How To Blocking Multicast On WIFI

[amorak]

HHi guys,

I have IPTV (Telus is the provider) and the multicast is gridning my wifi to a halt.

What is the best way to deal with this on the Merlin-version firmware? DD-WRT has a nice how to on how to fix it with their software, but I'd prefer to stay with Merlin ( http://www.dd-wrt.ca/wiki/index.php/Setting_up_IPTV_without_impact_to_LAN_and_Wireless_traffic )

Any thoughts are appreciated. using the RT-N66U as a wireless AP.

 

[eclipsed]

HHi guys,

I have IPTV (Telus is the provider) and the multicast is gridning my wifi to a halt.

What is the best way to deal with this on the Merlin-version firmware? DD-WRT has a nice how to on how to fix it with their software, but I'd prefer to stay with Merlin ( http://www.dd-wrt.ca/wiki/index.php/Setting_up_IPTV_without_impact_to_LAN_and_Wireless_traffic )

Any thoughts are appreciated. using the RT-N66U as a wireless AP.

At the tools screen under the Melinwrt, the Run Cmd, input the following lines;
ebtables -A FORWARD -o "eth1" --pkttype-type multicast -j DROP
ebtables -A OUTPUT -o "eth1" --pkttype-type multicast -j DROP

You can confirm the settings with this command:
ebtables -L

If you did it right, it the ebtables -L should return the following:

Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 1, policy: ACCEPT -o eth1 --pkttype-type multicast -j DROP

Bridge chain: OUTPUT, entries: 1, policy: ACCEPT -o eth1 --pkttype-type multicast -j DROP

This will block multicast over wifi. I have been using my RT-N16 as the wifi and IPTV router for my Telus IPTV set up. I am NOT using any Telus hardware, except for the modem. I have set up a firewall-start script, but it has not worked. So I am forced to type the commands every time I reboot my router. Which is about every 2 weeks or when Merlin gets a new FW compiled for the RT-N16.

 

[amorak]

Thanks, really appreciate another Telus IPTV guy replying!

I am having trouble - I was trying to run the commands 1 line at a time, but it's givving me the following error:

The kernel doesn't support a certain ebtables extension, consider recompiling your kernel or insmod the extension.


When I run either of the lines below.

Any thougths?

At the tools screen under the Melinwrt, the Run Cmd, input the following lines;
ebtables -A FORWARD -o "eth1" --pkttype-type multicast -j DROP
ebtables -A OUTPUT -o "eth1" --pkttype-type multicast -j DROP

You can confirm the settings with this command:
ebtables -L

If you did it right, it the ebtables -L should return the following:

Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 1, policy: ACCEPT -o eth1 --pkttype-type multicast -j DROP

Bridge chain: OUTPUT, entries: 1, policy: ACCEPT -o eth1 --pkttype-type multicast -j DROP

This will block multicast over wifi. I have been using my RT-N16 as the wifi and IPTV router for my Telus IPTV set up. I am NOT using any Telus hardware, except for the modem. I have set up a firewall-start script, but it has not worked. So I am forced to type the commands every time I reboot my router. Which is about every 2 weeks or when Merlin gets a new FW compiled for the RT-N16.

 

[RMerlin]

Thanks, really appreciate another Telus IPTV guy replying!

I am having trouble - I was trying to run the commands 1 line at a time, but it's givving me the following error:

The kernel doesn't support a certain ebtables extension, consider recompiling your kernel or insmod the extension.


When I run either of the lines below.

Any thougths?

ebtables are broken in 264.22 (due to a kernel change Asus did in build 264). Either revert back to 260.21, or wait for the next release.

 

[amorak]

ebtables are broken in 264.22 (due to a kernel change Asus did in build 264). Either revert back to 260.21, or wait for the next release.

I believe this is still broken in 3.0.0.4.266.23b - I imagine we'll have to wait for the next release?

 

[RMerlin]

I believe this is still broken in 3.0.0.4.266.23b - I imagine we'll have to wait for the next release?

Odd. It was working fine for me after I reverted the kernel patch Asus did to ebtables, now I see it stopped working again. I'll have to figure out what is happening, syslog doesn't give much information. The issue might be random.

 

[amorak]

It looks like this is working on 3.0.0.4.270.24 final... Any issue that I accidentally did one of the tables twice?

Bridge table: filter

Bridge chain: INPUT, entries: 0, policy: ACCEPT

Bridge chain: FORWARD, entries: 2, policy: ACCEPT
-o eth1 --pkttype-type multicast -j DROP
-o eth1 --pkttype-type multicast -j DROP

Bridge chain: OUTPUT, entries: 1, policy: ACCEPT
-o eth1 --pkttype-type multicast -j DROP