Re: iptables not logging or dhcp-client lying?
Olaf Meeuwissen wrote:
> Basically, I'd like to keep the setup as closed as possible so I make
> a hole in /etc/dhclient-enter-hooks during the PREINIT stage to let
> the DHCPDISCOVER broadcast out (and a reply back in eventually, taking
> this one step at a time ;-). At least, that's what I thought I should
> do, but I noticed that packets are not logged!
I think (but not sure) DHCP client is using (so called) raw sockets
which are below the layer where iptables is in the kernel. That's why
iptables is unable to see the packets.
(There is an option for Raw sockets in the kernel, and it can be used
only with root privileges.)
KoGa
--
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: