Re: PF still blocks IGMP multicast control packets

2023-02-24 Thread Luca Di Gregorio
Hi, regarding MLD, RFC3810. I see that is similar to IGMP in these aspects: Section 5. Message Formats: "All MLDv2 messages described in this document MUST be sent with a link-local IPv6 Source Address, an IPv6 Hop Limit of 1, and an IPv6 Router Alert option [RFC2711] in a Hop-by-Hop Opt

Re: PF still blocks IGMP multicast control packets

2023-02-24 Thread Alexandr Nedvedicky
Hello, On Fri, Feb 24, 2023 at 08:57:51PM +0100, Alexander Bluhm wrote: > > > Regarding MLD, I can't say anything because I've never tested multicast > > routing with IP6. > > We should figure out what RFC says about IPv6 MLD. If we use Luca's > smarter logic for IPv4, we should also fix IPv6

Re: PF still blocks IGMP multicast control packets

2023-02-24 Thread Alexander Bluhm
On Fri, Feb 24, 2023 at 08:42:29AM +0100, Luca Di Gregorio wrote: > I would implement this logic: > > If the IP Destination Address is 224.0.0.0/4, then the TTL should be 1. > If the IP Destination Address is not 224.0.0.0/4, then no restrictions on > TTL. > > In your code, I would do this modifi

Re: PF still blocks IGMP multicast control packets

2023-02-23 Thread Luca Di Gregorio
Hi Alexandr, RFC1112 is updated by RFC2236 RFC2236 is updated by RFC3376 In RFC3376, sections 4.1.12 and 4.2.14: "In addition, a system MUST accept and process ... of Query/Report whose IP Destination Address field contains *any* of the addresses (unicast or multicast) assigned to the interface o

Re: PF still blocks IGMP multicast control packets

2023-02-23 Thread Alexandr Nedvedicky
Hello Luca, On Thu, Feb 23, 2023 at 09:22:07AM +0100, Luca Di Gregorio wrote: > Synopsis: PF still blocks IGMP multicast control packets > Category: system > Environment: > System : OpenBSD 7.2 > Details : OpenBSD 7.2 (GENERIC) #6: Sat Jan 21 01:01:28 MST 2023 >

Re: PF still blocks IGMP multicast control packets

2023-02-23 Thread Luca Di Gregorio
Viewing the thread at https://marc.info/?l=openbsd-cvs&m=165158473312045&w=2 I think that the problem is with TTL and Destination Address. "MLD/IGMP messages with ttl other than 1 will be discarded" "IGMP messages with destination address other than multicast class will be discarded. Prune message

Re: PF still blocks IGMP multicast control packets

2023-02-23 Thread Luca Di Gregorio
Thanks Brian, https://www.openbsd.org/72.html says: "pf(4) automatically allows IGMP and ICMP6 MLD packets with the router alert option. Special allow-opts rules are no longer needed for multicast discovery." This is true for some igmp dvmrp Probe, igmp dvmrp Report, igmp join/leave, igmp query.

Re: PF still blocks IGMP multicast control packets

2023-02-23 Thread Brian Conway
On Thu, Feb 23, 2023, at 2:22 AM, Luca Di Gregorio wrote: > Synopsis: PF still blocks IGMP multicast control packets > Category: system > Environment: > System : OpenBSD 7.2 > Details : OpenBSD 7.2 (GENERIC) #6: Sat Jan 21 01:01:28 MST 2023 >