Multicast and security

[John Pettitt]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 

My ISP ( sonic.net - a *great* ISP)  just added support for the BBC
multicast trial (  see http://support.bbc.co.uk/multicast/streams.html ).

I'm looking at adding MROUTING to my gateway/firewall box (Soekris
4801 running 5.4 RC2).  However having not played with multicast
before I'm looking for pointers on the security issues (I don't want
to create a gaping hole in my FW).

I'm using ipfw for my normal FW stuff and I assume I need to add rules
for 224.0.0.0/4 to let mrouted do it's job but what (if anything) do I
need to do to make sure this can't be abused from the outside?

John


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
 
iD8DBQFCZD+TaVyA7PElsKkRAh/IAJ9H22H0QJUrt9xuO44NZrdP1jQpRwCgnV3y
mxRoeFr9HTcut7AA9/OOgQs=
=/EH4
-----END PGP SIGNATURE-----