J'en suis resté là, le proxy IGMP tourne mais aucun flux ne passe:
Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
21379 2911K UBNT_VPN_IPSEC_FW_HOOK all -- any any anywhere anywhere
21379 2911K VYATTA_FW_LOCAL_HOOK all -- any any anywhere anywhere
20575 2843K VYATTA_POST_FW_IN_HOOK all -- any any anywhere anywhere
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
60700 25M MINIUPNPD all -- any any anywhere anywhere
60700 25M UBNT_VPN_IPSEC_FW_IN_HOOK all -- any any anywhere anywhere
60700 25M UBNT_PFOR_FW_HOOK all -- any any anywhere anywhere
60676 25M UBNT_FW_IN_SUSPEND_HOOK all -- any any anywhere anywhere
60676 25M VYATTA_FW_IN_HOOK all -- any any anywhere anywhere
60676 25M VYATTA_FW_OUT_HOOK all -- any any anywhere anywhere
60676 25M VYATTA_POST_FW_FWD_HOOK all -- any any anywhere anywhere
Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
29164 20M VYATTA_POST_FW_OUT_HOOK all -- any any anywhere anywhere
Chain MINIUPNPD (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_FW_IN_SUSPEND_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_PFOR_FW_HOOK (1 references)
pkts bytes target prot opt in out source destination
29738 20M UBNT_PFOR_FW_RULES all -- eth0.100 any anywhere anywhere
Chain UBNT_PFOR_FW_RULES (1 references)
pkts bytes target prot opt in out source destination
24 2839 ACCEPT udp -- any any anywhere 192.168.1.2 udp dpts:20000:30000
Chain UBNT_VPN_IPSEC_FW_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain UBNT_VPN_IPSEC_FW_IN_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain VYATTA_FW_IN_HOOK (1 references)
pkts bytes target prot opt in out source destination
29720 20M WAN_IN all -- eth0.100 any anywhere anywhere
Chain VYATTA_FW_LOCAL_HOOK (1 references)
pkts bytes target prot opt in out source destination
1868 244K WAN_LOCAL all -- eth0.100 any anywhere anywhere
Chain VYATTA_FW_OUT_HOOK (1 references)
pkts bytes target prot opt in out source destination
Chain VYATTA_POST_FW_FWD_HOOK (1 references)
pkts bytes target prot opt in out source destination
60676 25M ACCEPT all -- any any anywhere anywhere
Chain VYATTA_POST_FW_IN_HOOK (1 references)
pkts bytes target prot opt in out source destination
20575 2843K ACCEPT all -- any any anywhere anywhere
Chain VYATTA_POST_FW_OUT_HOOK (1 references)
pkts bytes target prot opt in out source destination
29164 20M ACCEPT all -- any any anywhere anywhere
Chain WAN_IN (1 references)
pkts bytes target prot opt in out source destination
26860 17M RETURN all -- any any anywhere anywhere /* WAN_IN-10 */ state RELATED,ESTABLISHED
0 0 RETURN all -- any any anywhere base-address.mcast.net/4 /* WAN_IN-20 */ state INVALID,NEW,RELATED,ESTABLISHED
0 0 DROP all -- any any anywhere anywhere /* WAN_IN-60 */ state INVALID
0 0 LOG all -- any any anywhere anywhere /* WAN_IN-10000 default-action drop */ LOG level warning prefix "[WAN_IN-default-D]"
0 0 DROP all -- any any anywhere anywhere /* WAN_IN-10000 default-action drop */
Chain WAN_LOCAL (1 references)
pkts bytes target prot opt in out source destination
1046 174K RETURN all -- any any anywhere anywhere /* WAN_LOCAL-10 */ state RELATED,ESTABLISHED
1 84 RETURN icmp -- any any anywhere anywhere /* WAN_LOCAL-30 */ state INVALID,NEW,RELATED,ESTABLISHED match-set ADDRv4_eth0.100 dst
0 0 RETURN all -- any any anywhere base-address.mcast.net/4 /* WAN_LOCAL-40 */ state INVALID,NEW,RELATED,ESTABLISHED
34 1510 LOG all -- any any anywhere anywhere /* WAN_LOCAL-50 */ state INVALID LOG level warning prefix "[WAN_LOCAL-50-D]"
34 1510 DROP all -- any any anywhere anywhere /* WAN_LOCAL-50 */ state INVALID
738 64286 LOG all -- any any anywhere anywhere /* WAN_LOCAL-10000 default-action drop */ LOG level warning prefix "[WAN_LOCAL-default-D]"
738 64286 DROP all -- any any anywhere anywhere /* WAN_LOCAL-10000 default-action drop */
Toute idée est la bienvenue.