Re: iptables and dhcp

From: /dev/rob0 (rob0_at_gmx.co.uk)
Date: 09/16/03


Date: Mon, 15 Sep 2003 18:14:37 -0700

In article <92ead774359dc26b955b110d8ab84cd5@news.teranews.com>,
  Dave Lister wrote:
> DHCP requests are passing through my firewall to the next higher server in
> the network. These requests seem to be alternatively serviced by my

Are you running a DHCP relay? Or are these would-be DHCP clients on the
same physical network segment as the firewall and the remote DHCP
server?

> I've tried blocking ports 67 and 68 with iptables, and it still gets passed
> through and serviced. I've tried blocking everything in both directions and
> it still gets passed through.
>
> Any ideas?

I'll bet if you showed us your rules we could show you exactly where and
why they're wrong. Here are some guesses in advance:
    1. You used INPUT and not FORWARD chain
    2. You used -p tcp and not -p udp

-- 
  /dev/rob0 - preferred_email=i$((28*28+28))@softhome.net
  or put "not-spam" or "/dev/rob0" in Subject header to reply


Relevant Pages

  • Re: DHCP Questions
    ... firewall - you should hook up the T1 modem to the firewall, ... Unless you are putting the two network cards in the server on different ... REALLY don't want two network cards in the same address range in the same ... But Once I enable DHCP on that server that I'm making the ...
    (microsoft.public.win2000.networking)
  • Re: dhcp problem
    ... > I am having trouble obtaining a dhcp address from a cable modem (comcast). ... > the linksys or on a network with isc-dhcpd it works ok. ... an IPFW firewall script with "fixed" IP addresses, ...
    (freebsd-net)
  • Re: dhcp does not work with SiS SiS900 PCI Fast Ethernet (rev 91)
    ... about your network. ... Yes computers on the network are configured using ... dhcp, each computer with a MAC address in the network ... The standard firewall should allow DHCP to work without problems. ...
    (Fedora)
  • Re: Problem regarding dhcp and FreeBSD 4.10 on a laptop
    ... When I've had a problem like this it's usually my firewall. ... can you ssh in to the BSD box from inside the network? ... This is my first FreeBSD installation, ... +no problem using dhcp to obtain their IP addresses. ...
    (freebsd-questions)
  • Re: Running DHCP on Firewall
    ... then why is it that every network that I have encountered is running ... Keep in mind that these networks were setup by people that have been in ... Please list the advantages of not running DHCP from the firewall. ...
    (comp.security.firewalls)