Re: [pfSense Support] IGMPproxy and Router Alert option

2009-09-01 Thread Scott Ullrich
On Tue, Sep 1, 2009 at 1:05 AM, Evgeny Yurchenkoevg.yu...@rogers.com wrote:
 This is again about igmpproxy.
 As I mentioned earlier to be RFC compliant (RFC 2236 IGMP V2 and 3376 IGMP
 V3) we must send IGMP packets with Router Alert in IP header (RFC 2113).
 It is very easy to code but a problem with pf arises. To be able to send
 these packets we have to add allow-opts in pass out quick on 'Upstream
 Interface'.
 I tried to modify \let out anything from firewall host itself\ rule in
 /etc/inc/filter.inc and it worked.
 Please answer these questions:
 1) I can't see a way to insert allow-opts only for upstream interface at
 the igmpproxy package configuration web-interface. Is there a way?

Not currently.

 2) Is it wise to add this functionality via another option in
 System-Advanced options (or where)?

Yeah, that might be the best place for it.   We need to do it for 2.0
first and take a look at if this is something that can make it into
1.2.3 or not.

 3) Do we need at all this functionality (Router Alert in IP header)?

I have no idea.   Only IGMP users can make that call.

Scott

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] IGMPproxy and Router Alert option

2009-09-01 Thread Scott Ullrich
On Tue, Sep 1, 2009 at 12:13 PM, Evgeny Yurchenkoevg.yu...@rogers.com wrote:
 If I were to work on it should I install
 http://snapshots.pfsense.org/FreeBSD_RELENG_7_2/pfSense_HEAD/livecd_installer/pfSense-Developers-2.0-ALPHA-ALPHA-20090831-1029.iso.gz
 ? As I understand changes would be done in pfSense, pfSense packages and
 pfSense tools.

Yep, you got it.

Scott

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] IGMPproxy and Router Alert option

2009-08-31 Thread Evgeny Yurchenko

This is again about igmpproxy.
As I mentioned earlier to be RFC compliant (RFC 2236 IGMP V2 and 3376 
IGMP V3) we must send IGMP packets with Router Alert in IP header (RFC 
2113).
It is very easy to code but a problem with pf arises. To be able to send 
these packets we have to add allow-opts in pass out quick on 'Upstream 
Interface'.
I tried to modify \let out anything from firewall host itself\ rule in 
/etc/inc/filter.inc and it worked.

Please answer these questions:
1) I can't see a way to insert allow-opts only for upstream interface 
at the igmpproxy package configuration web-interface. Is there a way?
2) Is it wise to add this functionality via another option in 
System-Advanced options (or where)?

3) Do we need at all this functionality (Router Alert in IP header)?

Thanks,
Eugene

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org