i had the same problem when i was using a dynamic ip. you need to allow udp traffic (and perhaps tcp) from bootps (port 67) to bootpc (port 68), and from bootpc to bootps.
something like: $bootps="66.66.0.0/18" # the more specific you can get, the better the security!! iptables -A INPUT -p udp -s $bootps --sport bootps -d $myhost --dport bootpc -j ACCEPT iptables -A INPUT -p tcp -s $bootps --sport bootps -d $myhost --dport bootpc -j ACCEPT iptables -A INPUT -p udp -s $myhost--sport bootpc -d $bootps --dport bootps -j ACCEPT iptables -A INPUT -p tcp -s $myhost--sport bootpc -d $bootps --dport bootps -j ACCEPT the initial dialog is occuring when the system is booted tand before the firewall is in started. the firewall is blocking this little protocol exchange when the renew occurs. the lease eventually times out since it can't be renewed. hth, cliff Darrell Dieringer wrote: > Indeed, I _do_ have the the dhcp client daemon running, bound to eth0 > (my external interface). It appears as though it is launched as part > of "ifup eth0". Though I certainly wouldn't rule out having something > broken. -- ___cliff [EMAIL PROTECTED]http://www.genwax.com/
