I am experiencing a similar issue in intrepid. There does not seem to be
a way to set up Firestarter in such a way that DHCP ports are open for
services other than dhcpd.

Like ubun2-fan, I am trying to set up dnsmasq, but clients requesting
DHCP do not receive any DHCPACK or DHCPOFFER packets in response to
their DHCPDISCOVER requests when Firestarter is on. On the DHCP server
side, I see lines like this in /var/log/syslog (machine name, MAC
addresses, and IP addresses modified from original):

Feb 10 07:44:20 dhcp-server kernel: [38350.566504] Unknown InputIN=eth0
OUT= MAC=ff:ff:ff:ff:ff:ff:11:22:33:44:55:66:08:00 SRC=0.0.0.0
DST=255.255.255.255 LEN=328 TOS=0x10 PREC=0x00 TTL=64 ID=0 PROTO=UDP
SPT=68 DPT=67 LEN=308

However, when Firestarter is off, DHCPACK will happen immediately, and
/var/log/syslog records lines like:

Feb 10 07:44:51 dhcp-server dnsmasq[27685]: DHCPREQUEST(eth0) 192.168.X.X 
11:22:33:44:55:66 
Feb 10 07:44:51 dhcp-server dnsmasq[27685]: DHCPACK(eth0) 192.168.X.X 
11:22:33:44:55:66 dhcp-client

likewise DHCPOFFERS work when Firestarter is off:

(after 'sudo dhclient -r' on dhcp-client)
Feb 10 07:49:23 dhcp-server dnsmasq[27685]: DHCPRELEASE(eth0) 192.168.X.X 
11:22:33:44:55:66 

(after 'sudo dhclient' on dhcp-client)
Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPDISCOVER(eth0) 192.168.X.X 
11:22:33:44:55:66
Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPOFFER(eth0) 192.168.X.X 
11:22:33:44:55:66 
Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPREQUEST(eth0) 192.168.X.X 
11:22:33:44:55:66 
Feb 10 07:49:26 dhcp-server dnsmasq[27685]: DHCPACK(eth0) 192.168.X.X 
00:40:05:3d:b7:66 dhcp-client

If I try to set up Firestarter to allow DHCP traffic from 0.0.0.0 with
either an "allow connections from" or "allow service" rule, I get the
same behavior as if there is no such rule.

In Firestarter preferences|advanced options, the "block broadcast" boxes
are empty. Also, in preferences|network settings, I have unchecked the
"enable DHCP for the local network" box, since otherwise it complains it
can't start when the dhcpd service is stopped (which it must to be allow
dnsmasq to provide DHCP services).

I agree with ubun2-fan that having some option on Firestarter to let
this work correctly would be nice. It seems like it should be possible,
as it obviously works fine when using dhcpd to provide DHCP services.

FYI for anyone with the same issues, I had to enter the following
statement in a terminal window:

sudo iptables -A INPUT --in-interface ethX --protocol udp -s 0.0.0.0
--source-port 68 -d 255.255.255.255 --destination-port 67 -j ACCEPT

replacing "ethX" with the interface that's appropriate for your setup
(whichever one handles the local LAN).

I'm not sure if it will work in the /etc/firestarter/user-pre file, but
this clearly indicates where the problem is.

-- 
dnsmasq's dhcp blocked to clients by firestarter
https://bugs.launchpad.net/bugs/242869
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to