Re: dhclient doesn't respond to DHCP OFFER

From: Andrew Schulman (andrex_at_deadspam.com)
Date: 10/07/03


Date: Tue, 07 Oct 2003 05:13:26 -0400


> On the first machine, I've flushed iptables

And set the default policy to ACCEPT? Sorry, but that's about my only idea
here.

You could use some iptables logging to see whether it sees the incoming
OFFERs and ACKs.

The information you gave about what does and doesn't work on the different
machines is helpful. It sure makes your problem sound like a firewall
problem. Okay, here's another idea: make sure that the policy on all of
the nat and mangle chains is also set to ACCEPT. I got screwed by this
once-- I set them to REJECT by mistake, and my whole network ground to a
halt until I finally figured it out a week later. (Including loopback, so
my whole system slowed to a crawl.)

iptables --policy INPUT ACCEPT
iptables --policy OUTPUT ACCEPT
iptables --policy FORWARD ACCEPT

iptables -t nat --policy PREROUTING ACCEPT
iptables -t nat --policy POSTROUTING ACCEPT
iptables -t nat --policy OUTPUT ACCEPT

iptables -t mangle --policy PREROUTING ACCEPT
iptables -t mangle --policy INPUT ACCEPT
iptables -t mangle --policy FORWARD ACCEPT
iptables -t mangle --policy OUTPUT ACCEPT
iptables -t mangle --policy POSTROUTING ACCEPT

Good luck,
Andrew.

-- 
To reply by email, change "deadspam.com" to "alumni.utexas.net"


Relevant Pages

  • mangle, nat: what policy if Im not using them?
    ... iptables. ... If I'm not using mangle or nat, what should the policy for those tables be? ...
    (comp.os.linux.networking)
  • Re: problem in configuring squid transparent proxy on FC3
    ... or to see both filter and nat tables together. ... iptables -t nat -nvL is it normal to have these much entries. ... or set your iptables forward policy to drop everything. ... Chain POSTROUTING (policy ACCEPT 2964 packets, ...
    (Fedora)
  • Re: iptables newbie
    ... nat is responsible for network address translation. ... Filtering allows ... Chain FORWARD (policy ACCEPT) ... iptables -P INPUT DROP ...
    (comp.os.linux.security)
  • Re: Problem on Looback (127.0.0.1)
    ... As part of troubleshooting I've installed an Accept-All iptables ... Make sure that you've set an ACCEPT policy on the nat and mangle tables, ... closed down my loopback interface. ...
    (comp.os.linux.networking)
  • IPTables firewall script non-funtional. Help please
    ... script to function at all has been very difficult. ... but no such luck with iptables. ... IPTABLES -t nat -F PREROUTING ... IPTABLES -t mangle -F PREROUTING ...
    (comp.os.linux.security)