multicast ping: "Operation not permitted"?

[Steve Beaty]

I'm having a strange problem: I can't seem to get multicast addresses working on FC3 or 4 machines. Here's some debugging I've done:

$ ping 224.0.0.1
PING 224.0.0.1 (224.0.0.1) 56(84) bytes of data.
ping: sendmsg: Operation not permitted
ping: sendmsg: Operation not permitted

$ ifconfig
eth0 Link encap:Ethernet HWaddr 00:03:47:EB:8D:AF
inet addr:10.0.0.10 Bcast:10.0.0.10 Mask:255.255.255.0
inet6 addr: fe80::302:ff47:aabb:8daf/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:4809798 errors:0 dropped:0 overruns:0 frame:0
TX packets:1586394 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:4189753852 (3.9 GiB) TX bytes:275834280 (263.0 MiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MULTICAST MTU:16436 Metric:1
RX packets:44698 errors:0 dropped:0 overruns:0 frame:0
TX packets:44698 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:73287053 (69.8 MiB) TX bytes:73287053 (69.8 MiB)

$ netstat -g
IPv6/IPv4 Group Memberships
Interface RefCnt Group
--------------- ------ ---------------------
lo 1 ALL-SYSTEMS.MCAST.NET
eth0 1 ALL-SYSTEMS.MCAST.NET
lo 1 ff02::1
eth0 1 ff02::1:ffeb:8daf
eth0 1 ff02::1

$ uname -a
Linux junk.mscd.edu 2.6.12-1.1378_FC3 #1 Wed Sep 14 04:24:31 EDT 2005 i686
i686 i386 GNU/Linux

$ strace ping 224.0.0.1
[...]
gettimeofday({1133479500, 909264}, NULL) = 0
gettimeofday({1133479500, 909411}, NULL) = 0
sendmsg(3, {msg_name(16)={sa_family=AF_INET, sin_port=htons(0),
sin_addr=inet_addr("224.0.0.1")},
msg_iov(1)=[{"\10\0\346\337\331r\0\0L\206\217Cc\340\r\0\10\t\n\v \f\r"...,
64}], msg_controllen=0, msg_flags=0}, 0) = -1 EPERM (Operation not
permitted)
recvmsg(3, 0xbfbad790, MSG_ERRQUEUE|MSG_DONTWAIT) = -1 EAGAIN (Resource
temporarily unavailable)
[...]

$ getenforce
Disabled

So I'm stumped. What am I missing? Quite an open-ended question I know :)

[Steve Beaty]

i'll answer my own question.

i'm surprised, but it is firestarter... one of the rules is:
DROP all -- BASE-ADDRESS.MCAST.NET/8 anywhere
so, i'll have to play with that. hope this helps someone else...