After the Openwrt 19.07.2 upgrade it is currently working once again but I don't dare to let my NBG6617 to perform a reboot. I need to invoke igmpproxy /etc/igmpproxy.conf manually. Tried to gather as much information as possible. Once correctly configured with the right template and uci variables set the igmpproxy should start through /etc/init.d/igmpproxy. I think there is a problem with the detection of the right pppoe-wan interface eth0.7, wanzone+lanzone and automagic config of the firewall.
Once this works I need to configure a tftp rule for the MediaReceiver MR401 software updates.
New MagentaTV subscribers that use the MagentaTV box instead of the MR401 also need WPS via 5.0GHz wifi.
Output of uci show |grep igmp:
firewall.@rule[2].proto='igmp'
igmpproxy.@igmpproxy[0]=igmpproxy
igmpproxy.@igmpproxy[0].quickleave='1'
igmpproxy.@igmpproxy[0].verbose='3'
igmpproxy.@phyint[0]=phyint
igmpproxy.@phyint[0].network='wan'
igmpproxy.@phyint[0].zone='wan'
igmpproxy.@phyint[0].direction='upstream'
igmpproxy.@phyint[0].altnet='87.141.128.0/17'
igmpproxy.@phyint[1]=phyint
igmpproxy.@phyint[1].network='lan'
igmpproxy.@phyint[1].zone='lan'
igmpproxy.@phyint[1].direction='downstream'
igmpproxy.@phyint[1].altnet='192.168.2.0/24'
network.lan.igmp_snooping='1'
uci show |grep firewall
firewall.@defaults[0]=defaults firewall.@defaults[0].syn_flood='1' firewall.@defaults[0].input='ACCEPT' firewall.@defaults[0].output='ACCEPT' firewall.@defaults[0].forward='REJECT' firewall.@zone[0]=zone firewall.@zone[0].name='lan' firewall.@zone[0].network='lan' firewall.@zone[0].input='ACCEPT' firewall.@zone[0].output='ACCEPT' firewall.@zone[0].forward='ACCEPT' firewall.@zone[1]=zone firewall.@zone[1].name='wan' firewall.@zone[1].network='wan' 'wan6' firewall.@zone[1].input='REJECT' firewall.@zone[1].output='ACCEPT' firewall.@zone[1].forward='REJECT' firewall.@zone[1].masq='1' firewall.@zone[1].mtu_fix='1' firewall.@forwarding[0]=forwarding firewall.@forwarding[0].src='lan' firewall.@forwarding[0].dest='wan' firewall.@rule[0]=rule firewall.@rule[0].name='Allow-DHCP-Renew' firewall.@rule[0].src='wan' firewall.@rule[0].proto='udp' firewall.@rule[0].dest_port='68' firewall.@rule[0].target='ACCEPT' firewall.@rule[0].family='ipv4' firewall.@rule[1]=rule firewall.@rule[1].name='Allow-Ping' firewall.@rule[1].src='wan' firewall.@rule[1].proto='icmp' firewall.@rule[1].icmp_type='echo-request' firewall.@rule[1].family='ipv4' firewall.@rule[1].target='ACCEPT' firewall.@rule[2]=rule firewall.@rule[2].name='Allow-IGMP' firewall.@rule[2].src='wan' firewall.@rule[2].proto='igmp' firewall.@rule[2].family='ipv4' firewall.@rule[2].target='ACCEPT' firewall.@rule[3]=rule firewall.@rule[3].name='Allow-DHCPv6' firewall.@rule[3].src='wan' firewall.@rule[3].proto='udp' firewall.@rule[3].src_ip='fc00::/6' firewall.@rule[3].dest_ip='fc00::/6' firewall.@rule[3].dest_port='546' firewall.@rule[3].family='ipv6' firewall.@rule[3].target='ACCEPT' firewall.@rule[4]=rule firewall.@rule[4].name='Allow-MLD' firewall.@rule[4].src='wan' firewall.@rule[4].proto='icmp' firewall.@rule[4].src_ip='fe80::/10' firewall.@rule[4].icmp_type='130/0' '131/0' '132/0' '143/0' firewall.@rule[4].family='ipv6' firewall.@rule[4].target='ACCEPT' firewall.@rule[5]=rule firewall.@rule[5].name='Allow-ICMPv6-Input' firewall.@rule[5].src='wan' firewall.@rule[5].proto='icmp' firewall.@rule[5].