Automatic rules for DHCP client on $wan interface
-
While browsing through rules.debug on RELENG_1_SNAPSHOT-07-23-2006 I came across following two
rules for the $wan interface:block in log quick on $wan proto udp from any port = 67 to 192.168.2.0/24 port = 68 label "allow dhcp client out wan"
pass in quick on $wan proto udp from any port = 67 to any port = 68 label "allow dhcp client out wan"
It's not very clear to me why there is no similar block rule for the OPT1 (192.168.3.0/24) interface?
What is the purpose of this block rule?
And why they both commented as "allow dhcp client out wan"? -
The rules label was incorrect. That is now fixed.
These rules where inherited from m0n0wall:
allow our DHCP client out to the WAN
XXX - should be more restrictive
(not possible at the moment - need 'me' like in ipfw)
pass out quick on $wanif proto udp from any port = 68 to any port = 67
block in $log quick on $wanif proto udp from any port = 67 to $lansa/$lansn port = 68
pass in quick on $wanif proto udp from any port = 67 to any port = 68 -
-
-
-