Hello.
When I used Centos 7 with firewalld, i use this rule to allow multicast:
firewall-cmd -q --permanent --direct --add-rule ipv4 filter INPUT 1 -m pkttype --pkt-type
multicast -j ACCEPT
But in Centos 8 firewalld uses nftables as backend and this rule doen't work.
I tried to create nftables rule to allow multicast:
nft add table inet mytable
nft add chain inet mytable INPUT {type filter hook input priority 5\; policy accept\;}
nft add rule inet mytable INPUT pkttype multicast counter accept
but it doen't work too, because firewalld rules, that performs after my table -
reject this packets:
chain filter_INPUT {
type filter hook input priority 10; policy accept;
ct state established,related accept
ct status dnat accept
iifname "lo" accept
jump filter_INPUT_ZONES_SOURCE
jump filter_INPUT_ZONES
ct state invalid drop
reject with icmpx type admin-prohibited <---- this rule rejects my packets
}
How can i add permanent rule for multicast traffic via firewall-cmd or via nftables ?