[Firehol-support] How to accept muticast traffic?

Phil Whineray phil at firehol.org
Sat Feb 4 09:36:46 GMT 2017


Hi Marco

On Fri, Feb 03, 2017 at 05:17:05PM +0100, Marco Neubauer wrote:
> Hi,
> 
> I try to receive multicast traffic, but i canĀ“t get it to work.
> 
> My config looks like this:
> 
> interface4 eth3 LAN_DHCP
> 	policy return
> 	server dhcp accept
> 	server multicast accept
> 	client multicast accept
> interface4 eth3 LAN src 192.168.1.0/24
> 	policy reject
> 	server "dns ssh ntp snmp ping" accept
> 	client all accept
> 

That looks reasonable to me. What version of firehol are you running?
Can you post the output of running: firehol debug? Running that config
snippet, I get these rules in the output according to firehol status:

Chain in_LAN_DHCP (1 references)
    pkts      bytes target     prot opt in     out     source               destination         
       0        0 ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            ctstate RELATED
       0        0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0            udp spt:68 dpt:67
       0        0 ACCEPT     2    --  *      *       0.0.0.0/0            224.0.0.0/4         
       0        0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.0/4         
       0        0 ACCEPT     2    --  *      *       0.0.0.0/0            224.0.0.0/4         
       0        0 ACCEPT     udp  --  *      *       0.0.0.0/0            224.0.0.0/4         

Cheers
Phil


More information about the Firehol-support mailing list