Date: Sat, 8 Aug 2020 14:31:06 +0200 From: Abelenda Diego <diego.abelenda@gmail.com> To: Hans Petter Selasky <hps@selasky.org> Cc: freebsd-net@freebsd.org Subject: Re: Multicast issue, interface not leaving Mutlicast Group Message-ID: <20200808143106.423bd20f@debian> In-Reply-To: <9c241a38-977b-dcdd-ba5d-e8b2dfa2b17c@selasky.org> References: <20200807152525.711d4072@debian> <9c241a38-977b-dcdd-ba5d-e8b2dfa2b17c@selasky.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--Sig_/jeHJ7RfEfAXT+K14BOlLRzI Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable On Sat, 8 Aug 2020 12:54:37 +0200 Hans Petter Selasky <hps@selasky.org> wrote: > On 2020-08-07 15:25, Abelenda Diego wrote: > > Hello, > >=20 > > I have discovered that I had a multicast issue for years I did not know > > about. I use a FreeBSD (opnsense) setup as router for my home network a= nd > > have igmpproxy for IPTV. Somehow everything seems to work, until I real= ized > > that my ISP was making a DoS with multicast. It is pretty much what was > > described years ago here: > > https://forum.netgate.com/topic/62591/igmp-issues-causing-isp-to-perfor= m-multicast-dos-on-my-pfsense/7. > > But the solution of not using FreeBSD seem weird. So dug a lot learning > > about Multicast IGMPv{2,3} etc in the process. Here is an abstract of w= hat > > I found:=20 >=20 > Which version of FreeBSD is this (uname -a) ? >=20 > There has been some fixes in the multicast area from time to time, and=20 > you should make sure you've got all the fixes incorporated in the kernel= =20 > you are using, typically by testing a kernel based on a -stable or=20 > -current branch of FreeBSD. >=20 > --HPS >=20 Hello, This is opnsense, so it is not like I can change kernel as I want. Moreover= the kernel used by opnsense has some patches for stf 6rd support for example, things like that. Anyway, the kernel I use is: FreeBSD $hostname 12.1-RELEASE-p7-HBSD FreeBSD 12.1-RELEASE-p7-HBSD #0 427= d53bc125(stable/20.7)-dirty: Sun Jul 26 05:51:42 CEST 2020 root@sensey6= 4:/usr/obj/usr/src/amd64.amd64/sys/SMP amd64 But from what you are asking, it seems you suggest my issue is kernel relat= ed and in no way a userspace problem. So I cannot do anything to mitigate the issue? BTW I said reset the interface fixed the issue, but in fact, I need to rebo= ot, I found no way to clear the multicast group memberships. Best regards, Diego Abelenda --Sig_/jeHJ7RfEfAXT+K14BOlLRzI Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEhLBEGh6nN5+aat9KomT4UAfkGfgFAl8umwoACgkQomT4UAfk Gfj8+A//b7ylRIAcxPq1g1l2QBwfpFUqYiv5g0VvuvWc/8/AiyeI7txP0vzobrL+ 2lF6I/1ZcWwABCVRg6WYew8RPeACR7TMi+McXeKqpwAQTsmHW1NTKqrr+vL+AdRA /FBB0V3VX39SXcf7eVsfGGz9gGJsD8eURyL2NyiLiBW+VwRRX2W1QkaF1o1pHSKb iwkjIzXUM+CfUGA5+36frnKo9BraDr9JZL/rvFLEG9qJfo/oFlsdQ+e37clES67f pbXblN0qhLswm58NwVMZhTR1Yf5Y/+lyljzTXL75F4rru14czCo9j3J7dRNE9zsl jEUgCRhkoN5N6Pb6kPVRBDFE2Ovk8PbHrY2/wPAvXVZOzE9EIte2jYf2UNMRvocR OwxQK7I/qc3qPvHjte8zPRBgAxD1Ofp+61Pe3unMbWDD66MQuXsIsbcJ9qHaA3Vk 5Whp2CSOKnL0DPTjKlODfJgFo3vkCUB3rTXwmLCkvt4WOeiqR6d3QOZWohiGDppO RldJu+iFM8UI0yiQVCiskY31lZtn6nXYWZfFj6wJTmeCYH/P4TtkQ+XbThErf6N5 F+54xS+RSp9dY/N3KrzSgYbquG2EIJMwfszgUeb1i5wfjWc7kkzRJ5EMTD4o6Zph D/wdrCEKXffDvyc/j7Au2FfgzEa/O6GcBOAq5FlMJxnSXQ+d6Zo= =AN42 -----END PGP SIGNATURE----- --Sig_/jeHJ7RfEfAXT+K14BOlLRzI--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20200808143106.423bd20f>