igmpproxy: drop SSDP packets

[openwrt/staging/dedeckeh.git] / package / network / services / igmpproxy / files / igmpproxy.init

diff --git a/package/network/services/igmpproxy/files/igmpproxy.init b/package/network/services/igmpproxy/files/igmpproxy.init
index 37fe62ad1b011318d110f5933cb13392b1976156..c4af43068145de4121e3ae98184e5c191ee00b3b 100644 (file)
--- a/package/network/services/igmpproxy/files/igmpproxy.init
+++ b/package/network/services/igmpproxy/files/igmpproxy.init
@@ -68,6 +68,18 @@ igmp_add_firewall_routing() {
 
        [[ "$direction" = "downstream" && ! -z "$zone" ]] || return 0
 
+# First drop SSDP packets then accept all other multicast
+
+       json_add_object ""
+       json_add_string type rule
+       json_add_string src "$upstream"
+       json_add_string dest "$zone"
+       json_add_string family ipv4
+       json_add_string proto udp
+       json_add_string dest_ip "239.255.255.250"
+       json_add_string target DROP
+       json_close_object
+
        json_add_object ""
        json_add_string type rule
        json_add_string src "$upstream"