/4

    Name: LAN
    Type: downstream
    Threshold: empty
    Values: 192.168.0.0/24

    Information taken from service providers website

    • For IPTV to work IGMP Proxy needs to be enabled. Source, in finnish, http://www.elisa.fi/asiakastuki/700.3/elisa-viihde/7953/erillisen-adsl-modeemin-tai-reitittimen-kayttaminen/ .

    • Addresses 224.0.0.22, 224.0.0.252, 224.0.0.253, 224.0.1.60 and 239.255.255.250 needs to be allowed to send packages. Source, also in finnish, http://palsta.elisa.fi/index.php/topic,660.msg10681.html#msg10681 .

    As far as I know, mask 224.0.0.0/4 should cover these addresses.

    1 Reply Last reply Reply Quote 0
    • B
      baryon
      last edited by Dec 13, 2010, 7:51 AM Dec 12, 2010, 6:40 PM

      After a lot of head scratching I finally managed to get it to work. I'll post the settings I used, in case someone reads this post later and possibly find them useful.

      Services>Rules: WAN
      Proto: UDP
      Source: *
      Source Port: *
      Destination: 224.0.0.0/4
      Destination Port: *

      Services>Rules: LAN
      Modify the "Default allow LAN to any rule" and enable the option "This allows packets with IP options to pass. Otherwise they are blocked by default. This is usually only seen with multicast traffic.". It is found under "Advanced Options" near the bottom of the page, when editing this rule.

      (The next rule is specific for my service provider and can be skipped if your service provider doesn't have a similar service. In my case it provides access to the Warner Films channel.)
      Services>NAT: Port Forwarding
      Proto: UDP
      Src. addr: *
      Src ports: *
      Dest. addr: WAN address
      Dest. ports: 8254
      NAT IP: <ip of="" iptv-box="">NAT Ports: 8254

      Services>IGMP Proxy
      Here I made two rules. One for upstream and one for downstream traffic.

      Upstream
      Name: WAN
      Type: upstream
      Threshold: <empty>Values: 224.0.0.0/4, 195.238.200.0/24 (*the second address mask specific to my service provider. See note below.)

      Downstream
      Name: LAN
      Type: downstream
      Threshold: <empty>Values: 192.168.0.0/24 (This is the subnet mask of my internal network. Change it to what you use.)

      Notes
      The second subnet mask I specified for the upstream is the net from where the data stream is coming from, in my case. Without this I get nothing but a black screen.

      To debug what was going on, I ssh'd to my pfSense box and ran igmpproxy from the command line:

      igmpproxy -d -c /tmp/igmpproxy.conf
      

      After switching to an IPTV channel I noticed the following warning coming from igmpproxy:

      Warn: The source address 195.238.200.2 for group 239.192.105.14, is not in any valid net for upstream VIF.
      

      I checked the IP and turns out my service provider own the 195.238.200.0/24 network. After adding it to my upstream settings, I was able to watch tv.

      For reference, I am using "Elisa Viihde", a Finnish IPTV solution.

      pfSense version that I'm using is 2.0-BETA4 (i386) built on Fri Dec 10 20:38:22 EST 2010 running on a PC Engines ALIX 2D3 board.

      Posts I found useful
      http://forum.pfsense.org/index.php/topic,16943.msg113914.html#msg113914
      http://forum.lissyara.su/viewtopic.php?f=3&t=17080#p158230 (in Russian)</empty></empty></ip>

      1 Reply Last reply Reply Quote 0
      2 out of 2
      • First post
        2/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received