Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: IGMP outbound filtering not working


30 Jun 2011   #1

Windows 2008 R2 64-bit
 
 
IGMP outbound filtering not working

I've got a Windows 2008 R2 server with Firewall with Advanced Security configured with an outbound rule configured, in all policies, to block all IGMP traffic. I've deleted all but this one rule from the outbound list. When I run software, on this host, that joins a multicast group, I still see the IGMP membership packet leaking out onto the network. It's just plain not working. If I go back to the rule and change the protocol to something else, like ICMP, it works like a charm. No leakage of said protocol.

So what's special about IGMP? Help!!!

Thanks.

Regards,
Dave

My System SpecsSystem Spec
.

02 Jul 2011   #2

Windows 7 Ultimate x64
 
 

If you run software which by definition joins a multicast group, it will have to use IGMP in order to function properly (otherwise, the software simply will not work).
My System SpecsSystem Spec
02 Jul 2011   #3

Windows 2008 R2 64-bit
 
 

Correct. We have customers that lease these systems from us. Sort of a "cloud", but not quite. They don't have administative rights. We have multicast services that the customer can pay for and subscribe to. However, if they haven't paid, then their IGMP joins should be blocked by rules on the host. Ideally we would be able to filter IGMP membership reports upstream at a L2 switch, but, because of our unique (and currently deficient) design, we are forced to do the filtering at the host level. Hopefully this is short term. In the meantime, I have to find a Windows solution. iptables does the job for our Linux offerings and works without issue. Our Windows offering is Windows 2008 R2, which comes with this firewall. I figured it would just work, and it does, except for IGMP outbound traffic, for some reason.

Thanks for your response.

Regards,
Dave
My System SpecsSystem Spec
.


02 Jul 2011   #4

Windows 7 Ultimate x64
 
 

IGMP uses the Class D multicast IP address of 224.0.0.22, blocking outbound traffic for this IP should effectively disable traffic at the host level. More effective filtering could be done at the switch or outbound router.
My System SpecsSystem Spec
Reply

 IGMP outbound filtering not working




Thread Tools



Similar help and support threads for2: IGMP outbound filtering not working
Thread Forum
svchost.exe - outbound connection to different ips Network & Sharing
Can only get inbound RDC after first making outbound RDC Network & Sharing
turned on ActiveX Filtering, but still get things working?? Browsers & Mail
Blocking outbound traffic (data out) System Security
Windows outbound firewall implementation System Security
No multicast (IGMP reports) on VPN connection Network & Sharing
Intense outbound static problem Sound & Audio

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 06:31 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33