You seem on the correct path with firewall configuration. I think MDNS is the thing you likely have to get working for device discovery to work. I don't know the specifics of how your firewall setup works, but our ufw configuration relies on the fact that Fuchsia devices will generally set up a
Link-Local IPv6 address to communicate with the host (that link-local address is the fe80 address you see in our ufw configuration).
This raises two questions:
- Does your firewall configuration require an interface to be specified on which to set rules?
- Can you set rules based on source IP address for incoming traffic?
The firewall rules we set up with `ufw` are (for example) "allow UDP traffic on any network interface from link-local IPs beginning with fe80 to ports 33331-33340 for the Fuchsia Netboot Protocol"