<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>
<div>Dear Community,<br/>
I am Max and new to this Mailing list.</div>
<div>I am a trainee in an IT Company in Germany. I have to setup an Avahi bonjour Gateway for our Apple TV's.<br/>
Here are some fakts:<br/>
We have different VLAN's for example 1-server, 2-client, 3-infrastucture, 4-Employes, 5-Guest.<br/>
V-LAN 3 contains the Apple-TV's<br/>
In VLAN 1 is a kvm virtual rhel6.4 server with avahi running on our hypervisor.<br/>
The server has a bond in every Vlan.(eth0-4)<br/>
The avahi-daemon is configured like this (removed the outcommented stuff:</div>
<div><br/>
browse-domains=0pointer.de, zeroconf.org<br/>
use-ipv4=yes<br/>
use-ipv6=no<br/>
allow-interfaces=eth2,eth3<br/>
deny-interfaces=eth0,eth1,eth4</div>
<div>[wide-area]<br/>
enable-wide-area=yes</div>
<div>[publish]</div>
<div>publish-workstation=no</div>
<div>[reflector]<br/>
enable-reflector=yes</div>
<div>[rlimits]<br/>
rlimit-core=0<br/>
rlimit-data=4194304<br/>
rlimit-fsize=0<br/>
rlimit-nofile=300<br/>
rlimit-stack=4194304<br/>
rlimit-nproc=3</div>
<div> </div>
<div>I also configured iptables like that:<br/>
Chain INPUT (policy ACCEPT)<br/>
target prot opt source destination <br/>
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED<br/>
ACCEPT icmp -- anywhere anywhere <br/>
ACCEPT all -- anywhere anywhere <br/>
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh<br/>
ACCEPT udp -- anywhere anywhere udp dpt:mdns source IP range 10.9.50.1-10.9.50.250 #Apple TV Vlan<br/>
ACCEPT udp -- anywhere anywhere udp<br/>
LOG all -- anywhere anywhere LOG level warning<br/>
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited</div>
<div>Chain FORWARD (policy ACCEPT)<br/>
target prot opt source destination </div>
<div>Chain OUTPUT (policy ACCEPT)<br/>
target prot opt source destination <br/>
</div>
<div>What it should do: Taking the apple bonjour-broadcast-crap from VLAN3 an rediredting it to 4 ,5 ,2.<br/>
What it is doing: Just redirecting it to 2 and only 1 Apple TV not every one.</div>
<div>My Question is:<br/>
Am i doing something wrong or is this not suposed to work like that? Someone here who successfully set up something like that ?</div>
<div>Thanks for reading :D</div>
<div>Greets from Germany, Max.</div>
</div></div><hr>
Diese E-Mail wurde aus dem Sicherheitsverbund E-Mail made in
Germany versendet: <a href="http://www.gmx.net/e-mail-made-in-germany?mc=footer@textlink@emig.emig">http://www.gmx.net/e-mail-made-in-germany</a></body></html>