Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there an ipfw rule that can easily forward mDns packets from one subnet to another? I have a Snow Leopard Server machine serving as the gateway between the two subnets and would like for machines in each subnet to see the services available in the other subnet. The gateway machine is already confirmed as configured correctly such that packets route correctly between the two subnets (ping works, traceroute shows the subnet hop, etc). My problem in designing a ipfw rule is that I don't know how to instruct that I would like multicast packets addressed to on en0 to be addressed to the same ip/port but on fw0 (the other interface). I attempted a rule such as

fwd log udp from to recv en1

to force the packet to hop over to the other interface (from en1 to fw0), but no dice. The ipfw log shows that the rule is being triggered by packets, but tcpdump isn't showing any packets on the other interface. Also, the only other firewall rules in place are the divert port 8668 and rule #65535 "allow any to any".

Any suggestions? Thanks.

share|improve this question

I've tried to have this work as expected for a long time.

All I found is that these multicast packets will not cross subnets.

However, the only real solution I have found is to use an mDNS Reflector daemon such as avahi-daemon on a system which spans across subnets.

It also sounds like you could benefit from Wide Area Bonjour which is designed for large corporations to broadcast Bonjour / mDNS traffic across subnets.


share|improve this answer

In short, no. As per RFC2365 and IANA's multicast assignments, is reserved for link-local multicast. This means that a multicast packet address to anything in the range - should never cross between IP subnets.

I've not looked in to wide area Bonjour, which is mentioned in another answer, however if this is to work, it must use multicast addresses that do not come from

share|improve this answer
There is some talk about mDNS Gateways here:… – JohnyTex Jun 17 '15 at 13:26

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.