In the current test scenario, there is no wireless. The “server” is the FSG-3, and the “client” is my laptop, on a direct cable connection to one of the FSG’s LAN ports.
Firewalling multicast? Dunno! Although I would expect that if it was, I wouldn’t get two hours of music first.
> iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
DROP all -- 192.168.2.0/24 anywhere
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:smtp
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:pop3s
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:pop3
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:imaps
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:imap2
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:www
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere anywhere
ACCEPT udp -- anywhere 255.255.255.255 udp dpt:5004
ACCEPT icmp -- anywhere 192.168.1.2
ACCEPT all -- anywhere 192.168.1.2 state RELATED,ESTABLISHED
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:ssh
ACCEPT udp -- anywhere anywhere state NEW,RELATED,ESTABLISHED udp dpt:loc-srv
ACCEPT udp -- anywhere anywhere state NEW,RELATED,ESTABLISHED udp dpts:netbios-ns:netbios-dgm
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:netbios-ssn
ACCEPT tcp -- anywhere anywhere state NEW,RELATED,ESTABLISHED tcp dpt:microsoft-ds
DROP all -- anywhere anywhere
Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT all -- 192.168.2.0/24 anywhere
DROP all -- anywhere anywhere
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
>
the 192.168.2.x subnet is no longer in use, I should probably get it out of there.