On Wed, Jan 04, 2017 at 06:38:30PM +0100, Archimede Pitagorico wrote: > I have another question however about this: > > ISC's dhcp server uses a lower-level network model than dnsmasq, and can > work despite iptables rules to the contrary. > How can an app bypass the kernel firewall? Can you please suggest a > reference for me to understand better?
Depending on how it's packaged, it can use something like libpcap to access networking information, similar to how tcpdump works. Some distributors also ship their dhcpd packages with install-time scripts that molest your firewall rules to ensure it works. khm _______________________________________________ Dnsmasq-discuss mailing list Dnsmasq-discuss@lists.thekelleys.org.uk http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss
