Re: iptables vs DHCP

["Justin R. Miller" <incanus@codesorcery.net>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Said Harald Skoglund on Tue, Mar 05, 2002 at 11:53:39AM +0100:

> > Does anybody use iptables in a DHCP network? I want to know how
> > would be some rule in this case...
> 
> iptables -A  INPUT -p UDP -s <dhcp-server> --sport 67 --dport 68 -j
> ACCEPT

Here's what firestarter seems to add for DHCP:

ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0          tcp dpts:67:68 
ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0          udp dpts:67:68 

I suppose it could be a bit more restrictive than that...

- -- 
[!] Justin R. Miller <incanus@codesorcery.net>
    PGP 0xC9C40C31 -=- http://codesorcery.net

    http://www.cnn.com/2002/ALLPOLITICS/01/29/inv.terror.probe/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8hNko94d6K8nEDDERAtcsAJ4s2naFDOIRFCFr2rMvkNPTN0rcGACfSKCZ
gEKNCTtUPr7iORbMm/acZ1g=
=qN0g
-----END PGP SIGNATURE-----