Hi, thanks for pointing me to mrouted. I had to use it in tunnel mode, as it refused to use eth4 (because it's proxy ARP), but now multicast traffic is flowing between the DomU and clients connected to eth1 on Dom0.
Cheers, Jens Am 14.10.2009 um 01:39 schrieb Tom Eastep: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Jens Rehaag wrote: >> Hi, >> >> answering to my own message because I've found new facts: >> >> First of all, the UPnP packets didn't leave the MythTV DomU earlier; >> their checksums were corrupted as mentioned >> in http://www.shorewall.net/XenMyWay-Routed.html. Using the setting >> described there, the checksums are now correct. Sorry for that; I >> should >> have checked that earlier. >> >> But my problem still remains: The UPnP packages (sent to >> 239.255.255.250) never reach eth1. I can see them inside the DomU, >> and >> also on eth4, but never on eth1. > > Are you running a multicast router daemon on in Dom0 (mrouted, for > example)? You need that if you want to route multicast. > > >> Same thing the other way: When I send >> broadcasts from a UPnP client connected to eth1 to search for UPnP >> servers, I can see those packages on eth1, but not on eth4. > > And you never will. That is a key difference between a bridge and > proxy > arp; a bridge will pass broadcasts while a proxy arp router will not. >> >> Will linux-idg do the forwarding? Or is there some Shorewall rule I >> can use? > > Neither will work. > > - -Tom > - -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkrVD6sACgkQO/MAbZfjDLLc0gCeLtgCBqEf0+19Tu/5nke0vEEK > 2PYAoJwWeay47VQtng9EbhN1i/lYXiDE > =HkZf > -----END PGP SIGNATURE----- > > ------------------------------------------------------------------------------ > Come build with us! The BlackBerry(R) Developer Conference in SF, CA > is the only developer event you need to attend this year. Jumpstart > your > developing skills, take BlackBerry mobile applications to market and > stay > ahead of the curve. Join us from November 9 - 12, 2009. Register now! > http://p.sf.net/sfu/devconference > _______________________________________________ > Shorewall-users mailing list > Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------------------------------------------------------------ Come build with us! The BlackBerry(R) Developer Conference in SF, CA is the only developer event you need to attend this year. Jumpstart your developing skills, take BlackBerry mobile applications to market and stay ahead of the curve. Join us from November 9 - 12, 2009. Register now! http://p.sf.net/sfu/devconference _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users