Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 6712 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewal rules for broadcast/multicast traffic

l0rdraiden

I have some broadcast traffic that I would like to allow

So I have created this rule

 

 

But this rule is not getting any traffic. WHere is the error?

EDIT: don't consider the last 2 entries of the log, TCP 1900.



This thread was automatically locked due to age.
  • 0

    XG (like other firewall products) are not allowing to forward Broadcast / multicast via Firewall rules.

    In fact Broadcast is not possible to forward anyway. 

    For Multicast, you will need PIM-SM Multicast. https://community.sophos.com/kb/en-us/123584

  • 0 in reply to LuCar Toni

    I'm a little bit noob here, I don't know if I'm undestanding you well.

    I have Plex, a streaming software that is doing this calls to discover new compatible devices in the network, and apparently the firewall is blocking this. I don't want to fordward that traffic to internet or to any other network.

    Does this clarification fits with you answer? if yes I will investigate more

     

    What it does when it call to 192.168.1.255?   255 can't be used.

     

    In any case my main goal besides allowing this calls is to remove all this noise from the logs, is there any other way?

  • 0 in reply to l0rdraiden

    Many products do not allow to relay / forward any Broadcast traffic.

    So if you have a product, which "only" uses broadcast to find a device / peer, it is kinda a bad design, to be honest. 

    Found couple of such products in the past. 

    The "only" workaround for this setup is to work with ethernet bridges. 

    Many Streaming or Audio devices works with Broadcast only. It is a quite easy technology to develop but bad design. You should always have a fallback (IP discovery, Multicast, Forward Host).

    You will find many of such requests in case of WOL (Wake on LAN). Because they use only Broadcast, which is also not quite "good".