Hi, From wikipedia: All DHCP packets travel as UDP datagrams; all client-sent packets have source port 68 and destination port 67; all server-sent packets have source port 67 and destination port 68
; ) Martín Ruiz Ibersystems Solutions, SL Dpto. Redes Inalámbricas Tel. 902 430 367 669 37 95 21 Fax 93 758 63 01 http://www.ibersystems.es martinr...@ibersystems.es Este mensaje puede contener información confidencial y/o privilegiada. Si usted no es el destinatario o una persona expresamente autorizada para recibir este envío no debe utilizar, copiar, reenviar, distribuir, o en general disponer de ninguna forma de la información incluida. Si hubiera recibido este mensaje por error, sírvase informar al emisor mediante una respuesta inmediata y bórrelo, por favor. Muchas gracias. Antes de imprimir este e-mail, piensa en si es realmente necesario: El Medio Ambiente es responsabilidad de todos -----Mensaje original----- De: mikrotik-boun...@mail.butchevans.com [mailto:mikrotik-boun...@mail.butchevans.com] En nombre de William Esteves Enviado el: lunes, 27 de abril de 2009 3:28 Para: mikrotik@mail.butchevans.com Asunto: Re: [Mikrotik] Block DHCP server i got this problem too, but the solution on my network is block de mac and go to the house that are the dhcp activated, cause this traffic pass trough my aps... and im using ap2000 on towers... block this ports only on the server dont be a real solution on this case... but its can be effective if you have mk on the towers > From: co...@magtelwireless.com > Date: Thu, 9 Apr 2009 11:10:24 -0500 > To: mikrotik@mail.butchevans.com > Subject: Re: [Mikrotik] Block DHCP server > > Don't forget port 68 as well. > > On Thu, Apr 9, 2009 at 10:41 AM, Josh Luthman > <j...@imaginenetworksllc.com>wrote: > > > If I wanted to block a DHCP server at a customer's house (say a Linksys > > plugged in backwards) from the CPE (MT) what filter rules would I need? > > > > I have tried blocking port 67 both tcp and udp as well as src and dst - but > > when I know a customer is providing DHCP the packet counts never go up. I > > am using the forward chain, this customer does not have a bridge interface. > > > > Josh Luthman > > Office: 937-552-2340 > > Direct: 937-552-2343 > > 1100 Wayne St > > Suite 1337 > > Troy, OH 45373 > > > > Those who don't understand UNIX are condemned to reinvent it, poorly. > > --- Henry Spencer > > -------------- next part -------------- > > An HTML attachment was scrubbed... > > URL: < > > http://www.butchevans.com/pipermail/mikrotik/attachments/20090409/448d6dc7/attachment.html > > > > > _______________________________________________ > > Mikrotik mailing list > > Mikrotik@mail.butchevans.com > > http://www.butchevans.com/mailman/listinfo/mikrotik > > > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik > > RouterOS > > > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: > <http://www.butchevans.com/pipermail/mikrotik/attachments/20090409/e8e90666/attachment.html> > _______________________________________________ > Mikrotik mailing list > Mikrotik@mail.butchevans.com > http://www.butchevans.com/mailman/listinfo/mikrotik > > Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS _________________________________________________________________ Descubra seu lado desconhecido com o novo Windows Live! http://www.windowslive.com.br -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://www.butchevans.com/pipermail/mikrotik/attachments/20090427/411592cf/attachment.html> _______________________________________________ Mikrotik mailing list Mikrotik@mail.butchevans.com http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS _______________________________________________ Mikrotik mailing list Mikrotik@mail.butchevans.com http://www.butchevans.com/mailman/listinfo/mikrotik Visit http://blog.butchevans.com/ for tutorials related to Mikrotik RouterOS