Networking Forums

Networking Forums > Computer Networking > Linux Networking > Help in dropping inbound multicast and unicast UDP traffic.

Reply
Thread Tools Display Modes

Help in dropping inbound multicast and unicast UDP traffic.

 
 
William Hargrove
Guest
Posts: n/a

 
      04-22-2005, 01:02 PM
I have an application running on multiple nodes that sends udp traffic
to a multicast address (224.120.12.40) and port (23285). All nodes
subscribe to this multicast address and participate in the multicast
address.

I'm trying to make one node drop it's incoming multicast traffic. Say
the IP address of this node is 10.20.10.1. So I've constructed the
rules below to try and help.

There are two ways I can check this works. i) look at iptables -L -v
and see the trigger rate. ii) check that my application is indeed not
receiving incoming udp traffic on port 23285 from 224.120.12.40

# iptables -I INPUT -p udp --destination-port 23285 -j DROP
# iptables -L -v
Chain INPUT (policy ACCEPT 369K packets, 197M bytes)
pkts bytes target prot opt in out source
destination
136 29341 DROP udp -- any any anywhere
anywhere udp dpt:23285

This appears to drop incoming udp packets to port 23285, but the
application is still the udp traffic.

# iptables -I INPUT -p udp -d 224.120.12.40 -j DROP --destination-port
23285
Chain INPUT (policy ACCEPT 3687K packets, 1103M bytes)
pkts bytes target prot opt in out source
destination
366 78205 DROP udp -- any any anywhere
224.120.12.40 udp dpt:23285

This also appears to drop incoming udp packets to port 23285 with a
destination of 224.120.12.40, but the application is still seems to be
seeing the udp traffic.

And trying to refine the above rule:

# iptables -I INPUT -p udp -d 224.120.12.40 -m pkttype --pkt-type
multicast -j DROP --destination-port 23285 -i bond0

Will drop traffic but the application still appears to see the
traffic.

Am I doing something fundamentally wrong here. I'm sure these rules
should work in the way I've written them.

Thanks in advance to anyone who can comment on this.

Will.
 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
SNMP & Get-Request (unicast vs multicast) agent Windows Networking 3 06-20-2008 08:11 AM
DHCP and Multicast/Unicast Oliver Emslers Linux Networking 0 04-27-2008 11:55 AM
Unicast 2 Multicast etgarnet Linux Networking 1 12-13-2006 09:36 AM
No Inbound Traffic Matt Windows Networking 0 06-17-2006 07:12 PM
How to listen for inbound traffic with Netcat? darin dimitrov Linux Networking 2 08-06-2004 09:12 PM



1 2 3 4 5 6 7 8 9 10 11