1
vote
1answer
57 views

Many 'Deny IPv6-ICMP reverse path check' alerts from multicast addresses on Cisco ASA

In an effort to prevent IP Source Address Spoofing (RFC 2827) I've enabled reverse path filtering (RPF) on my Cisco ASA 5505. The topology is aprox. like this. Each segment has its own IPv4 subnet ...
1
vote
1answer
116 views

Is IGMP multicast traffic to a Xen VM host legitimate?

I run two Xen/CentOS 6.5 based VMs, both hosted by the same company, but connected to different networks (basic /24s w/ a single gateway at .1) in different physical locations. I developed an iptables ...
0
votes
2answers
2k views

Problems with multicasts in “iptables”

My question is related to multicasts and iptables. I want to allow ICMP and IGMP multicasts from the local VLAN 192.168.1.0/24 as well as from 0.0.0.0 on my CentOS machine, so I added the following ...
2
votes
1answer
92 views

How does iptables determine which packets are multicast?

Are packets assumed to be multicast solely based on their ip address? I've been looking at the RFC 1112 and a quick scan doesn't appear to indicate any other flags on the ip packet.
5
votes
1answer
2k views

Why is pfSense blocking multicast traffic when it is explicitly enabled?

I have a pair of pfSense firewall/routers set up in CARP/XML Config cluster. On the LAN side, the switch also has a pair of servers running corosync/pacemaker/drbd. These are on a different ip ...
1
vote
2answers
393 views

Multicasting for WDS

I want to install a Windows 7 image on 40-something computers without touching 'em I have a WDS server, an image captured, and an answer file setup. I go to create a multicast transmission out of ...
0
votes
1answer
986 views

What are good host firewall rules to allow UDP multicast?

I have a system with a restrictive firewall that will be participating in UDP multicasting (sending and receiving). What's a good set of rules to make the host's firewall allow this? This is my ...