Re: [PATCH] firewall: Allow traffic from multicast networks

[Michael Tremer <michael.tremer@ipfire.org>]

[-- Attachment #1: Type: text/plain, Size: 1025 bytes --]

Reviewed-by: Michael Tremer <michael.tremer(a)ipfire.org>

> On 25 Apr 2023, at 19:40, Stefan Schantl <stefan.schantl(a)ipfire.org> wrote:
> 
> The multicast network segment 224.0.0.0/4 is used for a lot of
> different services provided by the local ISP's. (IPTV etc.)
> 
> We have to allow traffic from this networks when using one of
> the BOGON blocklists in order to get those ISP services still
> accessable.
> 
> https://www.iana.org/assignments/multicast-addresses/multicast-addresses.xhtml
> 
> Fixes 13092.
> 
> Signed-off-by: Stefan Schantl <stefan.schantl(a)ipfire.org>
> ---
> config/firewall/rules.pl | 1 +
> 1 file changed, 1 insertion(+)
> 
> diff --git a/config/firewall/rules.pl b/config/firewall/rules.pl
> index 6c08feb86..7edb910e2 100644
> --- a/config/firewall/rules.pl
> +++ b/config/firewall/rules.pl
> @@ -55,6 +55,7 @@ my @PRIVATE_NETWORKS = (
> "172.16.0.0/12",
> "192.168.0.0/16",
> "100.64.0.0/10",
> + "224.0.0.0/4",
> );
> 
> # MARK masks
> -- 
> 2.30.2
>