yes, it's on the same box (dnsmasq and NAT/firewall) thanks, i will try it later after office hours.. ^^ i think that the problem lies on the L3Switch1 or L3Switch2.. and that i'm yet to master them..
On Thu, Feb 4, 2010 at 12:08 PM, [email protected] <[email protected]> wrote: > On Wed, Feb 3, 2010 at 6:57 PM, Kiswono Prayogo <[email protected]> wrote: >> and i add these values on the firewall, but still had no luck using dhcp: >> >> iptables -A INPUT -p UDP --dport 67:68 --sport 67:68 -j ACCEPT # dhcp > > > That looks like the rule you need, if it's on the same box running > dnsmasq. If the firewall is a separate machine, you'd need a FORWARD > chain rule for dnsmasq. > > Next step for troubleshooting is to enter that rule twice, the first > time with "-j LOG" and the second time with "-j ACCEPT" as you show > it. Then check your syslog (with dmesg) after a client tries to > obtain a DHCP address and see if the packets are being seen by > iptables. > -- Regards, Kiswono P GB
