Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    IPTV and IGMP Proxy problems

    2.0-RC Snapshot Feedback and Problems - RETIRED
    1
    2
    27468
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      baryon last edited by

      Hello,

      I'm wondering if anyone could help me setup IPTV, or give a points to what I'm doing wrong?

      So far, I have been reading, and trying to get IPTV to work with pfSense (snapshot embedded i386; pfSense-2.0-BETA4-4g-20101210-2038-nanobsd.img.gz), without any results. Only way so far to get it to work is by directly connecting the IPTV box directly to the modem.

      The last setup I tried was:

      Inside Firewall>Rules

      WAN
      Proto: IGMP
      Source: *
      Destination: *
      Enabled option "This allows packets with IP options to pass … " under "Advanced Options".

      LAN
      Edited the "Default allow LAN to any rule" to also have "This allows packets with IP options to pass … " option.

      Inside Services>IGMP Proxy I have added

      Name: WAN
      Type: upstream
      Threshold: empty
      Values: 224.0.0.0/4

      Name: LAN
      Type: downstream
      Threshold: empty
      Values: 192.168.0.0/24

      Information taken from service providers website

      • For IPTV to work IGMP Proxy needs to be enabled. Source, in finnish, http://www.elisa.fi/asiakastuki/700.3/elisa-viihde/7953/erillisen-adsl-modeemin-tai-reitittimen-kayttaminen/ .

      • Addresses 224.0.0.22, 224.0.0.252, 224.0.0.253, 224.0.1.60 and 239.255.255.250 needs to be allowed to send packages. Source, also in finnish, http://palsta.elisa.fi/index.php/topic,660.msg10681.html#msg10681 .

      As far as I know, mask 224.0.0.0/4 should cover these addresses.

      1 Reply Last reply Reply Quote 0
      • B
        baryon last edited by

        After a lot of head scratching I finally managed to get it to work. I'll post the settings I used, in case someone reads this post later and possibly find them useful.

        Services>Rules: WAN
        Proto: UDP
        Source: *
        Source Port: *
        Destination: 224.0.0.0/4
        Destination Port: *

        Services>Rules: LAN
        Modify the "Default allow LAN to any rule" and enable the option "This allows packets with IP options to pass. Otherwise they are blocked by default. This is usually only seen with multicast traffic.". It is found under "Advanced Options" near the bottom of the page, when editing this rule.

        (The next rule is specific for my service provider and can be skipped if your service provider doesn't have a similar service. In my case it provides access to the Warner Films channel.)
        Services>NAT: Port Forwarding
        Proto: UDP
        Src. addr: *
        Src ports: *
        Dest. addr: WAN address
        Dest. ports: 8254
        NAT IP: <ip of="" iptv-box="">NAT Ports: 8254

        Services>IGMP Proxy
        Here I made two rules. One for upstream and one for downstream traffic.

        Upstream
        Name: WAN
        Type: upstream
        Threshold: <empty>Values: 224.0.0.0/4, 195.238.200.0/24 (*the second address mask specific to my service provider. See note below.)

        Downstream
        Name: LAN
        Type: downstream
        Threshold: <empty>Values: 192.168.0.0/24 (This is the subnet mask of my internal network. Change it to what you use.)

        Notes
        The second subnet mask I specified for the upstream is the net from where the data stream is coming from, in my case. Without this I get nothing but a black screen.

        To debug what was going on, I ssh'd to my pfSense box and ran igmpproxy from the command line:

        igmpproxy -d -c /tmp/igmpproxy.conf
        

        After switching to an IPTV channel I noticed the following warning coming from igmpproxy:

        Warn: The source address 195.238.200.2 for group 239.192.105.14, is not in any valid net for upstream VIF.
        

        I checked the IP and turns out my service provider own the 195.238.200.0/24 network. After adding it to my upstream settings, I was able to watch tv.

        For reference, I am using "Elisa Viihde", a Finnish IPTV solution.

        pfSense version that I'm using is 2.0-BETA4 (i386) built on Fri Dec 10 20:38:22 EST 2010 running on a PC Engines ALIX 2D3 board.

        Posts I found useful
        http://forum.pfsense.org/index.php/topic,16943.msg113914.html#msg113914
        http://forum.lissyara.su/viewtopic.php?f=3&t=17080#p158230 (in Russian)</empty></empty></ip>

        1 Reply Last reply Reply Quote 0
        • First post
          Last post