Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have secured a linux box, starting with

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

and after adding rules to enable specific protocols and streams.

  • Which are the correct rules to add multicast support ?

I am trying with these - for both client and server multicast :

iptables -A INPUT  -m pkttype --pkt-type multicast -j ACCEPT
iptables -A OUTPUT -m pkttype --pkt-type multicast -j ACCEPT
iptables -A INPUT  --protocol igmp -j ACCEPT
iptables -A OUTPUT --protocol igmp -j ACCEPT
iptables -A INPUT  --dst "224.0.0.0/4" -j ACCEPT
iptables -A OUTPUT --dst "224.0.0.0/4" -j ACCEPT

Linux 2.6.38-12 / iptables 1.4.10

  • Is there any internet service to test my multicast set ( pc + adsl router + provider ) ?
share|improve this question
    
It would be helpfull to tell us which version of netfilter/iptables do you use. If you use the distro standard, please let us know, which linux distro including version information do you use. –  f4m8 Nov 25 '11 at 13:44
    
Done. Also with a new, related, question. –  Massimo Nov 25 '11 at 14:04

1 Answer 1

multicast over the global internet does not exist, it is unicast only.

If you wish to test multicast addresses, configure it within your own network.

share|improve this answer
    
This info is incorrect. multicast works over WAN and internet, your provider have to enable and configure the routers. –  Massimo Nov 27 '11 at 13:52
    
right, via peerings to participants in the multicast group. my point still stands that the Internet as a whole does not have multicast. –  Olipro Nov 27 '11 at 20:49
    
Ok, but you don't answer my question about iptables. –  Massimo Nov 30 '11 at 7:13
    
matching on a packet type of "multicast" is sufficient depending on what overall ruleset you have configured iptables with; if all your chains are set to ACCEPT, obviously you don't need any rules at all. –  Olipro Dec 9 '11 at 2:21

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.