Hello,
I'm not a network expert so please apologies for any mistakes or
misunderstandings.
I'm changing my home network and I would like to route minidlna broadcasts
from my openbsd server to my other internal network which is using an
openbsd/firewall/router.
As of now ... I didn't succeed no clients (wifi or cabled) beside the
opnebsd-internal-router (192.168.{1,2,3}.0/24) cannot see any minidlna
broadcast from my 192.168.103.25 openbsd dlna server.
I thought I could use mcast-proxy to solve the problem and installed it.
https://github.com/Esdenera/mcast-proxy
The dlna (openbsd server) is on the network 192.168.103.25 (192.168.103.0/24
which is the fritzbox network and connects to my internet provider)
All the dlna client are on the internal wifi or cabled networks:
192.168.{1,2,3}.0/24.
Thanks for any help!
Here is the my network layout (I hope it kept the formatting while posting):
fritzbox (internal network 192.168.103/24)
\
int_if(192.168.103.1)
/
switch(1) -----em0 192.168.103.25---openbsd-server (running minidlna)
\ \----other devices
\
em0 192.168.103.178
\
openbsd-internal-router (networks 192.168.1/24,192.168.2/24 wlan10,
192.168.3/24 wlan20)
/
em1 192.168.1.1
(wlan10 192.168.2.1 vlandev em1)
(wlan20 192.168.3.1 vlandev em1)
/
switch(2)
|
--other devices
Here is the changes I made on the openbsd-internal-router:
$ cat /etc/sysctl.conf
net.inet.ip.forwarding=1
net.inet.ip.mforwarding=1
$ cat /etc/rc.conf.local
dhcpd_flags="em1 vlan10 vlan20"
multicast=YES
pkg_scripts=mcastproxy
$ cat /etc/mcast-proxy.conf
interface em0 {
upstream
}
interface em1 {
source 192.168.103.0/24
downstream
}
interface wlan10 {
source 192.168.103.0/24
downstream
}
interface wlan20 {
source 192.168.103.0/24
downstream
}
$ doas cat /etc/pf.conf
table <trusted> { 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 }
int = "{ em0 em1 vlan10 vlan20 }"
set skip on lo
block quick on $int inet proto tcp from !<trusted> to $int port ssh
block return # block stateless traffic
pass allow-opts # required for igmp traffic
# By default, do not permit remote connections to X11
block return in on ! lo0 proto tcp to port 6000:6010
---
Didier