Multicast in jail?
Alexander Leidinger
Alexander at Leidinger.net
Tue Jul 7 09:21:00 UTC 2009
Quoting Bill Marquette <bill.marquette at ucsecurity.com> (from Mon, 6
Jul 2009 20:14:02 -0500 (CDT)):
> I'm trying to run Avahi in a jail, much the same as Alexander
> Leidinger in this email from late last year
> http://www.mail-archive.com/freebsd-jail@freebsd.org/msg00587.html.
> I couldn't find any replies to that thread and it seems that I'm
> running into the same issues - the service announcements make it on
> the wire and the other devices in the network see them.
So far I have nothing working.
I assume that the mcast traffic is not arriving at all IPs. <wild
guess>Either because on overly restrictive jail check, and/or just
because there's no code which is distributing the traffic to all
IPs.</wild guess>
It seems kern_jail.c is a place to check if there's some code which
handles this. Maybe prison_check_ip[46] if mcast is on top of this, or
something new to write if mcast is a different "AF". Again, this is a
wild guess, I don't have enough understanding of the network code in
the kernel to even make educated guesses about the real reason.
Bye,
Alexander.
--
Ask not for whom the Bell tolls, and you
will pay only the station-to-station rate.
-- Howard Kandel
http://www.Leidinger.net Alexander @ Leidinger.net: PGP ID = B0063FE7
http://www.FreeBSD.org netchild @ FreeBSD.org : PGP ID = 72077137
More information about the freebsd-jail
mailing list