Здравствуйте. Прочел уже довольно много различных статей, в том числе и на этом форуме, но все никак не получается заставить работать igmpproxy. Все казалось бы довольно просто, ан нет. Обрисовываю ситуацию:
eth0 - провайдер, через него идет мультикаст
eth1 - провод в локалку
Источник мультикаста: 198.18.8.0/24
Пример группы: 225.77.32.153
iptables -L -nChain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:67
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:67
ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
ACCEPT all -- 0.0.0.0/0 224.0.0.0/4
ACCEPT all -- 224.0.0.0/4 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 224.0.0.0/4
ACCEPT all -- 224.0.0.0/4 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 224.0.0.0/4
Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 10.42.0.0/24 state RELATED,ESTABLISHED
ACCEPT all -- 10.42.0.0/24 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
ACCEPT all -- 0.0.0.0/0 224.0.0.0/4
ACCEPT all -- 224.0.0.0/4 0.0.0.0/0
ACCEPT udp -- 0.0.0.0/0 224.0.0.0/4
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ifconfigeth0 Link encap:Ethernet HWaddr 00:1d:92:03:a9:70
inet addr:178.140.160.163 Bcast:178.140.167.255 Mask:255.255.248.0
inet6 addr: 2a02:2168:821:4dd::1/128 Scope:Global
inet6 addr: fe80::21d:92ff:fe03:a970/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:566108 errors:0 dropped:0 overruns:0 frame:0
TX packets:498679 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:356666454 (356.6 MB) TX bytes:197726303 (197.7 MB)
eth1 Link encap:Ethernet HWaddr c4:e9:84:02:bf:b1
inet addr:10.42.0.1 Bcast:10.42.0.255 Mask:255.255.255.0
inet6 addr: fe80::c6e9:84ff:fe02:bfb1/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:370088 errors:0 dropped:0 overruns:0 frame:0
TX packets:1880304 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:51486023 (51.4 MB) TX bytes:2694654257 (2.6 GB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:4934 errors:0 dropped:0 overruns:0 frame:0
TX packets:4934 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:681436 (681.4 KB) TX bytes:681436 (681.4 KB)
cat /etc/igmpproxy/igmpproxy.confphyint eth0 upstream ratelimit 0 threshold 1
altnet 198.18.8.0/24
#altnet 225.77.32.153
#altnet 10.0.0.0/8
#altnet 192.168.0.0/24
# altnet 239.192.152.0/24
# altnet 0.0.0.0/0
#phyint lo disabled
phyint eth1 downstream ratelimit 0 threshold 1
phyint lo disabled
tcpdump -i eth0 igmpcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
23:01:44.538962 IP broadband-178-140-160-163.nationalcablenetworks.ru > 239.255.255.250: igmp v2 report 239.255.255.250
23:01:48.218878 IP 10.9.4.2 > all-systems.mcast.net: igmp query v2 [max resp time 90]
23:01:49.459023 IP broadband-178-140-160-163.nationalcablenetworks.ru > 224.0.0.251: igmp v2 report 224.0.0.251
23:01:52.442960 IP broadband-178-140-160-163.nationalcablenetworks.ru > 239.192.152.143: igmp v2 report 239.192.152.143
23:01:53.546960 IP broadband-178-140-160-163.nationalcablenetworks.ru > 239.255.255.250: igmp v2 report 239.255.255.250
23:01:58.215123 IP 10.9.4.2 > all-systems.mcast.net: igmp query v2 [max resp time 90]
23:02:02.618964 IP broadband-178-140-160-163.nationalcablenetworks.ru > 239.255.255.250: igmp v2 report 239.255.255.250
23:02:06.634964 IP broadband-178-140-160-163.nationalcablenetworks.ru > 224.0.0.251: igmp v2 report 224.0.0.251
23:02:06.762980 IP broadband-178-140-160-163.nationalcablenetworks.ru > 239.192.152.143: igmp v2 report 239.192.152.143
23:02:08.211879 IP 10.9.4.2 > all-systems.mcast.net: igmp query v2 [max resp time 90]
^C
10 packets captured
10 packets received by filter
0 packets dropped by kernel