aboutsummaryrefslogtreecommitdiffstats
path: root/package/network/services/igmpproxy/files/igmpproxy.init
diff options
context:
space:
mode:
Diffstat (limited to 'package/network/services/igmpproxy/files/igmpproxy.init')
-rw-r--r--package/network/services/igmpproxy/files/igmpproxy.init12
1 files changed, 12 insertions, 0 deletions
diff --git a/package/network/services/igmpproxy/files/igmpproxy.init b/package/network/services/igmpproxy/files/igmpproxy.init
index 37fe62ad1b..c4af430681 100644
--- a/package/network/services/igmpproxy/files/igmpproxy.init
+++ b/package/network/services/igmpproxy/files/igmpproxy.init
@@ -68,6 +68,18 @@ igmp_add_firewall_routing() {
[[ "$direction" = "downstream" && ! -z "$zone" ]] || return 0
+# First drop SSDP packets then accept all other multicast
+
+ json_add_object ""
+ json_add_string type rule
+ json_add_string src "$upstream"
+ json_add_string dest "$zone"
+ json_add_string family ipv4
+ json_add_string proto udp
+ json_add_string dest_ip "239.255.255.250"
+ json_add_string target DROP
+ json_close_object
+
json_add_object ""
json_add_string type rule
json_add_string src "$upstream"