Unable to get avahi to work in FreeNAS 11 jail

[helgew]

I have been banging away at this for a while now and am at my wits' end... I simply cannot get avahi running in a jail to see any mDNS requests. Running avahi-browse -av gives me nothing despite being on a very chatty network:

Code:

[root@htpc ~]# avahi-browse -a -v
Server version: avahi 0.6.31; Host name: htpc.local
E Ifce Prot Name										  Type				 Domain
: Cache exhausted
: All for now
^CGot SIGINT, quitting.
[root@htpc ~]#

I can see mDNS traffic using tcpdump:

Code:

[root@htpc ~]# tcpdump -i em0 port mdns
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on em0, link-type EN10MB (Ethernet), capture size 262144 bytes
12:52:10.998330 IP iphonehw.grajagan.org.mdns > 224.0.0.251.mdns: 0 [3a] [3q] PTR (QU)? _touch-able._tcp.local. PTR (QU)? _00000000-00a1-8fd7-724d-b6f3e59547ec._sub._home-sharing._tcp.local. PTR (QU)? _00000000-00a1-8fd7-724d-b6f3e59547ec._sub._appletv-v2._tcp.local. (266)
^C12:52:10.999684 IP6 fe80::40f:e1b4:e529:4704.mdns > ff02::fb.mdns: 0 [3a] [3q] PTR (QU)? _touch-able._tcp.local. PTR (QU)? _00000000-00a1-8fd7-724d-b6f3e59547ec._sub._home-sharing._tcp.local. PTR (QU)? _00000000-00a1-8fd7-724d-b6f3e59547ec._sub._appletv-v2._tcp.local. (266)

2 packets captured
155 packets received by filter
0 packets dropped by kernel
[root@htpc ~]#

Strangely, I can also see services published via mDNS by third-party apps running in the jail.

Any help or pointers would be greatly appreciated!

 

[dlavigne]

This is an interesting solution if you have a PF firewall within your network: https://forums.freebsd.org/threads/1389/#post-196589.

 

[helgew]

This is an interesting solution if you have a PF firewall within your network: https://forums.freebsd.org/threads/1389/#post-196589.

I had looked at that but I am not using PF firewall outside from the default settings in /etc/pf.conf.block:

Code:

set block-policy drop

block drop in quick proto tcp from any to any port { 111, 548, 2049, 137, 138, 139, 860, 3260 }
block drop in quick proto udp from any to any port { 111, 860, 2049 }
pass out keep state

mDNS uses UDP on port 5353, AFAIK.