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' 'router-solicitation' 'neighbour-solicitation' 'router-advertisement' 'neighbour-advertisement' firewall.@rule[5].limit='1000/sec' firewall.@rule[5].family='ipv6' firewall.@rule[5].target='ACCEPT' firewall.@rule[6]=rule firewall.@rule[6].name='Allow-ICMPv6-Forward' firewall.@rule[6].src='wan' firewall.@rule[6].dest='*' firewall.@rule[6].proto='icmp' firewall.@rule[6].icmp_type='echo-request' 'echo-reply' 'destination-unreachable' 'packet-too-big' 'time-exceeded' 'bad-header' 'unknown-header-type' firewall.@rule[6].limit='1000/sec' firewall.@rule[6].family='ipv6' firewall.@rule[6].target='ACCEPT' firewall.@rule[7]=rule firewall.@rule[7].name='Allow-IPSec-ESP' firewall.@rule[7].src='wan' firewall.@rule[7].dest='lan' firewall.@rule[7].proto='esp' firewall.@rule[7].target='ACCEPT' firewall.@rule[8]=rule firewall.@rule[8].name='Allow-ISAKMP' firewall.@rule[8].src='wan' firewall.@rule[8].dest='lan' firewall.@rule[8].dest_port='500' firewall.@rule[8].proto='udp' firewall.@rule[8].target='ACCEPT' firewall.@include[0]=include firewall.@include[0].path='/etc/firewall.user' luci.flash_keep.firewall='/etc/firewall.user' ucitrack.@firewall[0]=firewall ucitrack.@firewall[0].init='firewall' ucitrack.@firewall[0].affects='luci-splash' 'qos' 'miniupnpd'
br-lan Link encap:Ethernet HWaddr B8:EC:A3:3E:9D:96
inet addr:192.168.2.1 Bcast:192.168.2.255 Mask:255.255.255.0
inet6 addr: fdd2:d11b:fea0::1/60 Scope:Global
inet6 addr: 2003:c0:8f04:4000::1/60 Scope:Global
inet6 addr: fe80::baec:a3ff:fe3e:9d96/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2626603 errors:0 dropped:0 overruns:0 frame:0
TX packets:9457888 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:559371087 (533.4 MiB) TX bytes:8815311185 (8.2 GiB)
eth0 Link encap:Ethernet HWaddr B8:EC:A3:3E:9D:96
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:10945799 errors:0 dropped:14 overruns:0 frame:0
TX packets:10415501 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:704965890 (672.3 MiB) TX bytes:2875038583 (2.6 GiB)
eth0.7 Link encap:Ethernet HWaddr B8:EC:A3:3E:9D:96
inet6 addr: fe80::baec:a3ff:fe3e:9d96/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:9289886 errors:0 dropped:0 overruns:0 frame:0
TX packets:2295922 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:8688430437 (8.0 GiB) TX bytes:510415045 (486.7 MiB)
eth1 Link encap:Ethernet HWaddr B8:EC:A3:3E:9D:97
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:194703 errors:0 dropped:3884 overruns:0 frame:0
TX packets:90584 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:68976649 (65.7 MiB) TX bytes:23891525 (22.7 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:4421 errors:0 dropped:0 overruns:0 frame:0
TX packets:4421 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:418996 (409.1 KiB) TX bytes:418996 (409.1 KiB)
wlan0 Link encap:Ethernet HWaddr B8:EC:A3:3E:9D:94
inet6 addr: fe80::baec:a3ff:fe3e:9d94/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:981458 errors:0 dropped:0 overruns:0 frame:0
TX packets:1593651 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:120635446 (115.0 MiB) TX bytes:2270897524 (2.1 GiB)
wlan1 Link encap:Ethernet HWaddr B8:EC:A3:3E:9D:95
inet6 addr: fe80::baec:a3ff:fe3e:9d95/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:53448 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 B) TX bytes:13228493 (12.6 MiB)
cat /etc/igmpproxy:
quickleave
