PasTim wrote:
> HI Ron F.,
>
> Thanks. It turns out that Chromecast is much the same as UPnP, including
> matching the INPUT messages. I had mistakenly left out the Chromecast
> IP address from the 49152:49158 playing range allowance so it didn't
> play properly.
>
> Airplay looks like a challenge for another day, or week. Apple seem to
> like to do things differently, and prefer not to tell anyone much about
> it.
Hi PasTim,
I had originally added this rule, ports that might be used by UPnPBridge
- 49152:49158, using ufw. In retrospect, in fitting with the rest of the
rules we created using iptables; it seems more appropriate to do the
same here; I think it can go anywhere and order is not important for
this one:
Code:
--------------------
sudo iptables -A INPUT -p udp -m multiport --dports 49152:49158 -j ACCEPT
--------------------
If you are running a headless server, then you don't need to filter
outgoing packets to get rid of SSDP broadcasts that contain a
user-agent. My home server however is also driving my TV via an HDMI
cable, so the browser is often running. In the final analysis, as you
correctly pointed out, many of the rules I have been testing are
optional and probably not necessary. The real improvement is done by
using ipset to open INPUT ports temporarily, and only those ports.
I had an amusing outcome running BubbleUPnP as a media renderer on my
mobile phone last night, having added the netfilter module psad to my
firewall. After several days doing this, psad decided that the renderer
was a bad actor, and created rules it added to iptables on my server to
block all further communication with my phone! I don't know if the cause
was the app itself, or coincidentally something else running on my
Android device. Nevertheless, it appeared that something on my phone had
begun a port scan of my server. I am going to figure out what is really
going on here.
*Living Room:* SB Touch + DIY PSU > CI Audio VDA.2 DAC + VAC.1 PSU >
VRX.1 cables > Emotiva XSP-1 Gen 2 preamp + XPA-DR2 amp > Blue Jeans
cables > B&W 804 speakers
*Laptop:* System76 Galago + Ubuntu 16.04 + Squeezelite + Material Skin >
ifi USB iSilencer > Audirect Beam DAC > Senn IE 80 earbuds
*Bedroom:* Android Phone + SB Player + Squeeze Ctrl > Bluetooth > Bose
SoundLink Revolve
*Server:* Puget Systems Serenity + Ubuntu 18.04 + LMS 7.9.2
*Music:* Personal FLAC, Radio Paradise FLAC, Qobuz, Spotify
------------------------------------------------------------------------
Ron F.'s Profile: http://forums.slimdevices.com/member.php?userid=5616
View this thread: http://forums.slimdevices.com/showthread.php?t=103728
_______________________________________________
plugins mailing list
plugins@lists.slimdevices.com
http://lists.slimdevices.com/mailman/listinfo/plugins
