Multicast works only after service start (JAIL)

[Ben]

Hi,

Im trying to set up AFP-shares and the FireFly iTunes-Server in two different jails to access them by my MacBook Client.

I set up both services with two different IPs which are part of my IP network. Right after starting up the FireFly-Server and the AFP-Jail (avahi) I can see both in Finder (central file-access-tool in MacOS X).

But when I restart my Client (Mac) the shares and the iTunes-Server wont show up again until I restart them.

The pf-firewall is configured to open all ports for my client IP. RDR-rules and NAT is not used for these jails as they have "external" IPs. Outgoing ports are open also.

Does anybody have an idea what I could do to solve this? It seems like an multicast problem. I have the same behaviour on a Windows Client, so I guess its not a Client issue.

Would be great if you could give me some hints.

Thanks a lot in advance,
Ben.

[lartza]

Same problem here, no solution for it. Samba and avahi in jail can't answer to multicasts at all, so you can see them only after they start.

There's only a bit of discussion here, all I've found:
http://lists.freebsd.org/pipermail/freebsd-jail/2009-July/000916.html

[SirDice]

Avahi and OS-X don't seem to like each other. Nothing to do with jails, firewalls or FreeBSD.

[tty23]

@SirDice: I have used Avahi and OS X for a while now, and it works perfectly, no problems at all. However, I did not try it inside a jail.

@Ben: Did you try to use a vnet/vimage jail? Those use their own network stack, I could imaging that this might work better. If you do not know what I am talking about, have a look at this thread: http://forums.freebsd.org/showthread.php?t=9006

[SirDice]

@SirDice: I have used Avahi and OS X for a while now, and it works perfectly, no problems at all. However, I did not try it inside a jail.
It seems to work for a while then it breaks. I have no idea why and all I get in the logs is avahi complaining about something my macbook pro sent. Too much hassle so I gave up on it.

[tty23]

@SirDice: This is strange, I run it for about a year now, no problems.

[lartza]

I have avahi in a jail <-> avahi outside a jail. Works a while, then breaks.

It's because jails can't receive multicasts from the network, though they can send them. I suspect that at first avahi sends its information for a while, then waits for a request to send more.

I can't see a jailed samba in the workgroup either for the same reason.