[KAA]

В ситуации, когда доступ в сеть идет через linux-сервер, на котором делается nat для пользователей за ним и есть необходимость давать этим пользователям IPTV, которое работает при подключении напрямую, может помочь программа igmpproxy
ее необходимо скачать, собрать и запустить, при этом подготовив конфиг

CODE

########################################################
#
# Example configuration file for the IgmpProxy
# --------------------------------------------
#
# The configuration file must define one upstream
# interface, and one or more downstream interfaces.
#
# If multicast traffic originates outside the
# upstream subnet, the "altnet" option can be
# used in order to define legal multicast sources.
# (Se example...)
#
# The "quickleave" should be used to avoid saturation
# of the upstream link. The option should only
# be used if it's absolutely nessecary to
# accurately imitate just one Client.
#
########################################################

##------------------------------------------------------
## Enable Quickleave mode (Sends Leave instantly)
##------------------------------------------------------
quickleave


##------------------------------------------------------
## Configuration for eth0 (Upstream Interface)
##------------------------------------------------------
phyint eth0 upstream ratelimit 0 threshold 1
altnet 77.246.100.0/24
# altnet 77.246.98.0/24
# altnet 77.246.96.0/24
# altnet 10.0.0.0/8
# altnet 192.168.0.0/24


##------------------------------------------------------
## Configuration for eth1 (Downstream Interface)
##------------------------------------------------------
phyint eth1 downstream ratelimit 0 threshold 1


##------------------------------------------------------
## Configuration for eth2 (Disabled Interface)
##------------------------------------------------------
#phyint eth1 disabled

eth0 - интерфейс, который смотрит в нашу сеть(WAN)
eth1 - интерфейс, который смотрит во внутреннюю сеть(LAN)

в iptables должен быть разрешен igmp, а в sysctl rp_filter=0
net.ipv4.conf.eth0.rp_filter=0
net.ipv4.conf.eth1.rp_filter=0

также, в зависимости от настроек firewall, может понадобится разрешить трафик C 77.246.100.0/24 НА адреса 224.0.0.0/24 и 224.0.42.0/24, это пока единственные сети, которые используются для вещания IPTV.

это все, что касается iptv

[Алексей (AlekShe...]

Всё грабли найдены... в виде другой службы... запуск прошел успешно, но TV нет...

CODE

igmpproxy -v -d /etc/igmpproxy.conf
adding VIF, Ix 0 Fl 0x0 IP 0x04a6de59 eth1, Threshold: 1, Ratelimit: 0
adding VIF, Ix 1 Fl 0x0 IP 0x600bdd0a eth2, Threshold: 1, Ratelimit: 0
adding VIF, Ix 2 Fl 0x0 IP 0x0101a8c0 br0, Threshold: 1, Ratelimit: 0
adding VIF, Ix 3 Fl 0x0 IP 0x0101a8c0 ppp0, Threshold: 1, Ratelimit: 0
adding VIF, Ix 4 Fl 0x0 IP 0x0101a8c0 ppp1, Threshold: 1, Ratelimit: 0
adding VIF, Ix 5 Fl 0x0 IP 0x0164a8c0 tap5, Threshold: 1, Ratelimit: 0
joinMcGroup: 224.0.0.2 on br0
joinMcGroup: 224.0.0.2 on ppp0
MRT_ADD_MEMBERSHIP failed; Errno(98): Address already in use
joinMcGroup: 224.0.0.2 on ppp1
MRT_ADD_MEMBERSHIP failed; Errno(98): Address already in use
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV V2 member report from 192.168.1.1 to 224.0.0.2
The IGMP message was from myself. Ignoring.
RECV V2 member report from 192.168.1.1 to 224.0.0.251
The IGMP message was from myself. Ignoring.
Inserted route table entry for 236.191.66.191 on VIF #-1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV V2 member report from 192.168.1.1 to 224.0.0.2
The IGMP message was from myself. Ignoring.
RECV V2 member report from 192.168.1.1 to 224.0.0.251
The IGMP message was from myself. Ignoring.
Inserted route table entry for 238.24.200.222 on VIF #-1
Inserted route table entry for 227.226.43.193 on VIF #-1
Inserted route table entry for 226.43.193.235 on VIF #-1
Inserted route table entry for 235.215.105.76 on VIF #-1
RECV Membership query from 89.222.166.1 to 224.0.0.1
RECV Membership query from 89.222.166.1 to 224.0.0.1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV Membership query from 192.168.1.1 to 224.0.0.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV V2 member report from 192.168.1.1 to 224.0.0.251
The IGMP message was from myself. Ignoring.
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV V2 member report from 89.222.166.4 to 224.0.0.251
The IGMP message was from myself. Ignoring.
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV V2 member report from 192.168.1.1 to 224.0.0.2
The IGMP message was from myself. Ignoring.
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.2.127.254
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
RECV Leave message from 192.168.1.13 to 224.0.0.2
RECV Membership query from 192.168.1.1 to 224.0.42.1
Inserted route table entry for 224.0.1.60 on VIF #-1
Inserted route table entry for 236.30.215.181 on VIF #-1
Removing MFC: 89.222.166.61 -> 236.191.66.191, InpVIf: 0
MRT_DEL_MFC; Errno(2): No such file or directory

CODE

# Generated by iptables-save v1.4.4 on Sun Jan 24 13:20:57 2010
*nat
:PREROUTING ACCEPT [3336:268047]
:POSTROUTING ACCEPT [513:46073]
:OUTPUT ACCEPT [513:46073]
:VSERVER - [0:0]
-A POSTROUTING ! -s 89.222.166.4/32 -o eth1 -j SNAT --to-source 89.222.166.4
COMMIT
# Completed on Sun Jan 24 13:20:57 2010
# Generated by iptables-save v1.4.4 on Sun Jan 24 13:20:57 2010
*mangle
:PREROUTING ACCEPT [26773:2489082]
:INPUT ACCEPT [22557:1626245]
:FORWARD ACCEPT [3921:980624]
:OUTPUT ACCEPT [31378:37704662]
:POSTROUTING ACCEPT [35352:38687144]
COMMIT
# Completed on Sun Jan 24 13:20:57 2010
# Generated by iptables-save v1.4.4 on Sun Jan 24 13:20:57 2010
*filter
:INPUT DROP [1691:178544]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [31377:37704504]
-A INPUT -m state --state INVALID -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -m state --state NEW -j ACCEPT
-A INPUT -i br0 -m state --state NEW -j ACCEPT
-A INPUT -d 224.0.0.0/4 -p igmp -j ACCEPT
-A INPUT -d 224.0.0.0/4 -p udp -m udp ! --dport 1900 -j ACCEPT
-A FORWARD -m state --state INVALID -j DROP
-A FORWARD -d 224.0.0.0/4 -p udp -j ACCEPT
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i lo -m state --state NEW -j ACCEPT
-A FORWARD -i br0 -m state --state NEW -j ACCEPT
-A FORWARD -m conntrack --ctstate DNAT -j ACCEPT
-A OUTPUT -m state --state INVALID -j DROP
COMMIT
# Completed on Sun Jan 24 13:20:57 2010