Smoothwall logs

[Rasjid Wilcox]

On Tue, 22 Jan 2002 10:37, Bob Edwards wrote:
> matthew at topic.com.au wrote:
> > -------------------
> >
> > > On Sat, 19 Jan 2002 09:04, you wrote:
> > > > On Saturday, January 19, 2002, at 12:08 , Rasjid Wilcox wrote:
> > > > > I'm getting a whole lot of IGMP packets logged trying to go from
> > > > > my smoothwall box to 224.0.0.1.
> >
> > I think that's one of the reserved multicast network addresses, and
> > IGMP is Cisco's routing protocol.  It's probably not important for
> > your internal network so silently drop it.
> >
> > --
> > Matt
>
> Actually, IGMP (Internet Group Management Protocol) is not Cisco's
> routing protocol - it is the standard protocol for managing multicasting
> in IP and is defined in RFC 1112.
>
> IGMP uses the first multicast address, 224.0.0.1, to manage all other
> multicast addresses.
>
> As to whether you need it or not I can't say without knowing what you
> are doing. The IGMP messages are really no more harmful that ARP
> requests etc. but you may be paying for them on your link.
>
> Cheers,
>
> Bob Edwards.

Thanks for all the responses.  My guess is that these packets are being 
generated by the TransACT set-top box.  I have been DENYing them with no 
noticable ill effects, but equally based on the above there would be no 
problems with ACCEPTing them either.

If I get enthusiastic I may try and extract what is really going on from 
TransACT, but unless a problem arises then it is problaby not worth the 
effort.

Thanks to all,

Rasjid.