This is exactly my problem with Bering and Dachstein (but not with Eigerstein!).
Is it too lazy of me to ask someone to offer a script line that will allow packets from 10.96.4.1 for Shorewall and Dachstein?? I have a couple of questions though that might help my understanding of this whole thing. One, how does this impact on my internal DHCP server? I'm using the default 192.168.1.x subnet. And two, does this mean the firewall loads before DHCLient runs? Might be a silly question because I guess I wouldn't be getting this problem if the order was reverses? And just one more thing. Is there a config file that controls the order the packages boot in?? Thanks folks. David Pitts IT Services Manager Reid Library University of Western Australia Ph: 61 (08) 9380 3492 Fax: 61 (08) 9380 1012 Email: [EMAIL PROTECTED] -----Original Message----- From: guitarlynn [mailto:[EMAIL PROTECTED]] Sent: Monday, 22 July 2002 5:17 AM To: [EMAIL PROTECTED] Subject: Re: [leaf-user] Bering/Shorewall question On Sunday 21 July 2002 16:02, Paul M. Wright, Jr. wrote: > Lynn - > > I'm curious as to your reasoning on this. Doesn't the DHCP lease > request occur before the firewall rules are started? > > My ISP is using an RFC1918 DHCP server and I get and maintain a lease > even with the default Shorewall settings. Paul, There are tons of posts to the mailing list (even within the last day or rwo) from people without your experience. Tom also appears to think that this shouldn't happen (on lease renewal's anyway). I dunno why you haven't had any problems with this. Personally, my cox dhcp server is a 172.19.x.x server and pump won't renew the lease w/o allowing the address. -- ~Lynn Avants aka Guitarlynn guitarlynn at users.sourceforge.net http://leaf.sourceforge.net If linux isn't the answer, you've probably got the wrong question! ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html