I am experiencing a similar issue in intrepid. There does not seem to be a way to set up Firestarter in such a way that DHCP ports are open for services other than dhcpd.
Like ubun2-fan, I am trying to set up dnsmasq, but clients requesting DHCP do not receive any DHCPACK or DHCPOFFER packets in response to their DHCPDISCOVER requests when Firestarter is on. On the DHCP server side, I see lines like this in /var/log/syslog (machine name, MAC addresses, and IP addresses modified from original): Feb 10 07:44:20 dhcp-server kernel: [38350.566504] Unknown InputIN=eth0 OUT= MAC=ff:ff:ff:ff:ff:ff:11:22:33:44:55:66:08:00 SRC=0.0.0.0 DST=255.255.255.255 LEN=328 TOS=0x10 PREC=0x00 TTL=64 ID=0 PROTO=UDP SPT=68 DPT=67 LEN=308 However, when Firestarter is off, DHCPACK will happen immediately, and /var/log/syslog records lines like: Feb 10 07:44:51 dhcp-server dnsmasq[27685]: DHCPREQUEST(eth0) 192.168.X.X 11:22:33:44:55:66 Feb 10 07:44:51 dhcp-server dnsmasq[27685]: DHCPACK(eth0) 192.168.X.X 11:22:33:44:55:66 dhcp-client likewise DHCPOFFERS work when Firestarter is off: (after 'sudo dhclient -r' on dhcp-client) Feb 10 07:49:23 dhcp-server dnsmasq[27685]: DHCPRELEASE(eth0) 192.168.X.X 11:22:33:44:55:66 (after 'sudo dhclient' on dhcp-client) Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPDISCOVER(eth0) 192.168.X.X 11:22:33:44:55:66 Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPOFFER(eth0) 192.168.X.X 11:22:33:44:55:66 Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPREQUEST(eth0) 192.168.X.X 11:22:33:44:55:66 Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPACK(eth0) 192.168.X.X 00:40:05:3d:b7:66 dhcp-client If I try to set up Firestarter to allow DHCP traffic from 0.0.0.0 with either an "allow connections from" or "allow service" rule, I get the same behavior as if there is no such rule. In Firestarter preferences|advanced options, the "block broadcast" boxes are empty. Also, in preferences|network settings, I have unchecked the "enable DHCP for the local network" box, since otherwise it complains it can't start when the dhcpd service is stopped (which it must to be allow dnsmasq to provide DHCP services). I agree with ubun2-fan that having some option on Firestarter to let this work correctly would be nice. It seems like it should be possible, as it obviously works fine when using dhcpd to provide DHCP services. FYI for anyone with the same issues, I had to enter the following statement in a terminal window: sudo iptables -A INPUT --in-interface ethX --protocol udp -s 0.0.0.0 --source-port 68 -d 255.255.255.255 --destination-port 67 -j ACCEPT replacing "ethX" with the interface that's appropriate for your setup (whichever one handles the local LAN). I'm not sure if it will work in the /etc/firestarter/user-pre file, but this clearly indicates where the problem is. -- dnsmasq's dhcp blocked to clients by firestarter https://bugs.launchpad.net/bugs/242869 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs