Re: dhcp and iptables

2017-08-15 Thread Henning Follmann
On Tue, Aug 15, 2017 at 07:07:41PM +1000, Zenaan Harkness wrote: > On Tue, Aug 15, 2017 at 10:42:42AM +0200, Pascal Hambourg wrote: > > Le 15/08/2017 à 10:03, Bonno Bloksma a écrit : > > > > > > Can someone help me to understand this? Why does DHCP work when the > > > iptable lines looks like in

Re: dhcp and iptables

2017-08-15 Thread Pascal Hambourg
Le 15/08/2017 à 11:07, Zenaan Harkness a écrit : On Tue, Aug 15, 2017 at 10:42:42AM +0200, Pascal Hambourg wrote: DHCP software usually use the raw network interface, by-passing the IP stack and iptables rules. Would one "configure" DHCP firewalling with ebtables ebtables works only on a b

Re: dhcp and iptables

2017-08-15 Thread Zenaan Harkness
On Tue, Aug 15, 2017 at 10:42:42AM +0200, Pascal Hambourg wrote: > Le 15/08/2017 à 10:03, Bonno Bloksma a écrit : > > > > Can someone help me to understand this? Why does DHCP work when the iptable > > lines looks like in the first example > > DHCP software usually use the raw network interface,

Re: dhcp and iptables

2017-08-15 Thread Pascal Hambourg
Le 15/08/2017 à 10:03, Bonno Bloksma a écrit : Can someone help me to understand this? Why does DHCP work when the iptable lines looks like in the first example DHCP software usually use the raw network interface, by-passing the IP stack and iptables rules.

dhcp and iptables

2017-08-15 Thread Bonno Bloksma
Hi, I have a Linux machine that used to be a router as well so it used to have multiple interfaces. My firewall script used to have special lines to not accept certain traffic on the outside interface. Nowadays the machine is just doing DHCP stuff on the internal network and all is fine, except