I have a system with a restrictive firewall that will be participating in UDP multicasting (sending and receiving). What's a good set of rules to make the host's firewall allow this?
This is my current setup, using ipf on Solaris:
# Enable UDP multicasting pass out log quick on INTERFACE proto udp from HOSTIP/32 to 220.127.116.11/4 pass in log quick on INTERFACE proto udp from 18.104.22.168/4 to HOSTIP/32 # Enable multicast ping discovery pass in log quick on INTERFACE proto icmp from any to 22.214.171.124/32 # Allow pings out. pass out quick on INTERFACE proto icmp all keep state
The host is expected to participate in exactly one multicast group. Can I replace "126.96.36.199/4" with this specific group (e.g., GROUP/32) without causing problems?
Are there any other openings that should be created?