Re: iptables vs DHCP

[racke@linuxia.de (Stefan Hornburg Racke)]

"Justin R. Miller" <incanus@codesorcery.net> writes:

> Said Harald Skoglund on Tue, Mar 05, 2002 at 11:53:39AM +0100:
> 
> > > Does anybody use iptables in a DHCP network? I want to know how
> > > would be some rule in this case...
> > 
> > iptables -A  INPUT -p UDP -s <dhcp-server> --sport 67 --dport 68 -j
> > ACCEPT
> 
> Here's what firestarter seems to add for DHCP:
> 
> ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0          tcp dpts:67:68 
> ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0          udp dpts:67:68 
> 
> I suppose it could be a bit more restrictive than that...

Please note that dhcpd is not affected by iptables, because it listens
directly to the packets (like tcpdump does).

Ciao
        Racke

-- 
Think of it !

For projects and other business stuff please refer to COBOLT NetServices
(URL: http://www.cobolt.net; Email: info@cobolt.net; Phone: 0041-1-3884400)