Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: IGMP outbound filtering not working

30 Jun 2011   #1
dbradley14620

Windows 2008 R2 64-bit
 
 
IGMP outbound filtering not working

I've got a Windows 2008 R2 server with Firewall with Advanced Security configured with an outbound rule configured, in all policies, to block all IGMP traffic. I've deleted all but this one rule from the outbound list. When I run software, on this host, that joins a multicast group, I still see the IGMP membership packet leaking out onto the network. It's just plain not working. If I go back to the rule and change the protocol to something else, like ICMP, it works like a charm. No leakage of said protocol.

So what's special about IGMP? Help!!!

Thanks.

Regards,
Dave


My System SpecsSystem Spec
.
02 Jul 2011   #2
dogbert2

Windows 7 Ultimate x64
 
 

If you run software which by definition joins a multicast group, it will have to use IGMP in order to function properly (otherwise, the software simply will not work).
My System SpecsSystem Spec
02 Jul 2011   #3
dbradley14620

Windows 2008 R2 64-bit
 
 

Correct. We have customers that lease these systems from us. Sort of a "cloud", but not quite. They don't have administative rights. We have multicast services that the customer can pay for and subscribe to. However, if they haven't paid, then their IGMP joins should be blocked by rules on the host. Ideally we would be able to filter IGMP membership reports upstream at a L2 switch, but, because of our unique (and currently deficient) design, we are forced to do the filtering at the host level. Hopefully this is short term. In the meantime, I have to find a Windows solution. iptables does the job for our Linux offerings and works without issue. Our Windows offering is Windows 2008 R2, which comes with this firewall. I figured it would just work, and it does, except for IGMP outbound traffic, for some reason.

Thanks for your response.

Regards,
Dave
My System SpecsSystem Spec
.

02 Jul 2011   #4
dogbert2

Windows 7 Ultimate x64
 
 

IGMP uses the Class D multicast IP address of 224.0.0.22, blocking outbound traffic for this IP should effectively disable traffic at the host level. More effective filtering could be done at the switch or outbound router.
My System SpecsSystem Spec
Reply

 IGMP outbound filtering not working




Thread Tools




Similar help and support threads
Thread Forum
Outbound Connections
When using the current version of Firefox browser, my Comodo Firewall shows 60 to 80 outbound connections and 0 inbound connections. Checking the log shows a variety of IP destinations for these outbound connections. I run a number of Malware programs and use Comodo anti-virus and all seem to show...
System Security
svchost.exe - outbound connection to different ips
Hi everyone. A few days ago I had to change the motherboard of my pc and I reinstalled windows after that. Since then whenever I connect to the internet svchost.exe always forms an outbound connection only for an instant to a different ip everytime - the ip address always starts with 79.140 like...
Network & Sharing
Can only get inbound RDC after first making outbound RDC
I am having problems using RDC to connect to an HP laptop running Windows 7 Ultimate, 32 bit edition. The HP laptop is connected wirelessly to my home router. The second computer is an iMac (running same OS as HP) cabled to a switch, which is cabled to my home router router. A third computer, a...
Network & Sharing
turned on ActiveX Filtering, but still get things working??
I'm having a very hard time figuring this out and it doesn't appear to be happening to a lot of people. Cause I can't seem to find a solution on Google. Essentially I turn on ActiveX Filtering, but I still get things like flash and stuff working. Anyone know the issue?
Browsers & Mail
Blocking outbound traffic (data out)
My ISP charges for outbound traffic, even though they dont pay for it. According to them it is to stop people sharing files and stuff illegally. In my case, it's accounting for 10% of my allowance, and I've tried everything I can to stop it. Somehow, people are getting into my network and...
System Security
No multicast (IGMP reports) on VPN connection
Got an application that listens to (a number of) UDP multicast data streams. Application works correct on XP and Vista. On Windows 7 the application also works correct if the PC is directly connected to our (private multicast) network, only not if a VPN connection is used to the network. Th VPN...
Network & Sharing


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:19.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App