Bug: No longer able to specify multicast address for DLNA in FIREWALL_OUTBOUND_SUBNETS

[atwardowski]

Is this urgent?

No

Host OS

Nixos 23.11

CPU arch

x86_64

VPN service provider

Mullvad

What are you using to run the container

docker-compose

What is the version of Gluetun

Running version latest built on 2024-01-29T18:29:14.880Z (commit 6b9c775)

What's the problem 🤔

After the last update, FIREWALL_OUTBOUND_SUBNETS=239.255.255.250/32 prevents gluetun from starting.

Without that config option, containers connected to gluetun cannot send multicast broadcasts.

[11:50:53] [ERR] [40] Emby.Dlna.Main.DlnaEntryPoint: Error sending socket message from 172.18.0.5 to 239.255.255.250:1900 System.Net.Sockets.SocketException (13): Permission denied

Share your logs (at least 10 lines)

========================================
========================================
=============== gluetun ================
========================================
=========== Made with ❤️ by ============
======= https://github.com/qdm12 =======
========================================
========================================

Running version latest built on 2024-01-29T18:29:14.880Z (commit 6b9c775)

🔧 Need help? https://github.com/qdm12/gluetun/discussions/new
🐛 Bug? https://github.com/qdm12/gluetun/issues/new
✨ New feature? https://github.com/qdm12/gluetun/issues/new
☕ Discussion? https://github.com/qdm12/gluetun/discussions/new
💻 Email? [email protected]
💰 Help me? https://www.paypal.me/qmcgaw https://github.com/sponsors/qdm12
2024-02-01T10:49:45-05:00 INFO [routing] default route found: interface eth0, gateway 172.18.0.1, assigned IP 172.18.0.5 and family v4
2024-02-01T10:49:45-05:00 INFO [routing] local ethernet link found: eth0
2024-02-01T10:49:45-05:00 INFO [routing] local ipnet found: 172.18.0.0/16
2024-02-01T10:49:45-05:00 INFO [firewall] enabling...
2024-02-01T10:49:45-05:00 INFO [firewall] enabled successfully
2024-02-01T10:49:45-05:00 INFO [storage] merging by most recent 17743 hardcoded servers and 17743 servers read from /gluetun/servers.json
2024-02-01T10:49:45-05:00 ERROR firewall settings: outbound subnet is public: 239.255.255.250/32
2024-02-01T10:49:45-05:00 INFO Shutdown successful

Share your configuration

version: "3"
services:
  gluetun:
    image: qmcgaw/gluetun
    cap_add:
      - NET_ADMIN
    environment:
      - VPN_SERVICE_PROVIDER=${VPN_SERVICE_PROVIDER:?error}
      - VPN_TYPE=${VPN_TYPE:-wireguard}
      - WIREGUARD_PRIVATE_KEY=${WIREGUARD_PRIVATE_KEY}
      - WIREGUARD_ADDRESSES=${WIREGUARD_ADDRESSES}
      - SERVER_CITIES=${SERVER_CITIES}
      - TZ=${TZ:-UTC}
      - HTTPPROXY=${HTTPPROXY:-on}
      - FIREWALL_OUTBOUND_SUBNETS=239.255.255.250/32  # jellyfin DLNA multicast address
    ports:
      - 8888:8888/tcp  # gluetun HTTP Proxy
      - 8096:8096/tcp  # Jellyfin HTTP
      - 8920:8920/tcp  # Jellyfin HTTPS
      - 1900:1900/udp  # Jellyfin auto-discovery
      - 7359:7359/udp  # Jellyfin auto-discovery
    restart: unless-stopped