Hi all, defconf ip firewall filter rule drop multicast flow, how to fix it? Which Rule need to add before?
# mar/17/2018 11:40:27 by RouterOS 6.41.3
/ip firewall filter
add action=accept chain=input connection-state=established,related,untracked
add action=drop chain=input connection-state=invalid
add action=accept chain=input protocol=icmp
...
# Next RULE need too to accept input IGMP packets
add chain=input comment=iptv in-interface-list=wan protocol=igmp
add action=drop chain=input in-interface-list=wan
...
...
# Next Rule Dropp Multicast flow )=
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new in-interface-list=wan
Multicast configured like:
# mar/17/2018 11:43:39 by RouterOS 6.41.3
/routing igmp-proxy interface
add alternative-subnets=0.0.0.0/0 interface=bridgeWan upstream=yes
add interface=ether10
and IGMP Snooping:
# mar/17/2018 11:44:03 by RouterOS 6.41.3
/interface bridge
add igmp-snooping=yes name=br0
...
/interface bridge port
add bridge=br0 interface=br0ports
...
add bridge=bridgeWan interface=brWanPorts
PS: Multicast working with disabled=yes of this rule:
# mar/17/2018 11:45:46 by RouterOS 6.41.3
/ip firewall filter
...
add action=drop chain=forward connection-nat-state=!dstnat connection-state=new disabled=yes in-interface-list=wan