on the desktop

iptables --table filter --list | grep mdns
ACCEPT     udp  --  anywhere             224.0.0.251          udp dpt:mdns ctstate NEW
ACCEPT     udp  --  anywhere             224.0.0.251          udp dpt:mdns ctstate NEW

on the laptop:

[root@Fujiantonio antonio]# iptables --table filter --list | grep mdns
ACCEPT     udp  --  anywhere             224.0.0.251          udp dpt:mdns ctstate NEW


why do I have two lines instead of one???

2015-10-28 18:07 GMT+01:00 Antonio M <antonio.montagnani@gmail.com>:
tbx to all... iptables -L -n -v

see attached file

2015-10-28 18:00 GMT+01:00 Gordon Messmer <gordon.messmer@gmail.com>:
On 10/28/2015 09:24 AM, Rick Stevens wrote:
You have a DNS resolution issue.

It's probably an mDNS issue, and replies should normally be allowed by the default "accept RELATED,ESTABLISHED" rule.

It might be helpful to see the output of "iptables -L -n -v".

With the firewall enabled, as root,
try:
    # iptables -L -n | grep :53
and make sure you see lines like:
    ACCEPT  udp  --  0.0.0.0/0    0.0.0.0/0            udp dpt:53
    ACCEPT  tcp  --  0.0.0.0/0    0.0.0.0/0            tcp dpt:53

You'll normally only see those lines when you're running virtualization, or a DNS server.  They aren't necessary for mDNS, which uses a different port entirely.

I suspect that you see them because you're running libvirt.  If you use "iptables -v", you would see that those rules only affect packets on the virbr0 interface.  They're not related to your non-virtualized applications (or to mDNS in any case).

Also make sure avahi-daemon and dnsmasq are running.

If mDNS is working when the firewall is down, we can assume that avahi-daemon is running.  dnsmasq is not required for mDNS.


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org



--
Antonio Montagnani
Skype : amontag52

Linux Fedora 22 (Twenty-two)
inviato da Gmail



--
Antonio Montagnani
Skype : amontag52

Linux Fedora 22 (Twenty-two)
inviato da Gmail