[Sun, Dec 16, 2001 at 06:04:25AM -0000] rama seshagiri :

> this particular setting would not  allow firewall security level to be
> high. what is the solution for setting the 3 parameters to deny/reject
> and have the dhcp server working well ?

Iff you are running the DHCP  server or client on a computer that's also
acting as a firewall, you must be sure to allow DHCP packets through the
firewall.  In particular, your  firewall rules should allow packets from
IP address 0.0.0.0 to IP address 255.255.255.255 from UDP port 68 to UDP
port  67  through.   They  must  also  allow  packets  from  your  local
firewall's IP address  and UDP port 67 through to  any address your DHCP
server might serve on UDP port 68.  Packets from relay agents on port 67
to the DHCP server on port 67, and vice versa, must be permitted.

When you choose the high security  option, you are in effect denying all
UDP packets.  You can specifically let  thru UDP packets to port 67 & 68
in your firewall rules (high security option).

-- 
ragOO, VU2RGU<->http://gnuhead.dyndns.org/<->GPG: 1024D/F1624A6E 
       Helping to keep the  Air-Waves FREE         Amateur Radio 
       Helping to keep your Software  FREE       the GNU Project
       Helping to keep the  W W W     FREE  Debian GNU/${kernel}

_______________________________________________
linux-india-help mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/linux-india-help

Reply via email to