Skip to content

Commit 4081daf

Browse files
authored
Added firewall recommendations to the mDNS topic (#1669)
Added firewall recommendations to the mDNS topic.
1 parent dff952a commit 4081daf

File tree

1 file changed

+25
-0
lines changed

1 file changed

+25
-0
lines changed

docs/configuration/service/mdns.rst

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,6 +53,31 @@ Configuration
5353

5454
Defaults to: 4096
5555

56+
Firewall recommendations
57+
========================
58+
59+
Unlike typical routed traffic, mDNS packets relayed between interfaces do not
60+
traverse the FORWARD hook chain in the firewall. Instead, they are processed
61+
through the following hooks:
62+
63+
- **INPUT**: For packets received by the local system
64+
- **OUTPUT**: For packets sent from the local system
65+
66+
To control or allow mDNS packet forwarding via the relay, you must define
67+
appropriate rules in the INPUT and OUTPUT directions. Rules in the FORWARD
68+
direction will have no effect on mDNS relay traffic.
69+
70+
.. code-block:: none
71+
72+
set firewall ipv4 input filter rule 10 action 'accept'
73+
set firewall ipv4 input filter rule 10 destination address '224.0.0.251'
74+
set firewall ipv4 input filter rule 10 destination port '5353'
75+
set firewall ipv4 input filter rule 10 protocol 'udp'
76+
set firewall ipv4 output filter rule 10 action 'accept'
77+
set firewall ipv4 output filter rule 10 destination address '224.0.0.251'
78+
set firewall ipv4 output filter rule 10 destination port '5353'
79+
set firewall ipv4 output filter rule 10 protocol 'udp'
80+
5681
Example
5782
=======
5883

0 commit comments

Comments
 (0)