Friday, January 24, 2025

Re: Firewall: Airplay/MDNS Not Working on IOS/Other Devices

louise9841@gmail.com wrote:

> Hi I have a firewall that I'm trying to get working with mdns across different vlans. Chrome on the main network(ix0:network) doesn't even pick up the chromecast and I have tried to allow MDNS as well as setting up openmdns but it still doesn't work. On the IOS Devices(vlan2) AirPlay correctly shows the Rokus but when I click on any of the Rokus to connect it will say "Unable to connect to Roku." I have also tried disabling all of the block rules between the vlans to no avail. My goal is to have mdns working on ix0 vlan2 vlan4 vlan6 and vlan10. Can someone tell me what I'm doing wrong or show me the documentation that's appropriate for solving this issue?

Trying to route mDNS traffic as you describe is a recipe for pain. The easiest way I know to do this:

1. install avahi (should be in ports) and bind it to your internal interfaces
2. set enable-reflector=yes
3. go pour a tall glass of scotch

mdnsd would no longer be needed as it doesn't do what you expect. avahi takes its place and enable-reflector=yes is a 'town crier' mode where it relays mDNS traffic between the vlans. mrouted is not needed either unless you have another purpose for it.

of course make sure you can pass/accept mDNS traffic (udp 5353) in your pf rules. You will also need rules to pass traffic of the actual services advertised via mDNS e.g. Airplay between vlans of interest.

No comments:

Post a Comment