It’s basically an interface alias in linux. ie. eth0:1 etc. the virtual server context gets assigned as many aliases as it needs.
I have no firewall rules at all. The default policies for all chains are ACCEPT. There isn’t much else I can do to remove the firewall, unless I recompile the kernel w/o iptables support at all.
In the past I have just run an mdns server on the host O/S, not on the individual virtual server actually running mt-daapd, that worked but was not ideal. I thought maybe this time around i’d finally nail this.
I’m removing netfilter from the kernel completely to see what happens.