• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

Automatic rules for DHCP client on $wan interface

Scheduled Pinned Locked Moved Firewalling
2 Posts 2 Posters 1.9k Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • A
    andrewp
    last edited by Jul 28, 2006, 8:54 AM Jul 28, 2006, 8:39 AM

    While browsing through rules.debug on RELENG_1_SNAPSHOT-07-23-2006 I came across following two
    rules for the $wan interface:

    block in log quick on $wan proto udp from any port = 67 to 192.168.2.0/24 port = 68 label "allow dhcp client out wan"

    pass in quick on $wan proto udp from any port = 67 to any port = 68 label "allow dhcp client out wan"

    It's not very clear to me why there is no similar block rule for the OPT1 (192.168.3.0/24) interface?
    What is the purpose of this block rule?
    And why they both commented as "allow dhcp client out wan"?

    1 Reply Last reply Reply Quote 0
    • S
      sullrich
      last edited by Jul 28, 2006, 4:08 PM

      The rules label was incorrect.  That is now fixed.

      These rules where inherited from m0n0wall:

      allow our DHCP client out to the WAN

      XXX - should be more restrictive

      (not possible at the moment - need 'me' like in ipfw)

      pass out quick on $wanif proto udp from any port = 68 to any port = 67
      block in $log quick on $wanif proto udp from any port = 67 to $lansa/$lansn port = 68
      pass in quick on $wanif proto udp from any port = 67 to any port = 68

      1 Reply Last reply Reply Quote 0
      • S stephenw10 referenced this topic on Sep 18, 2022, 6:55 PM
      • S stephenw10 referenced this topic on Sep 18, 2022, 6:55 PM
      • S stephenw10 referenced this topic on Sep 18, 2022, 6:55 PM
      • S stephenw10 referenced this topic on Sep 18, 2022, 6:55 PM
      2 out of 2
      • First post
        2/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received