Multicast in jail?

Alexander Leidinger Alexander at Leidinger.net
Tue Jul 7 09:21:00 UTC 2009


Quoting Bill Marquette <bill.marquette at ucsecurity.com> (from Mon, 6  
Jul 2009 20:14:02 -0500 (CDT)):

> I'm trying to run Avahi in a jail, much the same as Alexander  
> Leidinger in this email from late last year  
> http://www.mail-archive.com/freebsd-jail@freebsd.org/msg00587.html.   
> I couldn't find any replies to that thread and it seems that I'm  
> running into the same issues - the service announcements make it on  
> the wire and the other devices in the network see them.

So far I have nothing working.

I assume that the mcast traffic is not arriving at all IPs. <wild  
guess>Either because on overly restrictive jail check, and/or just  
because there's no code which is distributing the traffic to all  
IPs.</wild guess>

It seems kern_jail.c is a place to check if there's some code which  
handles this. Maybe prison_check_ip[46] if mcast is on top of this, or  
something new to write if mcast is a different "AF". Again, this is a  
wild guess, I don't have enough understanding of the network code in  
the kernel to even make educated guesses about the real reason.

Bye,
Alexander.

-- 
Ask not for whom the Bell tolls, and you
will pay only the station-to-station rate.
		-- Howard Kandel

http://www.Leidinger.net    Alexander @ Leidinger.net: PGP ID = B0063FE7
http://www.FreeBSD.org       netchild @ FreeBSD.org  : PGP ID = 72077137


More information about the freebsd-jail mailing list