phyint pppoe-wan upstream ratelimit 0 threshold 1
altnet 87.141.128.0/17
altnet 193.158.132.189/32
altnet 87.140.255.0/25
altnet 87.128.0.0/11
altnet 224.0.0.0/4
altnet 193.15.0.0/15
altnet 193.158.34.0/23
altnet 212.184.168.0/24
altnet 239.35.0.0/16
altnet 193.158.35.0/24
altnet 217.6.167.160/27
phyint br-lan downstream ratelimit 0 threshold 1
altnet 192.168.2.0/24
ubus for wan + lan:
root@OpenWrt3:~# ubus -S call network.interface.wan status
{"up":true,"pending":false,"available":true,"autostart":true,"dynamic":false,"uptime":55681,"l3_device":"pppoe-wan","proto":"pppoe","device":"eth0.7","updated":["addresses","routes"],"metric":0,"dns_metric":0,"delegation":true,"ipv4-address":[{"address":"91.34.46.59","mask":32,"ptpaddress":"62.155.243.5"}],"ipv6-address":[{"address":"fe80::a841:91c5:e0a8:f912","mask":128}],"ipv6-prefix":[],"ipv6-prefix-assignment":[],"route":[{"target":"0.0.0.0","mask":0,"nexthop":"62.155.243.5","source":"0.0.0.0/0"}],"dns-server":["217.237.149.142","217.237.150.205"],"dns-search":[],"neighbors":[],"inactive":{"ipv4-address":[],"ipv6-address":[],"route":[],"dns-server":[],"dns-search":[],"neighbors":[]},"data":{}}
root@OpenWrt3:~# ubus -S call network.interface.lan status
{"up":true,"pending":false,"available":true,"autostart":true,"dynamic":false,"uptime":57933,"l3_device":"br-lan","proto":"static","device":"br-lan","updated":["addresses"],"metric":0,"dns_metric":0,"delegation":true,"ipv4-address":[{"address":"192.168.2.1","mask":24}],"ipv6-address":[],"ipv6-prefix":[],"ipv6-prefix-assignment":[{"address":"2003:c0:8f04:4000::","mask":60,"preferred":1078,"valid":13678,"local-address":{"address":"2003:c0:8f04:4000::1","mask":60}},{"address":"fdd2:d11b:fea0::","mask":60,"local-address":{"address":"fdd2:d11b:fea0::1","mask":60}}],"route":[],"dns-server":[],"dns-search":[],"neighbors":[],"inactive":{"ipv4-address":[],"ipv6-address":[],"route":[],"dns-server":[],"dns-search":[],"neighbors":[]},"data":{}}
root@OpenWrt3:~#
root@OpenWrt3:~# cat /proc/net/igmp
Idx Device : Count Querier Group Users Timer Reporter
1 lo : 1 V3
010000E0 1 0:00000000 0
2 eth0 : 1 V3
010000E0 1 0:00000000 0
6 br-lan : 4 V2
160000E0 1 1:000002A3 1
020000E0 1 1:000002C5 1
FB0000E0 1 1:00000216 0
010000E0 1 0:00000000 0
7 wlan1 : 1 V3
010000E0 1 0:00000000 0
8 wlan0 : 1 V3
010000E0 1 0:00000000 0
18 eth0.7 : 1 V3
010000E0 1 0:00000000 0
19 pppoe-wan : 3 V3
FB0000E0 1 0:00000000 0
280A00E8 1 0:00000000 0
010000E0 1 0:00000000 0
cat /etc/config/network
config interface 'loopback'
option ifname 'lo'
option proto 'static'
option ipaddr '127.0.0.1'
option netmask '255.0.0.0'
config globals 'globals'
option ula_prefix 'fdd2:d11b:fea0::/48'
config interface 'lan'
option type 'bridge'
option proto 'static'
option netmask '255.255.255.0'
option ip6assign '60'
option ipaddr '192.168.2.1'
option force_link '0'
option igmp_snooping '1'
option multicast_querier '1'
option ifname 'eth0'
config interface 'wan'
option proto 'pppoe'
option username '0123456789012345678901230001@t-online.de'
option ifname 'eth0.7'
option ipv6 'auto'
option password '12345678'
config interface 'wan6'
option ifname 'eth0.7'
option proto 'none'
config switch
option name 'switch0'
option reset '1'
option enable_vlan '1'
config switch_vlan
option device 'switch0'
option vlan '3'
option vid '1'
option ports '0 1 2 3 4'
config switch_vlan
option device 'switch0'
option vlan '4'
option vid '7'
option ports '0t 1t'